← Back to search

@sanctuary-framework/mcp-server

GitHub Actions Scanned 23d ago

Your agent, your machine, your keys. An MCP server that adds encrypted state, approval gates, and a portable identity to any AI agent.

npm ↗
? Not scanned yet

Versions

1.7.2latest
Jul 28, 2026
1.7.0
Jul 26, 2026
1.6.1
Jul 2, 2026
1.6.0
Jul 1, 2026
1.5.0
Jun 30, 2026
+ show 68 moreshow less
1.4.0
Jun 16, 2026
1.3.3
May 26, 2026
1.3.2
May 23, 2026
1.3.1
May 22, 2026
1.3.0
May 22, 2026
1.3.0-rc.2
May 17, 2026
1.3.0-rc.1
May 13, 2026
1.2.17
May 13, 2026
1.2.16
May 13, 2026
1.2.15
May 12, 2026
1.2.14
May 12, 2026
1.2.13
May 12, 2026
1.2.12
May 12, 2026
1.2.11
May 12, 2026
1.2.10
May 12, 2026
1.2.9
May 12, 2026
1.2.8
May 12, 2026
1.2.7
May 10, 2026
1.2.6
May 10, 2026
1.2.5
May 10, 2026
1.2.4
May 10, 2026
1.2.3
May 10, 2026
1.2.2
May 9, 2026
1.2.1
May 9, 2026
1.2.0
May 4, 2026
1.1.7
Apr 28, 2026
1.1.6
Apr 28, 2026
1.1.5
Apr 27, 2026
1.1.4
Apr 27, 2026
1.1.3
Apr 27, 2026
1.1.2
Apr 27, 2026
1.1.1
Apr 27, 2026
1.1.0
Apr 26, 2026
1.0.0-rc.2
Apr 23, 2026
1.0.0-rc.1
Apr 23, 2026
0.10.6
Apr 20, 2026
0.10.5
Apr 20, 2026
0.10.4
Apr 20, 2026
0.10.3
Apr 19, 2026
0.10.2
Apr 19, 2026
0.10.1
Apr 19, 2026
0.10.0
Apr 19, 2026
0.8.0
Apr 16, 2026
0.7.0
Apr 8, 2026
0.6.1
Apr 5, 2026
0.5.16
Apr 4, 2026
0.5.15
Apr 4, 2026
0.5.14
Apr 3, 2026
0.5.13
Apr 3, 2026
0.5.12
Apr 3, 2026
0.5.11
Apr 3, 2026
0.5.10
Apr 3, 2026
0.5.9
Apr 3, 2026
0.5.8
Apr 2, 2026
0.5.7
Apr 2, 2026
0.5.6
Apr 2, 2026
0.5.5
Apr 2, 2026
0.5.4
Apr 2, 2026
0.5.3
Apr 2, 2026
0.5.2
Apr 2, 2026
0.5.1
Apr 2, 2026
0.5.0
Apr 1, 2026
0.4.2
Apr 1, 2026
0.4.1
Apr 1, 2026
0.4.0
Apr 1, 2026
0.3.1
Mar 30, 2026
0.3.0
Mar 28, 2026
0.2.0
Mar 28, 2026

Tools 0

No tools indexed yet.

Permissions 4

network medium
Server uses network capabilities via: fetch(), http, https, net
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs/promises, open(), os, path, pathlib, shutil, tempfile
shell high
Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync(), subprocess
env_vars low
Server uses env_vars capabilities via: os.environ, os.getenv(), process.env

