{ "schemaVersion": 1, "schedule": { "utc": "Monday 00:00", "singapore": "Monday 08:00", "rotation": [ "core", "python-services" ] }, "runs": [ { "schemaVersion": 1, "runId": 39263770023, "attempt": 1, "commit": "f1bce8598af04e22313f9b7ed37a4fc616988617", "date": "2026-10-19T13:52:44.399Z", "profile": "polyglot-midcorp", "configuration": { "name": "Aster Software", "description": "Fictional small software company processing synthetic orders and maintaining payment, identity and archive code.", "isolation": "Internal Docker Compose network, no published service ports, no production credentials or customer data.", "components": [ { "service": "compute", "role": "Orders API connected to PostgreSQL", "technology": "Node.js on Alpine Linux" }, { "service": "postgres", "role": "Orders database with restricted discovery account", "technology": "PostgreSQL 17" }, { "service": "redis", "role": "Cache with read-only discovery account", "technology": "Redis 7" }, { "service": "portal, api, legacy, hybrid, pqc", "role": "Five independently configured certificate and TLS endpoints", "technology": "OpenSSL: RSA, EC, ML-DSA, classical, hybrid and pure ML-KEM" }, { "service": "inaccessible", "role": "Intentionally inaccessible endpoint", "technology": "Negative connectivity scenario" }, { "service": "cloud", "role": "Authenticated AWS metadata, Azure contract and OCI registry simulation", "technology": "Python HTTPS server; real AWS CLI; Azure CLI shim" }, { "service": "ssh", "role": "Server-approved source inventory with pinned host key", "technology": "OpenSSH forced command and ephemeral client key" }, { "service": "init, validate", "role": "Disposable setup, actual scanners and independent evaluator", "technology": "Node.js, Python and OpenSSL" }, { "service": "monorepo", "role": "Every system the company runs, assembled from the tiers before it", "technology": "Node.js, Python, Java, PHP, Perl, C#/.NET, PowerShell, SQL, Terraform, Bicep, Docker, Kubernetes, Podman, systemd" } ], "sourceStacks": [ "Node.js payment signing, identity and archive code", "Dependency and infrastructure configurations", "Node.js orders and billing", "Python analytics", "Java 21 Spring portal", "PHP and Perl marketing site and intranet", "C#/.NET finance on SQL Server", "Docker, Kubernetes, Helm, Podman and systemd platform", "MySQL, PostgreSQL, MongoDB, Oracle and Redis", "AWS, Azure and Google Cloud" ], "credentials": "Ephemeral test keys and read-only accounts generated inside the run. No real cloud account access.", "complexityLevel": 9 }, "runtime": { "node": "24.18.0", "engine": "0.10.14" }, "status": "passed", "counts": { "passed": 350, "failed": 0, "blocked": 0 }, "metrics": { "offline": { "tp": 6, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "mcp": { "tp": 6, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "ssh": { "tp": 6, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "supplemental": { "tp": 99, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "onlinePositiveAssertions": { "tp": 16, "fp": 0, "fn": 0, "precision": 1, "recall": 1 } }, "coverage": { "offlineFilesScanned": 9, "offlineInventoryFiles": 9, "offlineFileCoverageRatio": 1, "endpointAttemptCoverageRatio": 1, "endpointsAttempted": 6, "endpointsExpected": 6, "endpointsMeasured": 5, "endpointsIndependentlyVerified": 6 }, "durationMs": 27397, "checks": [ { "id": "ssh|payments/sign.js|RSA", "status": "TP", "expectation": "e2a3acaed71b9636b7349492371b62b01ce93c7a804c7e4c1c8f6bce4033d4b5" }, { "id": "ssh|identity/sign.js|ECDSA", "status": "TP", "expectation": "607e11444277e415ca5e7523f6715d94b3b49986d34d54bb7bec1349eee18023" }, { "id": "ssh|archive/encrypt.js|AES-256", "status": "TP", "expectation": "e20ebc5698d15d7ecb5d7d8775e490ceb4a3362583871976dad8db08133bf0fd" }, { "id": "ssh|research/kem.js|ML-KEM", "status": "TP", "expectation": "a6537b86c497a0fb2541894063e016656ecaca92257b230a4f54ba6406022719" }, { "id": "ssh|archive/encrypt.js|Cryptographically secure random source", "status": "TP", "expectation": "953388514f6c6d395c4b299e4ae539857e61832afd3ed58ab97f6605aa79f0f0" }, { "id": "ssh|payments/package.json|Cryptographic dependency", "status": "TP", "expectation": "6fa70833286076bf12b3fad1372abf11f291bf2af1eabfcba542533cea6bb1e0" }, { "id": "monorepo-known-answer", "status": "pass", "expectation": "bedfabfd915ca2c570ded420aed32e5491aef19a42f8815d6bf23f82403a4eeb" }, { "id": "services/orders/payments/sign.js|RSA", "status": "TP", "expectation": "390eb3963a8629d4d86b62252fde2bdd8c7b944968d8489c848e4cf4c74e4c59" }, { "id": "services/orders/identity/sign.js|ECDSA", "status": "TP", "expectation": "558a91b7b3dc33ada74b2c24049f9bda0d540bc29c847718cc69c7ad784e6645" }, { "id": "services/orders/archive/encrypt.js|AES-256", "status": "TP", "expectation": "aed70e2336ae1af9e7e195107d02439d658a88d6154fef40caf24ab984a2e8ff" }, { "id": "services/orders/research/kem.js|ML-KEM", "status": "TP", "expectation": "f3d09237c461c47ffc0150d56407345d542c568639813a353e39091863d0d629" }, { "id": "services/orders/archive/encrypt.js|Cryptographically secure random source", "status": "TP", "expectation": "871b8c62601326e043001aacf6a71fd16d1038b746f1d325025db8b1ce374fd8" }, { "id": "services/orders/payments/package.json|Cryptographic dependency", "status": "TP", "expectation": "1ab11e721b7893eba4c0b00b525328b1002b64c75800b34499c43a2f68a590dc" }, { "id": "services/analytics/legacy.py|MD5", "status": "TP", "expectation": "fcfde9be6512bd4cb8261962c81a5284d65ba3eb972583ed0807057d8f7ff487" }, { "id": "services/portal/pom.xml|Cryptographic dependency", "status": "TP", "expectation": "51589092069564eef417454b5978380e5b8c7ca9f25a6fa3886ab08d52609ee6" }, { "id": "services/portal/src/main/java/sg/marinabay/portal/CryptoConfig.java|RSA", "status": "TP", "expectation": "03778c1726dda582a3d860eb89a21eb7f57ff79dcb59f0861814b4055ccecf63" }, { "id": "services/portal/src/main/java/sg/marinabay/portal/CryptoConfig.java|ECDSA", "status": "TP", "expectation": "52dd35b658a1dc65b8370af5a06288d886c9b7f9fd0ced21ca62c359d917c361" }, { "id": "services/portal/src/main/java/sg/marinabay/portal/CryptoConfig.java|MD5", "status": "TP", "expectation": "27f6fa1cfd3ce530dcf4d7658c0f9d4b1f5327e268846e234c3503c04d91c935" }, { "id": "services/portal/src/main/java/sg/marinabay/portal/CryptoConfig.java|AES", "status": "TP", "expectation": "2a998e7abe697521bf281670a179fe1d6b60316347407b51b5dee8026b8f557c" }, { "id": "services/portal/src/main/java/sg/marinabay/portal/CryptoConfig.java|SHA-256 or SHA-224", "status": "TP", "expectation": "ed044e12c07d38168ac75afafbeecce64f9ce69f1f4893a559529c9314669013" }, { "id": "services/portal/src/main/java/sg/marinabay/portal/CryptoConfig.java|Cryptographically secure random source", "status": "TP", "expectation": "ba759eaa8a0f8490fe31ce74bdf97e45f63a5aaafe98f8372c47c2e28d6ced59" }, { "id": "services/portal/src/main/java/sg/marinabay/portal/KeyStoreLoader.java|Java keystore or PKCS#12", "status": "TP", "expectation": "4aca86ba1938fb8f9b4f1dba6810fe55a5bee813f00022b19116a7621340b3cc" }, { "id": "services/portal/src/main/resources/application.properties|Java keystore or PKCS#12", "status": "TP", "expectation": "2b893fb5e42d4017670d99d69e12b7ba6e684f4d2b54c41289bcd6000eec20c7" }, { "id": "services/portal/src/main/resources/application.properties|Server or proxy TLS configuration", "status": "TP", "expectation": "9bf0fd000364589b5cdcefc8aa125f7881d8ace4424ed03174ff8e98968a106f" }, { "id": "services/portal/src/main/resources/application.properties|Message broker or cache TLS", "status": "TP", "expectation": "cd780fd4cc7ca5fe6afbb40996719f21f06dbae072e7b0770849749178bc02cd" }, { "id": "services/portal/src/main/resources/server.xml|Java keystore or PKCS#12", "status": "TP", "expectation": "410369205473ec26d8e2bb76012c3081619ee1153f38459e3a1c340b86c5789b" }, { "id": "services/portal/src/main/resources/server.xml|TLS 1.0 or TLS 1.1", "status": "TP", "expectation": "d01690b39793d13207ce7c7b728b74a76c868ac1fcf8b88b61cfbe31a9cf7083" }, { "id": "services/portal/src/main/resources/server.xml|AES-128", "status": "TP", "expectation": "030c291097103136c14b96b04497f887f90ba88ee6537d231ae1b70b0056a86f" }, { "id": "sites/cms/public_html/wp-content/themes/marina/functions.php|MD5", "status": "TP", "expectation": "4d1531d5dd086d18f38603344f1c9008731934b57f62df827480d90fd7511a67" }, { "id": "sites/cms/public_html/wp-content/themes/marina/functions.php|SHA-1", "status": "TP", "expectation": "316cd1d28ddd295c78a05e544591194eb19c9091bfc77210e37ab8e57b3709a2" }, { "id": "sites/cms/public_html/wp-content/themes/marina/functions.php|AES-128", "status": "TP", "expectation": "8a0a074c66c3798378478319b381b526351f0d764735dc8656bb4216a245fc8f" }, { "id": "sites/cms/public_html/wp-content/themes/marina/functions.php|AES-256", "status": "TP", "expectation": "d614d649f498f4400582931914a76afef65fe8711cc1a45b70889a2c231bbf5b" }, { "id": "sites/cms/public_html/wp-content/themes/marina/functions.php|Cipher mode without authentication", "status": "TP", "expectation": "aaa3012b08f6d13e1c4bb48131b927679c0fa3901abac24f5ac308ede57c7250" }, { "id": "sites/cms/public_html/wp-content/themes/marina/functions.php|Deprecated or low level cryptographic API", "status": "TP", "expectation": "01805322a2a9ab934d7cbf4c6625ce336295e7851607f426caa31b7c90cd9aee" }, { "id": "sites/cms/public_html/wp-content/themes/marina/functions.php|Cryptographically secure random source", "status": "TP", "expectation": "0c974c7a43f3ac44994527600c4912ec11d9c7af03ec01f94fcbbb287993130e" }, { "id": "sites/cms/public_html/wp-content/plugins/legacy-forms/upload.php|MD5", "status": "TP", "expectation": "9c5324686575be5273d6b240ae523a6f9762adee55de953e8cf58bbcd543e55c" }, { "id": "sites/cms/public_html/wp-content/plugins/legacy-forms/upload.php|DES, 3DES, RC4, RC2 or Blowfish", "status": "TP", "expectation": "f74b366a845cd2e8947b1daac67e9ba0c0e0d0b6e128620073d7331ad402a1c1" }, { "id": "sites/cms/public_html/wp-content/plugins/legacy-forms/upload.php|Deprecated or low level cryptographic API", "status": "TP", "expectation": "c55e3fa92789fb84a1ccaed25e46ae12826fc8a7d6647f0b294ab69d37397d64" }, { "id": "sites/cms/cgi-bin/membership.pl|MD5", "status": "TP", "expectation": "aad92ab7c23d4ebf2836403b786b164d7c33d719e83745d40e1e5f727ef34dad" }, { "id": "sites/cms/cgi-bin/membership.pl|SHA-1", "status": "TP", "expectation": "bb631016a4b6ac1b67d14f2b72cb03f1be46df02e0880ffc24a0ac325d1adb69" }, { "id": "sites/cms/cgi-bin/membership.pl|Perl cryptography", "status": "TP", "expectation": "6a5a0fa2c474ae215c988f37cf7177e9aa1a86a329fb1279817b40cd273e9301" }, { "id": "sites/cms/conf/httpd.conf|DES, 3DES, RC4, RC2 or Blowfish", "status": "TP", "expectation": "ac72ac91ea8a5fc65a443f0a61b8a7a2237a66251c45297d827cd4c24447a2fe" }, { "id": "sites/cms/conf/httpd.conf|TLS 