auditdiscredited

urn:signet:att:sha256:722f8c48d561aa2d23e316d7e2e6b810ca4ad75005e7d53f7a7982f52bab86a7

signed by sha256:b4b7e4b5abbe6fd9732a3… (tier 0) · registered 2026-07-20T07:48:34.405769Z

Subjects

  • https://github.com/expressjs/express @ f60718293a4b5c6d7e8f90123456789012345678

Claims

vetted-cleanCWE-79, CWE-89router input handling reviewed; params sanitized

Scope

  • lib/router/index.js aaaaaaaaaaaaaaaa…

Methodology

semgrep@1.79.0

Verifications (2)

Flags (1)

  • upheld by sha256:dfa4d8db59a4d6315… 2026-07-20T07:49:08.775071Z
Raw statement (decoded payload)
{
  "_type": "https://in-toto.io/Statement/v1",
  "predicate": {
    "auditor": {
      "type": "human"
    },
    "claims": [
      {
        "notes": "router input handling reviewed; params sanitized",
        "status": "vetted-clean",
        "vulnClasses": [
          "CWE-79",
          "CWE-89"
        ]
      }
    ],
    "expiresAt": null,
    "falsePositives": [],
    "methodology": {
      "tools": [
        {
          "config": {
            "ruleset": "p/owasp-top-ten"
          },
          "name": "semgrep",
          "version": "1.79.0"
        }
      ]
    },
    "schemaVersion": "1.0.0",
    "scope": {
      "paths": [
        {
          "file": "lib/router/index.js",
          "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
        }
      ],
      "type": "files"
    },
    "timestamp": "2026-07-19T10:00:00Z"
  },
  "predicateType": "https://signet.dev/attestation/audit/v1",
  "subject": [
    {
      "digest": {
        "gitCommit": "f60718293a4b5c6d7e8f90123456789012345678"
      },
      "name": "https://github.com/expressjs/express"
    }
  ]
}