Scan Findings 181

medium
Permission: network access detected permission_analyzer · 90%
high
Hardcoded OAuth client secret in eriknewton-sanctuary-framework-f27f542/scripts/synthetic-coverage/fixtures/proxy/proxy-env-isolation.ts auth_checker · 95%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 56 direct dependencies dependency_analyzer · 90%
medium
Vulnerable dependency: cryptography@50.0.0 \ (GHSA-3ww4-gg4f-jr7f) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@50.0.0 \ (GHSA-9v9h-cgj8-h64p) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@50.0.0 \ (GHSA-hggm-jpg3-v476) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@50.0.0 \ (GHSA-jwv3-5hgf-82ww) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@50.0.0 \ (GHSA-m2h6-j472-rp4c) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@50.0.0 \ (GHSA-m959-cc7f-wv43) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@50.0.0 \ (GHSA-q3cj-2r34-2cwc) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@50.0.0 \ (GHSA-r6ph-v2qm-q3c2) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@50.0.0 \ (PYSEC-2017-8) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@50.0.0 \ (PYSEC-2021-62) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@50.0.0 \ (PYSEC-2026-1283) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@50.0.0 \ (PYSEC-2026-1285) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@50.0.0 \ (PYSEC-2026-2141) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@50.0.0 \ (PYSEC-2026-35) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@50.0.0 \ (PYSEC-2026-3553) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@50.0.0 \ (PYSEC-2026-3554) dependency_analyzer · 95%
medium
Vulnerable dependency: click@8.4.2 \ (PYSEC-2026-2132) dependency_analyzer · 95%
medium
Vulnerable dependency: simplejson@4.1.1 \ (GHSA-9772-cwx9-r4cj) dependency_analyzer · 95%
medium
Vulnerable dependency: simplejson@4.1.1 \ (PYSEC-2026-921) dependency_analyzer · 95%
medium
Buffer.from base64 in eriknewton-sanctuary-framework-f27f542/server/scripts/sign-reference-plugin.mjs:174 entropy_analyzer · 75%
medium
Buffer.from base64 in eriknewton-sanctuary-framework-f27f542/server/scripts/sign-reference-plugin.mjs:175 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/sign-release-manifest.test.ts:55 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/release-manifest.test.ts:41 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/release-manifest.test.ts:43 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/identity-did-key.test.ts:39 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/identity-did-key.test.ts:46 entropy_analyzer · 70%
medium
Buffer.from base64 in eriknewton-sanctuary-framework-f27f542/server/test/composition/production-pipeline.test.ts:442 entropy_analyzer · 75%
medium
Buffer.from base64 in eriknewton-sanctuary-framework-f27f542/server/test/composition/production-caller-tightening.test.ts:64 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/egress-gate/release-barrier.test.ts:125 entropy_analyzer · 70%
medium
Buffer.from base64 in eriknewton-sanctuary-framework-f27f542/server/test/egress-gate/gate-credential.test.ts:105 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/hub/fortress-tier1.test.ts:176 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/recognition/did-web-fortress-config.test.ts:72 entropy_analyzer · 70%
medium
Buffer.from base64 in eriknewton-sanctuary-framework-f27f542/server/test/transparency/anchor-verify.test.ts:361 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/transparency/fake-rekor-log.ts:22 entropy_analyzer · 70%
medium
Buffer.from base64 in eriknewton-sanctuary-framework-f27f542/server/test/transparency/anchoring.test.ts:346 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/structure/cross-file-contract-pins.test.ts:499 entropy_analyzer · 70%
high
Long unicode escape chain in eriknewton-sanctuary-framework-f27f542/server/test/security/injection-unicode.test.ts:232 entropy_analyzer · 80%
medium
Buffer.from base64 in eriknewton-sanctuary-framework-f27f542/server/test/security/tamper-detection.test.ts:51 entropy_analyzer · 75%
medium
Buffer.from base64 in eriknewton-sanctuary-framework-f27f542/server/test/security/tamper-detection.test.ts:74 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/principal-policy/posture-exclusive-egress-cap.test.ts:233 entropy_analyzer · 70%
medium
Buffer.from base64 in eriknewton-sanctuary-framework-f27f542/server/test/cli/license.test.ts:149 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/cli/exit-export-did-web-auto-include.test.ts:156 entropy_analyzer · 70%
medium
Buffer.from base64 in eriknewton-sanctuary-framework-f27f542/server/test/cli/fleet.test.ts:387 entropy_analyzer · 75%
medium
Buffer.from base64 in eriknewton-sanctuary-framework-f27f542/server/test/cli/fleet.test.ts:487 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/wrap/castle-wall-banner-probe.test.ts:1056 entropy_analyzer · 70%
medium
High-entropy string (6.00 bits/char) in eriknewton-sanctuary-framework-f27f542/server/test/handshake/handshake.test.ts:464 entropy_analyzer · 54%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/dashboard/v1_1/privacy-safety.test.ts:89 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/dashboard/v1_1/privacy-safety.test.ts:95 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/dashboard/v1_1/privacy-safety.test.ts:131 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/dashboard/v1_1/privacy-safety.test.ts:153 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:19 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:20 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:21 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:29 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:31 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:32 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:36 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:37 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:38 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:39 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:40 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:41 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:42 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:43 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:44 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:45 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:46 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:47 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:48 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:49 entropy_analyzer · 70%
medium
Buffer.from base64 in eriknewton-sanctuary-framework-f27f542/server/src/egress-gate/gate-credential.ts:210 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:50 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:51 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:52 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:53 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:54 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:55 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:56 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:57 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:58 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:59 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:60 entropy_analyzer · 70%