1.0 or TLS 1.1", "status": "TP", "expectation": "fbc306bb0a93b667a52fc147a1fc31b36145f78dde0b463a4fa1ae6729291773" }, { "id": "sites/cms/conf/httpd.conf|Server or proxy TLS configuration", "status": "TP", "expectation": "1e534f5bf919a5cf0f5839e16e99bedc583c5b414546a43c6ca471ed5f4dbfbf" }, { "id": "sites/cms/certs/portal.crt|Certificate material in repository", "status": "TP", "expectation": "d6e46d6eb85f0cd7df70d9d849957cb7a8f10e07ded6db9e42f0de8cae5a8c49" }, { "id": "services/finance/src/Finance.Api/Finance.Api.csproj|.NET cryptography and configuration", "status": "TP", "expectation": "3f9d7b76e54f8e6077203981a1c358910e165e2a482148641be2f7474c6d7fa1" }, { "id": "services/finance/src/Finance.Api/Finance.Api.csproj|Cryptographic dependency", "status": "TP", "expectation": "290fee6dcfc371089e1b108790d5e62938bb0817b0c269f3db99802dd5c1c68e" }, { "id": "services/finance/src/Finance.Api/appsettings.json|Java keystore or PKCS#12", "status": "TP", "expectation": "4ddf72716e19ef6f26b0e3acf7b8ea77534840625e21f831695ad4f99625ae53" }, { "id": "services/finance/src/Finance.Api/appsettings.json|JWT or JOSE signing algorithm", "status": "TP", "expectation": "d56adbe3bd176e6b61b5b03013af838e5dd0641f57244813ee441024497d210d" }, { "id": "services/finance/src/Finance.Api/Services/InvoiceSigner.cs|RSA", "status": "TP", "expectation": "ca93cfca8f4ed2088c494f334e89566a930b6e79b8d792de71d43503b205bb86" }, { "id": "services/finance/src/Finance.Api/Services/InvoiceSigner.cs|MD5", "status": "TP", "expectation": "48376f2e3d4260d22a7a4ff1428a48233ae27959483a9bfb829ba0444221df9f" }, { "id": "services/finance/src/Finance.Api/Services/InvoiceSigner.cs|AES", "status": "TP", "expectation": "e66ea7ea432ecdfafed1e3fff5ac6becf9a689f988c768863933d2314c78e6f9" }, { "id": "services/finance/src/Finance.Api/Services/InvoiceSigner.cs|Cipher mode without authentication", "status": "TP", "expectation": "90e615daa4b4bdb77fda4a5c346d3e30c3006008f21014c1c4a94c5322d2eea9" }, { "id": "services/finance/src/Finance.Api/Services/InvoiceSigner.cs|.NET cryptography and configuration", "status": "TP", "expectation": "3862d25b40be7e9d66aaa7a5fdad34996502d2fa34222331c733ec3b6b24c65f" }, { "id": "services/finance/src/Finance.Api/Services/LegacyCrypto.cs|.NET cryptography and configuration", "status": "TP", "expectation": "0e466333512d0a44f561eff5158d193e482927dc96ea83b12b79e9ae77d62e20" }, { "id": "services/finance/src/Finance.Api/Services/LegacyCrypto.cs|Cipher mode without authentication", "status": "TP", "expectation": "b9afa9eb345010b7aa76b713b2d6c4575ae95607f4059c5cc453716ccc1c18cf" }, { "id": "services/finance/src/Finance.Api/Services/LegacyCrypto.cs|SHA-1", "status": "TP", "expectation": "df46d909c6d245ce944bd0216de9434607255901ef0c74231c8ff23f141eb048" }, { "id": "services/finance/src/Finance.Api/Services/LegacyCrypto.cs|DES, 3DES, RC4, RC2 or Blowfish", "status": "TP", "expectation": "fb5a6151373f1fdcb3f4d57423a2a5692a84a1afa63fda7774c7fca33d569ebe" }, { "id": "services/finance/deploy/enable-legacy-tls.ps1|RSA", "status": "TP", "expectation": "4a1be7730fb031aa3a892735bc03ac700caf67a53166e89bc54316b881c6cd1a" }, { "id": "services/finance/deploy/enable-legacy-tls.ps1|Java keystore or PKCS#12", "status": "TP", "expectation": "1f398f26c2232baebee865ef1151188c203615756d4f1f9deb875a2f4e21c690" }, { "id": "services/finance/deploy/enable-legacy-tls.ps1|PowerShell cryptography", "status": "TP", "expectation": "30fc248bf0536bb5a06711e7a7167df98cb32449d8ce25568600890ee1071b34" }, { "id": "services/finance/db/schema.sql|MD5", "status": "TP", "expectation": "fd43df6a7156a87e791d2e6f06100a0863e0880973ff403a877c02480ba6c1af" }, { "id": "services/finance/db/schema.sql|SHA-1", "status": "TP", "expectation": "e273cb0c586bde8bf4abd3a7ccdcadd94785b2e36765a467bb9d6dea642eb275" }, { "id": "services/finance/src/Finance.Api/appsettings.json|TLS 1.0 or TLS 1.1", "status": "TP", "expectation": "4392a30331609e6381aedca926cfe637c9fe1b649c6323fa46cb003468ec659d" }, { "id": "services/finance/deploy/enable-legacy-tls.ps1|TLS 1.0 or TLS 1.1", "status": "TP", "expectation": "3de33af973a11144f2b1d243d0e0680408840b783a212e8f94bed07933e9a99d" }, { "id": "platform/Dockerfile|TLS 1.0 or TLS 1.1", "status": "TP", "expectation": "7a0f9129c4baae719572dbe21fa04f505cd69ee093a4dd381faf615d76dfb496" }, { "id": "platform/Dockerfile|Java keystore or PKCS#12", "status": "TP", "expectation": "940e10f83ac740e8a450d3707f86b66674a43d795b50b55ef726e1e85b03cc32" }, { "id": "platform/docker-compose.yml|TLS 1.0 or TLS 1.1", "status": "TP", "expectation": "250109e5430b3c8fdefe5d3f1f1159857d6e1c085359b977b4310663cd3e103e" }, { "id": "platform/docker-compose.yml|Java keystore or PKCS#12", "status": "TP", "expectation": "eacd2470d825fc065089b8657fa5fb8475d8ef63f8fab95d5e2698273e53b34c" }, { "id": "platform/docker-compose.yml|Server or proxy TLS configuration", "status": "TP", "expectation": "68e87bf9e301908ba70f8a9e0a574f7c85674a6b3aa6a80af3c230a62416ee69" }, { "id": "platform/k8s/deployment.yaml|TLS 1.0 or TLS 1.1", "status": "TP", "expectation": "dfb876874e91c390c667d31d8518b47ec6d2a812b20ee90c4259992a09cdf8ca" }, { "id": "platform/k8s/deployment.yaml|TLS protocol configuration", "status": "TP", "expectation": "06a3f346b7c922329578d7410c5171dcd4981277e28ab02751212b32a8e1686c" }, { "id": "platform/k8s/ingress.yaml|DES, 3DES, RC4, RC2 or Blowfish", "status": "TP", "expectation": "10527c42c39bfbd7ee855814e348cd4fa9b03870a2db1ba1be02268aec30f1e3" }, { "id": "platform/k8s/ingress.yaml|TLS 1.0 or TLS 1.1", "status": "TP", "expectation": "81ad27e927349a0dfdeb1aa6d4ccab33a87077a820a87e53fe1a2630b85210eb" }, { "id": "platform/k8s/secret.yaml|Kubernetes TLS secret or key manifest", "status": "TP", "expectation": "48c2ebd39094c5d211230df5898da6235ccb9dc0d1f839b66b8931566b1ca707" }, { "id": "platform/helm/finance/values.yaml|DES, 3DES, RC4, RC2 or Blowfish", "status": "TP", "expectation": "d2c915da3d421c0a199c753e2b092223fbc2195e0d425c0f66c2b838b6e851d7" }, { "id": "platform/helm/finance/values.yaml|TLS 1.0 or TLS 1.1", "status": "TP", "expectation": "a984f7b95e6e72255092c35b0fcf396af104f25c7cd18fb788e0276b6847d05b" }, { "id": "platform/helm/finance/values.yaml|Java keystore or PKCS#12", "status": "TP", "expectation": "bdeaefa8d8e2b8647629e71440b8c552c90ae4b3fd179b31b5ad1aebab8ddeb4" }, { "id": "platform/helm/finance/templates/deployment.yaml|TLS protocol configuration", "status": "TP", "expectation": "19181b434c74bcd331fedf7a4b5bd7711a5037eb66e4d50081a498242e7a1c37" }, { "id": "platform/deploy/systemd/finance-reports.service|DES, 3DES, RC4, RC2 or Blowfish", "status": "TP", "expectation": "5ea6d0154becec0fb81d243c484fe241a4deb110fb74a08e8e7e01db5f9fa29e" }, { "id": "platform/deploy/systemd/finance-reports.service|TLS 1.0 or TLS 1.1", "status": "TP", "expectation": "6aa996905463b9b6fb50aa71f94e318a1db4ef69fe43f050ca7085a4b6499872" }, { "id": "platform/deploy/podman/finance-api.container|TLS 1.0 or TLS 1.1", "status": "TP", "expectation": "07cbcd5a7319daa283f62a131af43c62a96dda2ef8d935528a4c8474e8b3f24c" }, { "id": "platform/deploy/podman/finance-api.container|Java keystore or PKCS#12", "status": "TP", "expectation": "89ee8a8fa95801a1a6dd9e6b657ee1b8b7949d9da3ffd6f883fc2d13a42c4ed1" }, { "id": "platform/certs/ingress.crt|Certificate material in repository", "status": "TP", "expectation": "785c0312558c69c485281cdac31798cf8814ca86167ae3df0d234fc145e0db94" }, { "id": "infra/db/mysql/my.cnf|DES, 3DES, RC4, RC2 or Blowfish", "status": "TP", "expectation": "4dac3f97b35043ec3aa1a44b178f4611cb05281a1ff2cc4d67b6fa7974139896" }, { "id": "infra/db/mysql/my.cnf|TLS 1.0 or TLS 1.1", "status": "TP", "expectation": "47d74ad7f760dc1d87c254c5b33f75c9674e1dfab4a8bada3620b350673d2b93" }, { "id": "infra/db/mysql/my.cnf|AES-256", "status": "TP", "expectation": "0ffb93beb3b0d01515d5bfb8d5b6a85133a90e7426b63b702a6272c9933cd2c7" }, { "id": "infra/db/postgresql/postgresql.conf|DES, 3DES, RC4, RC2 or Blowfish", "status": "TP", "expectation": "f1af5d54f0988aa4ac204a5447e1c5ee2d4d57a87c5fdc236c728c18e68839a6" }, { "id": "infra/db/postgresql/postgresql.conf|TLS 1.0 or TLS 1.1", "status": "TP", "expectation": "2a0e8927373f5e91de57721698ad5749c375d5f5ab4e0b0424a3b498dc4a3dc8" }, { "id": "infra/db/postgresql/postgresql.conf|TLS protocol configuration", "status": "TP", "expectation": "0f534ab935df1cba92f4b9bc19e9c29e758e57a34b05c5603be550ec61d67e49" }, { "id": "infra/db/postgresql/postgresql.conf|MD5", "status": "TP", "expectation": "6f2b725600dc4be5e70cdf53bb025f68add08afeb70dfdfcff50b65372a4d887" }, { "id": "infra/db/oracle/sqlnet.ora|DES, 3DES, RC4, RC2 or Blowfish", "status": "TP", "expectation": "8b84cfb324ef2ffc75382068ad74a8e881ae7f67891ccd725365c873fc04744e" }, { "id": "infra/db/oracle/sqlnet.ora|AES-256", "status": "TP", "expectation": "b80823d9eb2a46918bdddb85f893024f86afacdb09210e3463d5e45bec49ea83" }, { "id": "infra/db/oracle/sqlnet.ora|TLS protocol configuration", "status": "TP", "expectation": "db0e1dafabf7106131a35395a713545e39c4cc5c632f52752b501b6d039f9cf3" }, { "id": "infra/db/redis/redis.conf|DES, 3DES, RC4, RC2 or Blowfish", "status": "TP", "expectation": "611d8600a04f6cafa2c63806ba5f7c955910e2a62e20a53c5386bac1df6d9fa9" }, { "id": "infra/db/redis/redis.conf|TLS 1.0 or TLS 1.1", "status": "TP", "expectation": "b894c772466a4a2f72f0d8bf593502dbcdf5c42d99882c89f6982ea8bb3af8d5" }, { "id": "infra/cloud/app.env|TLS 1.0 or TLS 1.1", "status": "TP", "expectation": "81083a0d73695b8b57bea2644a2b80a34a21347331e1cf462e19103f202f528d" }, { "id": "infra/cloud/app.env|Hardware security module or cloud key service", "status": "TP", "expectation": "99fe5b5abca73cf637b881cd4fb16e0f5dcb97c98ec69c100dcedacd9247f977" }, { "id": "infra/cloud/app.env|Database connection TLS and sslmode", "status": "TP", "expectation": "76f771d2cebdb65224846a612f33721efa030b2e1066fcd0aaac0f894042ec48" }, { "id": "infra/cloud/aws/iam-policy.json|Cloud key management and secret stores", "status": "TP", "expectation": "92fc11524e67b65a961c912ea3a432ffda4f15a14f86acc13f664f87e1111582" }, { "id": "infra/cloud/aws/kms.tf|RSA", "status": "TP", "expectation": "6d9731310dab365e317da10cc9282d95def3d84c99508545332d560316e4d69b" }, { "id": "infra/cloud/aws/kms.tf|Hardware security module or cloud key service", "status": "TP", "expectation": "570bca9f466df3caed961410b1df86abf71d1268fae597940db52181707a2d82" }, { "id": "infra/cloud/azure/keyvault.bicep|RSA", "status": "TP", "expectation": "ab0f01d81a0810b2e2299b675bf9c0840b412d06bf23672dbabf66855683fe34" }, { "id": "infra/cloud/azure/keyvault.bicep|Hardware security module or cloud key service", "status": "TP", "expectation": "d1b54ebd9a5ad83938ab10d635649c78592f1e89d98aa47e1e93056b15fcbeef" }, { "id": "infra/cloud/gcp/kms.tf|Hardware security module or cloud key