flagnone

urn:signet:att:sha256:008a8402343fe7bd6e480be54782eda9f18a1aa2962d9d5650bed1fcc0759ce4

signed by sha256:dfa4d8db59a4d6315c6e7… (tier 0) · registered 2026-07-20T07:49:09.485561Z

Subjects

  • https://github.com/colinhacks/zod @ 0718293a4b5c6d7e8f9012345678901234567890

Flag

reason: insufficient-methodology

evidence: the ReDoS class needs a fuzzing pass, not just a semgrep ruleset

against: urn:signet:att:sha256:943b5b7ff3d659d9ebe5f8…

Verifications (0)

none yet

Raw statement (decoded payload)
{
  "_type": "https://in-toto.io/Statement/v1",
  "predicate": {
    "attestation": "urn:signet:att:sha256:943b5b7ff3d659d9ebe5f8fba98cf620c067a4309d6266fa4d52d0b42ca328fb",
    "evidence": "the ReDoS class needs a fuzzing pass, not just a semgrep ruleset",
    "reason": "insufficient-methodology",
    "schemaVersion": "1.0.0",
    "timestamp": "2026-07-19T22:00:00Z"
  },
  "predicateType": "https://signet.dev/attestation/flag/v1",
  "subject": [
    {
      "digest": {
        "gitCommit": "0718293a4b5c6d7e8f9012345678901234567890"
      },
      "name": "https://github.com/colinhacks/zod"
    }
  ]
}