medium
Buffer.from base64 in eriknewton-sanctuary-framework-f27f542/server/src/core/encoding.ts:26 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:61 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:62 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:63 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:64 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:65 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:66 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:67 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:68 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:69 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:70 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:71 entropy_analyzer · 70%
medium
High-entropy string (5.86 bits/char) in eriknewton-sanctuary-framework-f27f542/server/src/core/identity.ts:20 entropy_analyzer · 52%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:72 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:73 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:74 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:75 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:76 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:77 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:78 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:79 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:80 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:81 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:82 entropy_analyzer · 70%
medium
Buffer.from base64 in eriknewton-sanctuary-framework-f27f542/server/src/transparency/rekor-client.ts:283 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:83 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:84 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:85 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:86 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:87 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:88 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:89 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:90 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:91 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:92 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:93 entropy_analyzer · 70%
medium
Buffer.from base64 in eriknewton-sanctuary-framework-f27f542/server/src/transparency/offline-cli.ts:324 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:94 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:95 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:96 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:97 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:98 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:99 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:100 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:101 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:102 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:103 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:104 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/src/transparency/anchor.ts:174 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:105 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:106 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:107 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:108 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:109 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:110 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:111 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:112 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:113 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:114 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:115 entropy_analyzer · 70%
medium
Buffer.from base64 in eriknewton-sanctuary-framework-f27f542/server/src/transparency/anchor-verify.ts:233 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:116 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:117 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:118 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/unit/core/ml-dsa65-kat.test.ts:119 entropy_analyzer · 70%
medium
Buffer.from base64 in eriknewton-sanctuary-framework-f27f542/server/test/castle-wall/runtime/manifest-parity-vector.test.ts:146 entropy_analyzer · 75%
medium
Buffer.from base64 in eriknewton-sanctuary-framework-f27f542/server/test/castle-wall/runtime/manifest-parity-vector.test.ts:219 entropy_analyzer · 75%
medium
Buffer.from base64 in eriknewton-sanctuary-framework-f27f542/server/test/castle-wall/runtime/manifest-parity-vector.test.ts:292 entropy_analyzer · 75%
medium
Buffer.from base64 in eriknewton-sanctuary-framework-f27f542/server/test/castle-wall/runtime/manifest-parity-vector.test.ts:350 entropy_analyzer · 75%
medium
Buffer.from base64 in eriknewton-sanctuary-framework-f27f542/server/test/castle-wall/runtime/arm-lease-parity-vector.test.ts:51 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/test/castle-wall/runtime/manifest-publisher.test.ts:272 entropy_analyzer · 70%
medium
Buffer.from base64 in eriknewton-sanctuary-framework-f27f542/server/src/substrate/manifest.ts:312 entropy_analyzer · 75%
medium
Buffer.from base64 in eriknewton-sanctuary-framework-f27f542/server/src/egress-gate/liveness-oracle.ts:328 entropy_analyzer · 75%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/src/transparency/anchor-verify.ts:86 entropy_analyzer · 70%
medium
Buffer.from base64 in eriknewton-sanctuary-framework-f27f542/server/src/security/injection-detector.ts:740 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in eriknewton-sanctuary-framework-f27f542/server/src/disclosure/zk-proofs.ts:141 entropy_analyzer · 70%
medium
Buffer.from base64 in eriknewton-sanctuary-framework-f27f542/server/src/agent-native/cooperative-surface.ts:390 entropy_analyzer · 75%
medium
Buffer.from base64 in eriknewton-sanctuary-framework-f27f542/server/src/substrate/reference-plugin/bundled-plugins.ts:116 entropy_analyzer · 75%
medium
Buffer.from base64 in eriknewton-sanctuary-framework-f27f542/server/src/substrate/reference-plugin/bundled-plugins.ts:260 entropy_analyzer · 75%
medium
Buffer.from base64 in eriknewton-sanctuary-framework-f27f542/server/src/substrate/reference-plugin/blocklist.ts:253 entropy_analyzer · 75%
medium
Buffer.from base64 in eriknewton-sanctuary-framework-f27f542/quickstart/src/identity.ts:31 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (95) manifest_parser · 80%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 611 components sbom_generator · 100%
critical
GitHub Personal Access Token found in eriknewton-sanctuary-framework-f27f542/.gitleaks.toml secret_scanner · 95%
high
Slack Token found in eriknewton-sanctuary-framework-f27f542/.gitleaks.toml secret_scanner · 90%
critical
AWS Access Key ID found in eriknewton-sanctuary-framework-f27f542/server/src/sdw/write-gate.ts secret_scanner · 95%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%