service", "status": "TP", "expectation": "77b61ccfdd14ad6aec4c27f94b9529f848f55434fcfd897f05605b444ec68bc0" }, { "id": "infra/cloud/gcp/kms.tf|Cloud key management and secret stores", "status": "TP", "expectation": "01cc3c9d003c8456c92f23555feef9a82aa0f457d7a2482257a73bb767e618aa" }, { "id": "services/orders/payments/sign.js|RSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/orders/identity/sign.js|ECDSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/orders/archive/encrypt.js|AES-256|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/orders/research/kem.js|ML-KEM|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/orders/archive/encrypt.js|Cryptographically secure random source|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/orders/payments/package.json|Cryptographic dependency|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/analytics/legacy.py|MD5|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/portal/pom.xml|Cryptographic dependency|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/portal/src/main/java/sg/marinabay/portal/CryptoConfig.java|RSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/portal/src/main/java/sg/marinabay/portal/CryptoConfig.java|ECDSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/portal/src/main/java/sg/marinabay/portal/CryptoConfig.java|MD5|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/portal/src/main/java/sg/marinabay/portal/CryptoConfig.java|AES|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/portal/src/main/java/sg/marinabay/portal/CryptoConfig.java|SHA-256 or SHA-224|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/portal/src/main/java/sg/marinabay/portal/CryptoConfig.java|Cryptographically secure random source|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/portal/src/main/java/sg/marinabay/portal/KeyStoreLoader.java|Java keystore or PKCS#12|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/portal/src/main/resources/application.properties|Java keystore or PKCS#12|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/portal/src/main/resources/application.properties|Server or proxy TLS configuration|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/portal/src/main/resources/application.properties|Message broker or cache TLS|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/portal/src/main/resources/server.xml|Java keystore or PKCS#12|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/portal/src/main/resources/server.xml|TLS 1.0 or TLS 1.1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/portal/src/main/resources/server.xml|AES-128|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "sites/cms/public_html/wp-content/themes/marina/functions.php|MD5|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "sites/cms/public_html/wp-content/themes/marina/functions.php|SHA-1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "sites/cms/public_html/wp-content/themes/marina/functions.php|AES-128|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "sites/cms/public_html/wp-content/themes/marina/functions.php|AES-256|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "sites/cms/public_html/wp-content/themes/marina/functions.php|Cipher mode without authentication|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "sites/cms/public_html/wp-content/themes/marina/functions.php|Deprecated or low level cryptographic API|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "sites/cms/public_html/wp-content/themes/marina/functions.php|Cryptographically secure random source|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "sites/cms/public_html/wp-content/plugins/legacy-forms/upload.php|MD5|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "sites/cms/public_html/wp-content/plugins/legacy-forms/upload.php|DES, 3DES, RC4, RC2 or Blowfish|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "sites/cms/public_html/wp-content/plugins/legacy-forms/upload.php|Deprecated or low level cryptographic API|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "sites/cms/cgi-bin/membership.pl|MD5|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "sites/cms/cgi-bin/membership.pl|SHA-1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "sites/cms/cgi-bin/membership.pl|Perl cryptography|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "sites/cms/conf/httpd.conf|DES, 3DES, RC4, RC2 or Blowfish|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "sites/cms/conf/httpd.conf|TLS 1.0 or TLS 1.1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "sites/cms/conf/httpd.conf|Server or proxy TLS configuration|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "sites/cms/certs/portal.crt|Certificate material in repository|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/finance/src/Finance.Api/Finance.Api.csproj|.NET cryptography and configuration|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/finance/src/Finance.Api/Finance.Api.csproj|Cryptographic dependency|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/finance/src/Finance.Api/appsettings.json|Java keystore or PKCS#12|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/finance/src/Finance.Api/appsettings.json|JWT or JOSE signing algorithm|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/finance/src/Finance.Api/Services/InvoiceSigner.cs|RSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/finance/src/Finance.Api/Services/InvoiceSigner.cs|MD5|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/finance/src/Finance.Api/Services/InvoiceSigner.cs|AES|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/finance/src/Finance.Api/Services/InvoiceSigner.cs|Cipher mode without authentication|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/finance/src/Finance.Api/Services/InvoiceSigner.cs|.NET cryptography and configuration|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/finance/src/Finance.Api/Services/LegacyCrypto.cs|.NET cryptography and configuration|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/finance/src/Finance.Api/Services/LegacyCrypto.cs|Cipher mode without authentication|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/finance/src/Finance.Api/Services/LegacyCrypto.cs|SHA-1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/finance/src/Finance.Api/Services/LegacyCrypto.cs|DES, 3DES, RC4, RC2 or Blowfish|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/finance/deploy/enable-legacy-tls.ps1|RSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/finance/deploy/enable-legacy-tls.ps1|Java keystore or PKCS#12|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/finance/deploy/enable-legacy-tls.ps1|PowerShell cryptography|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/finance/db/schema.sql|MD5|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/finance/db/schema.sql|SHA-1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/finance/src/Finance.Api/appsettings.json|TLS 1.0 or TLS 1.1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/finance/deploy/enable-legacy-tls.ps1|TLS 1.0 or TLS 1.1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "platform/Dockerfile|TLS 1.0 or TLS 1.1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "platform/Dockerfile|Java keystore or PKCS#12|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "platform/docker-compose.yml|TLS 1.0 or TLS 1.1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "platform/docker-compose.yml|Java keystore or PKCS#12|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "platform/docker-compose.yml|Server or proxy TLS configuration|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "platform/k8s/deployment.yaml|TLS 1.0 or TLS 1.1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "platform/k8s/deployment.yaml|TLS protocol configuration|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "platform/k8s/ingress.yaml|DES, 3DES, RC4, RC2 or Blowfish|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "platform/k8s/ingress.yaml|TLS 1.0 or TLS 1.1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "platform/k8s/secret.yaml|Kubernetes TLS secret or key manifest|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "platform/helm/finance/values.yaml|DES, 3DES, RC4, RC2 or Blowfish|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "platform/helm/finance/values.yaml|TLS 1.0 or TLS 1.1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "platform/helm/finance/values.yaml|Java keystore or PKCS#12|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "platform/helm/finance/templates/deployment.yaml|TLS protocol configuration|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "platform/deploy/systemd/finance-reports.service|DES, 3DES, RC4, RC2 or Blowfish|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "platform/deploy/systemd/finance-reports.service|TLS 1.0 or TLS 1.1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "platform/deploy/podman/finance-api.container|TLS 1.0 or TLS 1.1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "platform/deploy/podman/finance-api.container|Java keystore or PKCS#12|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "platform/certs/ingress.crt|Certificate material in repository|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "infra/db/mysql/my.cnf|DES, 3DES, RC4, RC2 or Blowfish|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "infra/db/mysql/my.cnf|TLS 1.0 or TLS 1.1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "infra/db/mysql/my.cnf|AES-256|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "infra/db/postgresql/postgresql.conf|DES, 3DES, RC4, RC2 or Blowfish|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "infra/db/postgresql/postgresql.conf|TLS 1.0 or TLS 1.1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "infra/db/postgresql/postgresql.conf|TLS protocol configuration|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "infra/db/postgresql/postgresql.conf|MD5|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "infra/db/oracle/sqlnet.ora|DES, 3DES, RC4, RC2 or Blowfish|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "infra/db/oracle/sqlnet.ora|AES-256|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "infra/db/oracle/sqlnet.ora|TLS protocol configuration|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "infra/db/redis/redis.conf|DES, 3DES, RC4, RC2 or Blowfish|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "infra/db/redis/redis.conf|TLS 1.0 or TLS 1.1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "infra/cloud/app.env|TLS 1.0 or TLS 1.1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "infra/cloud/app.env|Hardware security module or cloud key service|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "infra/cloud/app.env|Database connection TLS and sslmode|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "infra/cloud/aws/iam-policy.json|Cloud key management and secret stores|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "infra/cloud/aws/kms.tf|RSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "infra/cloud/aws/kms.tf|Hardware security module or cloud key service|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "infra/cloud/azure/keyvault.bicep|RSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "infra/cloud/azure/keyvault.bicep|Hardware security module or cloud key service|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "infra/cloud/gcp/kms.tf|Hardware security module or cloud key service|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "infra/cloud/gcp/kms.tf|Cloud key management and secret stores|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/orders/negative/comments.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/orders/unknown/provider.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/analytics/comments.py", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/portal/src/main/java/sg/marinabay/portal/TokenService.java", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "services/portal/src/test/java/sg/marinabay/portal/CryptoConfigTest.java", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "sites/cms/public_html/wp-config.php", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "platform/deploy/containerd/config.toml", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "infra/db/mongodb/mongod.conf", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/sign.js", "status": "pass", "expectation": "e8b23eea492794f0ab96c8733248040a339ebf48aef55d2a79e4b7c3b8748d48" }, { "id": "identity/sign.js", "status": "pass", "expectation": "661f629aa11008c66b57c76c75abb4e3c8ea187f71b79a3b76a6b94e0ffe6cb2" }, { "id": "research/kem.js", "status": "pass", "expectation": "cdd9034d18880c55d18391dac9dc846b22afd2e3228c98b6c3b39620b8be550a" }, { "id": "archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "RSA-2048-and-P256-parameters", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:identity/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:infrastructure/postgresql.conf", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:infrastructure/redis.conf", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:negative/comments.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:payments/package.json", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:payments/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:research/kem.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:unknown/provider.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/sign.js|RSA", "status": "TP", "expectation": "e2a3acaed71b9636b7349492371b62b01ce93c7a804c7e4c1c8f6bce4033d4b5" }, { "id": "identity/sign.js|ECDSA", "status": "TP", "expectation": "607e11444277e415ca5e7523f6715d94b3b49986d34d54bb7bec1349eee18023" }, { "id": "archive/encrypt.js|AES-256", "status": "TP", "expectation": "e20ebc5698d15d7ecb5d7d8775e490ceb4a3362583871976dad8db08133bf0fd" }, { "id": "research/kem.js|ML-KEM", "status": "TP", "expectation": "a6537b86c497a0fb2541894063e016656ecaca92257b230a4f54ba6406022719" }, { "id": "archive/encrypt.js|Cryptographically secure random source", "status": "TP", "expectation": "953388514f6c6d395c4b299e4ae539857e61832afd3ed58ab97f6605aa79f0f0" }, { "id": "payments/package.json|Cryptographic dependency", "status": "TP", "expectation": "6fa70833286076bf12b3fad1372abf11f291bf2af1eabfcba542533cea6bb1e0" }, { "id": "payments/sign.js|RSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "identity/sign.js|ECDSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js|AES-256|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "research/kem.js|ML-KEM|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js|Cryptographically secure random source|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/package.json|Cryptographic dependency|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "negative/comments.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "unknown/provider.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "node-forge", "status": "pass", "expectation": "aa007b9f0deb17fe214e071df0f37248e947c3f59ff1e596c7ca0584816824cf" }, { "id": "initialize", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "discovery", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "scan-project", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inventory", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "missing-project", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "missing-project-error-flag", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "mcp-cloud-aws", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-image-export", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-registry-image", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-deny-cloud-provider", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-deny-image-path", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-ssh-inventory", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-deny-ssh-target", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "unknown-tool", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "unknown-method", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/sign.js|RSA", "status": "TP", "expectation": "e2a3acaed71b9636b7349492371b62b01ce93c7a804c7e4c1c8f6bce4033d4b5" }, { "id": "identity/sign.js|ECDSA", "status": "TP", "expectation": "607e11444277e415ca5e7523f6715d94b3b49986d34d54bb7bec1349eee18023" }, { "id": "archive/encrypt.js|AES-256", "status": "TP", "expectation": "e20ebc5698d15d7ecb5d7d8775e490ceb4a3362583871976dad8db08133bf0fd" }, { "id": "research/kem.js|ML-KEM", "status": "TP", "expectation": "a6537b86c497a0fb2541894063e016656ecaca92257b230a4f54ba6406022719" }, { "id": "archive/encrypt.js|Cryptographically secure random source", "status": "TP", "expectation": "953388514f6c6d395c4b299e4ae539857e61832afd3ed58ab97f6605aa79f0f0" }, { "id": "payments/package.json|Cryptographic dependency", "status": "TP", "expectation": "6fa70833286076bf12b3fad1372abf11f291bf2af1eabfcba542533cea6bb1e0" }, { "id": "payments/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "identity/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "research/kem.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/package.json", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "portal.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "portal.aster.test|TLS 1.2", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "portal.aster.test|TLS 1.3", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "api.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "api.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|TLS 1.3", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "api.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|group", "status": "pass", "expectation": "157a98347b761dfa81d4a395d5b040c285f2d6721d079658a375df598795c117" }, { "id": "api.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "legacy.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "legacy.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|TLS 1.3", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|TLS 1.0", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "legacy.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "hybrid.aster.test|TLS 1.3", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "hybrid.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "hybrid.aster.test|pqcHybrid", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|group", "status": "pass", "expectation": "8a0cd8fba868c4b4bdf0de29b2c952d0dc5bb6ff298c03827acb3e9f974fbbef" }, { "id": "hybrid.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "pqc.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "pqc.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|TLS 1.3", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "pqc.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|group", "status": "pass", "expectation": "f2a489db5a42670d76b65f3ec708c941968ca109733076659bdf0ca97ff2c86f" }, { "id": "pqc.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "inaccessible.aster.test|measured", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "inaccessible.aster.test|conclusive", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "inaccessible.aster.test|TLS 1.3", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inaccessible.aster.test|TLS 1.2", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inaccessible.aster.test|TLS 1.1", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inaccessible.aster.test|TLS 1.0", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "offline-no-unexpected-findings", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-no-unexpected-findings", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "fixture-integrity-after-mcp", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "postgres-read-only-default", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "postgres-deny-create", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "redis-read-ping", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "redis-deny-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "container-deny-source-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "ssh-force-command-denies-arbitrary-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "ssh-host-key-mismatch-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "ssh-invalid-client-key-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws-real-cli-version-compatibility", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws|portal.aster.test", "status": "pass", "expectation": "a887ad51f9f75299a47e06924efede6006d04345b7de4871aab233fa4540a6b8" }, { "id": "aws|api.aster.test", "status": "pass", "expectation": "377dd0ed3b66e659b603f03638a73aa2185ebb419b776a1c9c877e5bc91308f9" }, { "id": "aws|payments-signing", "status": "pass", "expectation": "a887ad51f9f75299a47e06924efede6006d04345b7de4871aab233fa4540a6b8" }, { "id": "aws|identity-signing", "status": "pass", "expectation": "377dd0ed3b66e659b603f03638a73aa2185ebb419b776a1c9c877e5bc91308f9" }, { "id": "aws|orders-at-rest", "status": "pass", "expectation": "3aa56fe77893bfacbc4874dab9984c88fc4e959f236c0d3e549392c487b0ff1b" }, { "id": "aws|aster-edge", "status": "pass", "expectation": "bfcdd63a36b496b70bb81a58d598114bacb10074001179378977af362896ad7a" }, { "id": "azure|aster-vault/portal", "status": "pass", "expectation": "a887ad51f9f75299a47e06924efede6006d04345b7de4871aab233fa4540a6b8" }, { "id": "azure|aster-vault/identity", "status": "pass", "expectation": "e40b6bb5cce1aeeec63d4ef7848fd9355ba97eb65fe44e94adcf3a4230eb4ea3" }, { "id": "azure|aster-application-gateway", "status": "pass", "expectation": "bfcdd63a36b496b70bb81a58d598114bacb10074001179378977af362896ad7a" }, { "id": "aws|restricted.aster.test|must-remain-unknown", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws|incomplete-metadata|must-remain-unknown", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure|aster-vault/incomplete|must-remain-unknown", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure-restricted-vault-reported", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws-invalid-signature-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws-discovery-deny-create-key", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure-invalid-token-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure-discovery-deny-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "compute-app-connected-to-database", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registry-requires-token", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "imageExport-layers-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "imageExport-tls-config-found", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "imageExport-dependency-metadata-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registryImage-layers-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registryImage-tls-config-found", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registryImage-dependency-metadata-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" } ], "issues": [], "limitations": [ "Synthetic corpus only; no universal accuracy claim.", "Node TLS transport; deployed Worker transport is not tested by this lab.", "AWS and Azure are simulations, not real cloud accounts.", "Image limits may leave oversized entries unmeasured.", "Online positive metrics do not include all negative or categorical assertions.", "SSH scope is exported source, not host-wide discovery." ] }, { "schemaVersion": 1, "runId": 39263375964, "attempt": 1, "commit": "1c8bc9daa0ae1ff7e8a80596b933b6c759b9fad8", "date": "2026-10-19T13:49:54.791Z", "profile": "datastores-and-cloud", "configuration": { "name": "Aster Software", "description": "Fictional small software company processing synthetic orders and maintaining payment, identity and archive code.", "isolation": "Internal Docker Compose network, no published service ports, no production credentials or customer data.", "components": [ { "service": "compute", "role": "Orders API connected to PostgreSQL", "technology": "Node.js on Alpine Linux" }, { "service": "postgres", "role": "Orders database with restricted discovery account", "technology": "PostgreSQL 17" }, { "service": "redis", "role": "Cache with read-only discovery account", "technology": "Redis 7" }, { "service": "portal, api, legacy, hybrid, pqc", "role": "Five independently configured certificate and TLS endpoints", "technology": "OpenSSL: RSA, EC, ML-DSA, classical, hybrid and pure ML-KEM" }, { "service": "inaccessible", "role": "Intentionally inaccessible endpoint", "technology": "Negative connectivity scenario" }, { "service": "cloud", "role": "Authenticated AWS metadata, Azure contract and OCI registry simulation", "technology": "Python HTTPS server; real AWS CLI; Azure CLI shim" }, { "service": "ssh", "role": "Server-approved source inventory with pinned host key", "technology": "OpenSSH forced command and ephemeral client key" }, { "service": "init, validate", "role": "Disposable setup, actual scanners and independent evaluator", "technology": "Node.js, Python and OpenSSL" }, { "service": "data-and-cloud-config", "role": "Where the data lives and where the keys are held, across the three clouds the company uses", "technology": "MySQL, PostgreSQL, MongoDB, Oracle, Redis, AWS, Azure, GCP" } ], "sourceStacks": [ "Node.js payment signing, identity and archive code", "Dependency and infrastructure configurations", "MySQL/MariaDB, PostgreSQL, MongoDB, Oracle SQL*Net and Redis configuration", "AWS KMS and Secrets Manager", "Azure Key Vault Bicep", "Google Cloud KMS Terraform" ], "credentials": "Ephemeral test keys and read-only accounts generated inside the run. No real cloud account access.", "complexityLevel": 8 }, "runtime": { "node": "24.18.0", "engine": "0.10.14" }, "status": "passed", "counts": { "passed": 189, "failed": 0, "blocked": 0 }, "metrics": { "offline": { "tp": 6, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "mcp": { "tp": 6, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "ssh": { "tp": 6, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "supplemental": { "tp": 22, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "onlinePositiveAssertions": { "tp": 16, "fp": 0, "fn": 0, "precision": 1, "recall": 1 } }, "coverage": { "offlineFilesScanned": 9, "offlineInventoryFiles": 9, "offlineFileCoverageRatio": 1, "endpointAttemptCoverageRatio": 1, "endpointsAttempted": 6, "endpointsExpected": 6, "endpointsMeasured": 5, "endpointsIndependentlyVerified": 6 }, "durationMs": 20377, "checks": [ { "id": "ssh|payments/sign.js|RSA", "status": "TP", "expectation": "e2a3acaed71b9636b7349492371b62b01ce93c7a804c7e4c1c8f6bce4033d4b5" }, { "id": "ssh|identity/sign.js|ECDSA", "status": "TP", "expectation": "607e11444277e415ca5e7523f6715d94b3b49986d34d54bb7bec1349eee18023" }, { "id": "ssh|archive/encrypt.js|AES-256", "status": "TP", "expectation": "e20ebc5698d15d7ecb5d7d8775e490ceb4a3362583871976dad8db08133bf0fd" }, { "id": "ssh|research/kem.js|ML-KEM", "status": "TP", "expectation": "a6537b86c497a0fb2541894063e016656ecaca92257b230a4f54ba6406022719" }, { "id": "ssh|archive/encrypt.js|Cryptographically secure random source", "status": "TP", "expectation": "953388514f6c6d395c4b299e4ae539857e61832afd3ed58ab97f6605aa79f0f0" }, { "id": "ssh|payments/package.json|Cryptographic dependency", "status": "TP", "expectation": "6fa70833286076bf12b3fad1372abf11f291bf2af1eabfcba542533cea6bb1e0" }, { "id": "datastore-config-known-answer", "status": "pass", "expectation": "4307af0dc4779c59c83827f467f741b33d5614e6603144864ee56e8353552f97" }, { "id": "db/mysql/my.cnf|DES, 3DES, RC4, RC2 or Blowfish", "status": "TP", "expectation": "fe2fbf627386f829428270abefde9b2a50fa5718992ccb54e458979e3d22c796" }, { "id": "db/mysql/my.cnf|TLS 1.0 or TLS 1.1", "status": "TP", "expectation": "9c37263a18d0323d9dd70d0b24b2f87d5407cacfa84394d6db76e2504aa0d087" }, { "id": "db/mysql/my.cnf|AES-256", "status": "TP", "expectation": "b017f88ac537636e1588ee719f8200982860f0b8252bcc183e94373c663cee6a" }, { "id": "db/postgresql/postgresql.conf|DES, 3DES, RC4, RC2 or Blowfish", "status": "TP", "expectation": "968fe518e0ce7e16a9594efb4b068fe3ed9c73fdbe7ba3e93428d1228360a2c6" }, { "id": "db/postgresql/postgresql.conf|TLS 1.0 or TLS 1.1", "status": "TP", "expectation": "cfee1c46a3722b6ceae91f0af76d156829361a6ad112e72a91d24bd18c075e66" }, { "id": "db/postgresql/postgresql.conf|TLS protocol configuration", "status": "TP", "expectation": "ae75dbb420efe1a10cbb056e39affc467aea362d3212837488ea8948c21c3c2e" }, { "id": "db/postgresql/postgresql.conf|MD5", "status": "TP", "expectation": "ed85543de876b6e5548e047cf3ffa9988e3f2023587c87b0f09a35601dd1aff6" }, { "id": "db/oracle/sqlnet.ora|DES, 3DES, RC4, RC2 or Blowfish", "status": "TP", "expectation": "a0493f51db0c71950430a9e385adefb0df548a5397946647bd5e7356489db6b5" }, { "id": "db/oracle/sqlnet.ora|AES-256", "status": "TP", "expectation": "dd66330c5b45039a38d06988013fe693562114d97ee8d2d0cede1d5fdcadbd2a" }, { "id": "db/oracle/sqlnet.ora|TLS protocol configuration", "status": "TP", "expectation": "f995626d7686f59820788435f584dc52c082c3b61074aec6fa3af115d1792cf5" }, { "id": "db/redis/redis.conf|DES, 3DES, RC4, RC2 or Blowfish", "status": "TP", "expectation": "24ec3b9188b07584dfd7eb8c7a3c52e4c526058f965cb282f0fae6d6b55554f0" }, { "id": "db/redis/redis.conf|TLS 1.0 or TLS 1.1", "status": "TP", "expectation": "14bd46d86b2a174124dd9ae46525afa0086f20a2238712dbd752fbc41c312b16" }, { "id": "cloud/app.env|TLS 1.0 or TLS 1.1", "status": "TP", "expectation": "17843e03629a5afdf37b876bb864f47f7d54cd675ebd720d5fa2db517f979f30" }, { "id": "cloud/app.env|Hardware security module or cloud key service", "status": "TP", "expectation": "e47f9348e8f844f32e917117c852863726f21c393fe40d507e021fb5d98c0178" }, { "id": "cloud/app.env|Database connection TLS and sslmode", "status": "TP", "expectation": "21b641f4b77b02744886ecda9fbafdeb5056d9818372f8f06911aae817e4db35" }, { "id": "cloud/aws/iam-policy.json|Cloud key management and secret stores", "status": "TP", "expectation": "947994dfbe3fabfb48483e976c66ff3dc1ac48b66c311e1b61263a5b97c6eb72" }, { "id": "cloud/aws/kms.tf|RSA", "status": "TP", "expectation": "9f438c601748ed3f6d47c24f7d133cc08f13ec5f72e7cd364a2251343ceac664" }, { "id": "cloud/aws/kms.tf|Hardware security module or cloud key service", "status": "TP", "expectation": "6caeb06835f24b7e0ae5cd78ba9a283116b3c30d34fe6c8ab53acf8384f4735e" }, { "id": "cloud/azure/keyvault.bicep|RSA", "status": "TP", "expectation": "8e7a40e4f11df6e69a52d57e0a9d258b3bef3390c3fac6b87dd0b1852e10bc43" }, { "id": "cloud/azure/keyvault.bicep|Hardware security module or cloud key service", "status": "TP", "expectation": "ee523e830de68afbcebeb7a85816162aaa5bbd8704ec10d7c68fa31b367b8827" }, { "id": "cloud/gcp/kms.tf|Hardware security module or cloud key service", "status": "TP", "expectation": "3e66dc2b87ef9990923324677d1cc6b4e0f2fddc91a7557660981d6670d9f745" }, { "id": "cloud/gcp/kms.tf|Cloud key management and secret stores", "status": "TP", "expectation": "f6a5a824c635108839f9d9111e1210467e9ef820d226b8c56e50b7aee7813db2" }, { "id": "db/mysql/my.cnf|DES, 3DES, RC4, RC2 or Blowfish|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "db/mysql/my.cnf|TLS 1.0 or TLS 1.1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "db/mysql/my.cnf|AES-256|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "db/postgresql/postgresql.conf|DES, 3DES, RC4, RC2 or Blowfish|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "db/postgresql/postgresql.conf|TLS 1.0 or TLS 1.1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "db/postgresql/postgresql.conf|TLS protocol configuration|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "db/postgresql/postgresql.conf|MD5|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "db/oracle/sqlnet.ora|DES, 3DES, RC4, RC2 or Blowfish|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "db/oracle/sqlnet.ora|AES-256|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "db/oracle/sqlnet.ora|TLS protocol configuration|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "db/redis/redis.conf|DES, 3DES, RC4, RC2 or Blowfish|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "db/redis/redis.conf|TLS 1.0 or TLS 1.1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "cloud/app.env|TLS 1.0 or TLS 1.1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "cloud/app.env|Hardware security module or cloud key service|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "cloud/app.env|Database connection TLS and sslmode|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "cloud/aws/iam-policy.json|Cloud key management and secret stores|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "cloud/aws/kms.tf|RSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "cloud/aws/kms.tf|Hardware security module or cloud key service|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "cloud/azure/keyvault.bicep|RSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "cloud/azure/keyvault.bicep|Hardware security module or cloud key service|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "cloud/gcp/kms.tf|Hardware security module or cloud key service|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "cloud/gcp/kms.tf|Cloud key management and secret stores|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "db/mongodb/mongod.conf", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/sign.js", "status": "pass", "expectation": "e8b23eea492794f0ab96c8733248040a339ebf48aef55d2a79e4b7c3b8748d48" }, { "id": "identity/sign.js", "status": "pass", "expectation": "661f629aa11008c66b57c76c75abb4e3c8ea187f71b79a3b76a6b94e0ffe6cb2" }, { "id": "research/kem.js", "status": "pass", "expectation": "cdd9034d18880c55d18391dac9dc846b22afd2e3228c98b6c3b39620b8be550a" }, { "id": "archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "RSA-2048-and-P256-parameters", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:identity/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:infrastructure/postgresql.conf", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:infrastructure/redis.conf", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:negative/comments.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:payments/package.json", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:payments/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:research/kem.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:unknown/provider.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/sign.js|RSA", "status": "TP", "expectation": "e2a3acaed71b9636b7349492371b62b01ce93c7a804c7e4c1c8f6bce4033d4b5" }, { "id": "identity/sign.js|ECDSA", "status": "TP", "expectation": "607e11444277e415ca5e7523f6715d94b3b49986d34d54bb7bec1349eee18023" }, { "id": "archive/encrypt.js|AES-256", "status": "TP", "expectation": "e20ebc5698d15d7ecb5d7d8775e490ceb4a3362583871976dad8db08133bf0fd" }, { "id": "research/kem.js|ML-KEM", "status": "TP", "expectation": "a6537b86c497a0fb2541894063e016656ecaca92257b230a4f54ba6406022719" }, { "id": "archive/encrypt.js|Cryptographically secure random source", "status": "TP", "expectation": "953388514f6c6d395c4b299e4ae539857e61832afd3ed58ab97f6605aa79f0f0" }, { "id": "payments/package.json|Cryptographic dependency", "status": "TP", "expectation": "6fa70833286076bf12b3fad1372abf11f291bf2af1eabfcba542533cea6bb1e0" }, { "id": "payments/sign.js|RSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "identity/sign.js|ECDSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js|AES-256|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "research/kem.js|ML-KEM|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js|Cryptographically secure random source|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/package.json|Cryptographic dependency|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "negative/comments.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "unknown/provider.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "node-forge", "status": "pass", "expectation": "aa007b9f0deb17fe214e071df0f37248e947c3f59ff1e596c7ca0584816824cf" }, { "id": "initialize", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "discovery", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "scan-project", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inventory", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "missing-project", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "missing-project-error-flag", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "mcp-cloud-aws", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-image-export", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-registry-image", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-deny-cloud-provider", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-deny-image-path", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-ssh-inventory", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-deny-ssh-target", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "unknown-tool", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "unknown-method", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/sign.js|RSA", "status": "TP", "expectation": "e2a3acaed71b9636b7349492371b62b01ce93c7a804c7e4c1c8f6bce4033d4b5" }, { "id": "identity/sign.js|ECDSA", "status": "TP", "expectation": "607e11444277e415ca5e7523f6715d94b3b49986d34d54bb7bec1349eee18023" }, { "id": "archive/encrypt.js|AES-256", "status": "TP", "expectation": "e20ebc5698d15d7ecb5d7d8775e490ceb4a3362583871976dad8db08133bf0fd" }, { "id": "research/kem.js|ML-KEM", "status": "TP", "expectation": "a6537b86c497a0fb2541894063e016656ecaca92257b230a4f54ba6406022719" }, { "id": "archive/encrypt.js|Cryptographically secure random source", "status": "TP", "expectation": "953388514f6c6d395c4b299e4ae539857e61832afd3ed58ab97f6605aa79f0f0" }, { "id": "payments/package.json|Cryptographic dependency", "status": "TP", "expectation": "6fa70833286076bf12b3fad1372abf11f291bf2af1eabfcba542533cea6bb1e0" }, { "id": "payments/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "identity/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "research/kem.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/package.json", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "portal.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "portal.aster.test|TLS 1.2", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "portal.aster.test|TLS 1.3", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "api.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "api.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|TLS 1.3", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "api.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|group", "status": "pass", "expectation": "157a98347b761dfa81d4a395d5b040c285f2d6721d079658a375df598795c117" }, { "id": "api.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "legacy.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "legacy.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|TLS 1.3", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|TLS 1.0", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "legacy.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "hybrid.aster.test|TLS 1.3", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "hybrid.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "hybrid.aster.test|pqcHybrid", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|group", "status": "pass", "expectation": "8a0cd8fba868c4b4bdf0de29b2c952d0dc5bb6ff298c03827acb3e9f974fbbef" }, { "id": "hybrid.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "pqc.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "pqc.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|TLS 1.3", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "pqc.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|group", "status": "pass", "expectation": "f2a489db5a42670d76b65f3ec708c941968ca109733076659bdf0ca97ff2c86f" }, { "id": "pqc.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "inaccessible.aster.test|measured", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "inaccessible.aster.test|conclusive", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "inaccessible.aster.test|TLS 1.3", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inaccessible.aster.test|TLS 1.2", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inaccessible.aster.test|TLS 1.1", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inaccessible.aster.test|TLS 1.0", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "offline-no-unexpected-findings", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-no-unexpected-findings", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "fixture-integrity-after-mcp", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "postgres-read-only-default", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "postgres-deny-create", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "redis-read-ping", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "redis-deny-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "container-deny-source-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "ssh-force-command-denies-arbitrary-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "ssh-host-key-mismatch-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "ssh-invalid-client-key-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws-real-cli-version-compatibility", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws|portal.aster.test", "status": "pass", "expectation": "a887ad51f9f75299a47e06924efede6006d04345b7de4871aab233fa4540a6b8" }, { "id": "aws|api.aster.test", "status": "pass", "expectation": "377dd0ed3b66e659b603f03638a73aa2185ebb419b776a1c9c877e5bc91308f9" }, { "id": "aws|payments-signing", "status": "pass", "expectation": "a887ad51f9f75299a47e06924efede6006d04345b7de4871aab233fa4540a6b8" }, { "id": "aws|identity-signing", "status": "pass", "expectation": "377dd0ed3b66e659b603f03638a73aa2185ebb419b776a1c9c877e5bc91308f9" }, { "id": "aws|orders-at-rest", "status": "pass", "expectation": "3aa56fe77893bfacbc4874dab9984c88fc4e959f236c0d3e549392c487b0ff1b" }, { "id": "aws|aster-edge", "status": "pass", "expectation": "bfcdd63a36b496b70bb81a58d598114bacb10074001179378977af362896ad7a" }, { "id": "azure|aster-vault/portal", "status": "pass", "expectation": "a887ad51f9f75299a47e06924efede6006d04345b7de4871aab233fa4540a6b8" }, { "id": "azure|aster-vault/identity", "status": "pass", "expectation": "e40b6bb5cce1aeeec63d4ef7848fd9355ba97eb65fe44e94adcf3a4230eb4ea3" }, { "id": "azure|aster-application-gateway", "status": "pass", "expectation": "bfcdd63a36b496b70bb81a58d598114bacb10074001179378977af362896ad7a" }, { "id": "aws|restricted.aster.test|must-remain-unknown", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws|incomplete-metadata|must-remain-unknown", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure|aster-vault/incomplete|must-remain-unknown", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure-restricted-vault-reported", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws-invalid-signature-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws-discovery-deny-create-key", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure-invalid-token-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure-discovery-deny-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "compute-app-connected-to-database", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registry-requires-token", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "imageExport-layers-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "imageExport-tls-config-found", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "imageExport-dependency-metadata-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registryImage-layers-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registryImage-tls-config-found", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registryImage-dependency-metadata-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" } ], "issues": [], "limitations": [ "Synthetic corpus only; no universal accuracy claim.", "Node TLS transport; deployed Worker transport is not tested by this lab.", "AWS and Azure are simulations, not real cloud accounts.", "Image limits may leave oversized entries unmeasured.", "Online positive metrics do not include all negative or categorical assertions.", "SSH scope is exported source, not host-wide discovery." ] }, { "schemaVersion": 1, "runId": 39262817605, "attempt": 1, "commit": "fa9e2518ed895aa863461f034b729fab46482bdd", "date": "2026-10-19T13:46:15.934Z", "profile": "containers-and-vms", "configuration": { "name": "Aster Software", "description": "Fictional small software company processing synthetic orders and maintaining payment, identity and archive code.", "isolation": "Internal Docker Compose network, no published service ports, no production credentials or customer data.", "components": [ { "service": "compute", "role": "Orders API connected to PostgreSQL", "technology": "Node.js on Alpine Linux" }, { "service": "postgres", "role": "Orders database with restricted discovery account", "technology": "PostgreSQL 17" }, { "service": "redis", "role": "Cache with read-only discovery account", "technology": "Redis 7" }, { "service": "portal, api, legacy, hybrid, pqc", "role": "Five independently configured certificate and TLS endpoints", "technology": "OpenSSL: RSA, EC, ML-DSA, classical, hybrid and pure ML-KEM" }, { "service": "inaccessible", "role": "Intentionally inaccessible endpoint", "technology": "Negative connectivity scenario" }, { "service": "cloud", "role": "Authenticated AWS metadata, Azure contract and OCI registry simulation", "technology": "Python HTTPS server; real AWS CLI; Azure CLI shim" }, { "service": "ssh", "role": "Server-approved source inventory with pinned host key", "technology": "OpenSSH forced command and ephemeral client key" }, { "service": "init, validate", "role": "Disposable setup, actual scanners and independent evaluator", "technology": "Node.js, Python and OpenSSL" }, { "service": "platform-config", "role": "How every service is built, packaged and run, containerised and not", "technology": "Docker, Kubernetes, Helm, Podman, systemd, containerd" } ], "sourceStacks": [ "Node.js payment signing, identity and archive code", "Dependency and infrastructure configurations", "Docker images and Compose", "Kubernetes and Helm manifests", "Podman quadlet and systemd units", "containerd configuration" ], "credentials": "Ephemeral test keys and read-only accounts generated inside the run. No real cloud account access.", "complexityLevel": 7 }, "runtime": { "node": "24.18.0", "engine": "0.10.14" }, "status": "passed", "counts": { "passed": 183, "failed": 0, "blocked": 0 }, "metrics": { "offline": { "tp": 6, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "mcp": { "tp": 6, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "ssh": { "tp": 6, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "supplemental": { "tp": 19, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "onlinePositiveAssertions": { "tp": 16, "fp": 0, "fn": 0, "precision": 1, "recall": 1 } }, "coverage": { "offlineFilesScanned": 9, "offlineInventoryFiles": 9, "offlineFileCoverageRatio": 1, "endpointAttemptCoverageRatio": 1, "endpointsAttempted": 6, "endpointsExpected": 6, "endpointsMeasured": 5, "endpointsIndependentlyVerified": 6 }, "durationMs": 26826, "checks": [ { "id": "ssh|payments/sign.js|RSA", "status": "TP", "expectation": "e2a3acaed71b9636b7349492371b62b01ce93c7a804c7e4c1c8f6bce4033d4b5" }, { "id": "ssh|identity/sign.js|ECDSA", "status": "TP", "expectation": "607e11444277e415ca5e7523f6715d94b3b49986d34d54bb7bec1349eee18023" }, { "id": "ssh|archive/encrypt.js|AES-256", "status": "TP", "expectation": "e20ebc5698d15d7ecb5d7d8775e490ceb4a3362583871976dad8db08133bf0fd" }, { "id": "ssh|research/kem.js|ML-KEM", "status": "TP", "expectation": "a6537b86c497a0fb2541894063e016656ecaca92257b230a4f54ba6406022719" }, { "id": "ssh|archive/encrypt.js|Cryptographically secure random source", "status": "TP", "expectation": "953388514f6c6d395c4b299e4ae539857e61832afd3ed58ab97f6605aa79f0f0" }, { "id": "ssh|payments/package.json|Cryptographic dependency", "status": "TP", "expectation": "6fa70833286076bf12b3fad1372abf11f291bf2af1eabfcba542533cea6bb1e0" }, { "id": "manifest-consistency-known-answer", "status": "pass", "expectation": "a6e9f0921530a65eeb42aa8f208507ddafedc4860d6c0fffa2768777f60c75b7" }, { "id": "Dockerfile|TLS 1.0 or TLS 1.1", "status": "TP", "expectation": "ec47c0bf41cd0155d171bd5106bb9d779d535696cccce2a6f492024292fad498" }, { "id": "Dockerfile|Java keystore or PKCS#12", "status": "TP", "expectation": "97fda341412edf08a7640020b514f7a958b6942c55f10266b14d3e922b4d7ac1" }, { "id": "docker-compose.yml|TLS 1.0 or TLS 1.1", "status": "TP", "expectation": "6b4b9527469a3f11192608d7259fc3ce83d295e4586f6840c8d1e33079cfb5a0" }, { "id": "docker-compose.yml|Java keystore or PKCS#12", "status": "TP", "expectation": "03027cc30acfcd2a5d56af3c5810bdb9bc100e64003a80149ef63818f03ee8db" }, { "id": "docker-compose.yml|Server or proxy TLS configuration", "status": "TP", "expectation": "c84d3291d4ba99768826a39c30b07166ffeec1fcd1164d3b3d28e94f6658a010" }, { "id": "k8s/deployment.yaml|TLS 1.0 or TLS 1.1", "status": "TP", "expectation": "0b5e23a51346fdcc677055565c326670095ebe4d5206456f73eb68d5b62ac1bc" }, { "id": "k8s/deployment.yaml|TLS protocol configuration", "status": "TP", "expectation": "4e3464b57c6ba221bbd037c43e85355069974c5f98371ae28b81cd38caa54dce" }, { "id": "k8s/ingress.yaml|DES, 3DES, RC4, RC2 or Blowfish", "status": "TP", "expectation": "014777e936fbbb617757a05aba938d80f2b865b031af8870b60f190e5d7601b6" }, { "id": "k8s/ingress.yaml|TLS 1.0 or TLS 1.1", "status": "TP", "expectation": "5767be4675c0e4b8503cf9668bd2e46621f5ffa0d4420d9677f73f0f988fe6b1" }, { "id": "k8s/secret.yaml|Kubernetes TLS secret or key manifest", "status": "TP", "expectation": "265876e4e1534eb2f4f9c5e90f4bf9ace7df6ff5a05938f1bf896944323b5255" }, { "id": "helm/finance/values.yaml|DES, 3DES, RC4, RC2 or Blowfish", "status": "TP", "expectation": "4d025e6ab847b9485a1eeeab52cf6b6a49c20f71637c0e03ae13d23bec3353f5" }, { "id": "helm/finance/values.yaml|TLS 1.0 or TLS 1.1", "status": "TP", "expectation": "6b85d48709a5f748cfb4f81f57ea50f9e7fddc70774fad99af073c8abdb89b4c" }, { "id": "helm/finance/values.yaml|Java keystore or PKCS#12", "status": "TP", "expectation": "8d863622ef1669430879f037924effab5a067128e37ef2b3d2f58afc612e79a6" }, { "id": "helm/finance/templates/deployment.yaml|TLS protocol configuration", "status": "TP", "expectation": "633d7822af592dd80005c38bd26d8af8689f72dbb79e4b7a6d956f00eb6fa5f0" }, { "id": "deploy/systemd/finance-reports.service|DES, 3DES, RC4, RC2 or Blowfish", "status": "TP", "expectation": "06ef155366719058f0350c0100ca6fd2b25e82c665b2947e5f2c49633c88c895" }, { "id": "deploy/systemd/finance-reports.service|TLS 1.0 or TLS 1.1", "status": "TP", "expectation": "c7f71494a0f8393afbced48132aa29c631ae24145ae15b887e680e5946ac3b54" }, { "id": "deploy/podman/finance-api.container|TLS 1.0 or TLS 1.1", "status": "TP", "expectation": "029a53b73aadbe4785cf18a3b2e5c3c9bbc1ba76f735e25ef8141ad3ad5e6f1c" }, { "id": "deploy/podman/finance-api.container|Java keystore or PKCS#12", "status": "TP", "expectation": "eac478b985a6f6404751b84c3c0db1ae74322a3ea6eecda3147d50db8ccdb309" }, { "id": "certs/ingress.crt|Certificate material in repository", "status": "TP", "expectation": "3d9de196448dcf4281788f60d5b638e66e92e9a9270c09846ac5e3a762efe371" }, { "id": "Dockerfile|TLS 1.0 or TLS 1.1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "Dockerfile|Java keystore or PKCS#12|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "docker-compose.yml|TLS 1.0 or TLS 1.1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "docker-compose.yml|Java keystore or PKCS#12|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "docker-compose.yml|Server or proxy TLS configuration|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "k8s/deployment.yaml|TLS 1.0 or TLS 1.1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "k8s/deployment.yaml|TLS protocol configuration|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "k8s/ingress.yaml|DES, 3DES, RC4, RC2 or Blowfish|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "k8s/ingress.yaml|TLS 1.0 or TLS 1.1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "k8s/secret.yaml|Kubernetes TLS secret or key manifest|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "helm/finance/values.yaml|DES, 3DES, RC4, RC2 or Blowfish|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "helm/finance/values.yaml|TLS 1.0 or TLS 1.1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "helm/finance/values.yaml|Java keystore or PKCS#12|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "helm/finance/templates/deployment.yaml|TLS protocol configuration|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "deploy/systemd/finance-reports.service|DES, 3DES, RC4, RC2 or Blowfish|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "deploy/systemd/finance-reports.service|TLS 1.0 or TLS 1.1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "deploy/podman/finance-api.container|TLS 1.0 or TLS 1.1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "deploy/podman/finance-api.container|Java keystore or PKCS#12|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "certs/ingress.crt|Certificate material in repository|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "deploy/containerd/config.toml", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/sign.js", "status": "pass", "expectation": "e8b23eea492794f0ab96c8733248040a339ebf48aef55d2a79e4b7c3b8748d48" }, { "id": "identity/sign.js", "status": "pass", "expectation": "661f629aa11008c66b57c76c75abb4e3c8ea187f71b79a3b76a6b94e0ffe6cb2" }, { "id": "research/kem.js", "status": "pass", "expectation": "cdd9034d18880c55d18391dac9dc846b22afd2e3228c98b6c3b39620b8be550a" }, { "id": "archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "RSA-2048-and-P256-parameters", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:identity/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:infrastructure/postgresql.conf", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:infrastructure/redis.conf", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:negative/comments.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:payments/package.json", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:payments/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:research/kem.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:unknown/provider.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/sign.js|RSA", "status": "TP", "expectation": "e2a3acaed71b9636b7349492371b62b01ce93c7a804c7e4c1c8f6bce4033d4b5" }, { "id": "identity/sign.js|ECDSA", "status": "TP", "expectation": "607e11444277e415ca5e7523f6715d94b3b49986d34d54bb7bec1349eee18023" }, { "id": "archive/encrypt.js|AES-256", "status": "TP", "expectation": "e20ebc5698d15d7ecb5d7d8775e490ceb4a3362583871976dad8db08133bf0fd" }, { "id": "research/kem.js|ML-KEM", "status": "TP", "expectation": "a6537b86c497a0fb2541894063e016656ecaca92257b230a4f54ba6406022719" }, { "id": "archive/encrypt.js|Cryptographically secure random source", "status": "TP", "expectation": "953388514f6c6d395c4b299e4ae539857e61832afd3ed58ab97f6605aa79f0f0" }, { "id": "payments/package.json|Cryptographic dependency", "status": "TP", "expectation": "6fa70833286076bf12b3fad1372abf11f291bf2af1eabfcba542533cea6bb1e0" }, { "id": "payments/sign.js|RSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "identity/sign.js|ECDSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js|AES-256|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "research/kem.js|ML-KEM|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js|Cryptographically secure random source|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/package.json|Cryptographic dependency|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "negative/comments.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "unknown/provider.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "node-forge", "status": "pass", "expectation": "aa007b9f0deb17fe214e071df0f37248e947c3f59ff1e596c7ca0584816824cf" }, { "id": "initialize", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "discovery", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "scan-project", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inventory", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "missing-project", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "missing-project-error-flag", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "mcp-cloud-aws", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-image-export", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-registry-image", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-deny-cloud-provider", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-deny-image-path", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-ssh-inventory", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-deny-ssh-target", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "unknown-tool", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "unknown-method", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/sign.js|RSA", "status": "TP", "expectation": "e2a3acaed71b9636b7349492371b62b01ce93c7a804c7e4c1c8f6bce4033d4b5" }, { "id": "identity/sign.js|ECDSA", "status": "TP", "expectation": "607e11444277e415ca5e7523f6715d94b3b49986d34d54bb7bec1349eee18023" }, { "id": "archive/encrypt.js|AES-256", "status": "TP", "expectation": "e20ebc5698d15d7ecb5d7d8775e490ceb4a3362583871976dad8db08133bf0fd" }, { "id": "research/kem.js|ML-KEM", "status": "TP", "expectation": "a6537b86c497a0fb2541894063e016656ecaca92257b230a4f54ba6406022719" }, { "id": "archive/encrypt.js|Cryptographically secure random source", "status": "TP", "expectation": "953388514f6c6d395c4b299e4ae539857e61832afd3ed58ab97f6605aa79f0f0" }, { "id": "payments/package.json|Cryptographic dependency", "status": "TP", "expectation": "6fa70833286076bf12b3fad1372abf11f291bf2af1eabfcba542533cea6bb1e0" }, { "id": "payments/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "identity/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "research/kem.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/package.json", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "portal.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "portal.aster.test|TLS 1.2", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "portal.aster.test|TLS 1.3", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "api.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "api.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|TLS 1.3", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "api.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|group", "status": "pass", "expectation": "157a98347b761dfa81d4a395d5b040c285f2d6721d079658a375df598795c117" }, { "id": "api.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "legacy.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "legacy.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|TLS 1.3", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|TLS 1.0", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "legacy.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "hybrid.aster.test|TLS 1.3", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "hybrid.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "hybrid.aster.test|pqcHybrid", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|group", "status": "pass", "expectation": "8a0cd8fba868c4b4bdf0de29b2c952d0dc5bb6ff298c03827acb3e9f974fbbef" }, { "id": "hybrid.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "pqc.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "pqc.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|TLS 1.3", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "pqc.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|group", "status": "pass", "expectation": "f2a489db5a42670d76b65f3ec708c941968ca109733076659bdf0ca97ff2c86f" }, { "id": "pqc.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "inaccessible.aster.test|measured", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "inaccessible.aster.test|conclusive", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "inaccessible.aster.test|TLS 1.3", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inaccessible.aster.test|TLS 1.2", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inaccessible.aster.test|TLS 1.1", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inaccessible.aster.test|TLS 1.0", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "offline-no-unexpected-findings", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-no-unexpected-findings", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "fixture-integrity-after-mcp", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "postgres-read-only-default", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "postgres-deny-create", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "redis-read-ping", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "redis-deny-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "container-deny-source-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "ssh-force-command-denies-arbitrary-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "ssh-host-key-mismatch-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "ssh-invalid-client-key-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws-real-cli-version-compatibility", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws|portal.aster.test", "status": "pass", "expectation": "a887ad51f9f75299a47e06924efede6006d04345b7de4871aab233fa4540a6b8" }, { "id": "aws|api.aster.test", "status": "pass", "expectation": "377dd0ed3b66e659b603f03638a73aa2185ebb419b776a1c9c877e5bc91308f9" }, { "id": "aws|payments-signing", "status": "pass", "expectation": "a887ad51f9f75299a47e06924efede6006d04345b7de4871aab233fa4540a6b8" }, { "id": "aws|identity-signing", "status": "pass", "expectation": "377dd0ed3b66e659b603f03638a73aa2185ebb419b776a1c9c877e5bc91308f9" }, { "id": "aws|orders-at-rest", "status": "pass", "expectation": "3aa56fe77893bfacbc4874dab9984c88fc4e959f236c0d3e549392c487b0ff1b" }, { "id": "aws|aster-edge", "status": "pass", "expectation": "bfcdd63a36b496b70bb81a58d598114bacb10074001179378977af362896ad7a" }, { "id": "azure|aster-vault/portal", "status": "pass", "expectation": "a887ad51f9f75299a47e06924efede6006d04345b7de4871aab233fa4540a6b8" }, { "id": "azure|aster-vault/identity", "status": "pass", "expectation": "e40b6bb5cce1aeeec63d4ef7848fd9355ba97eb65fe44e94adcf3a4230eb4ea3" }, { "id": "azure|aster-application-gateway", "status": "pass", "expectation": "bfcdd63a36b496b70bb81a58d598114bacb10074001179378977af362896ad7a" }, { "id": "aws|restricted.aster.test|must-remain-unknown", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws|incomplete-metadata|must-remain-unknown", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure|aster-vault/incomplete|must-remain-unknown", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure-restricted-vault-reported", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws-invalid-signature-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws-discovery-deny-create-key", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure-invalid-token-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure-discovery-deny-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "compute-app-connected-to-database", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registry-requires-token", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "imageExport-layers-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "imageExport-tls-config-found", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "imageExport-dependency-metadata-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registryImage-layers-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registryImage-tls-config-found", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registryImage-dependency-metadata-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" } ], "issues": [], "limitations": [ "Synthetic corpus only; no universal accuracy claim.", "Node TLS transport; deployed Worker transport is not tested by this lab.", "AWS and Azure are simulations, not real cloud accounts.", "Image limits may leave oversized entries unmeasured.", "Online positive metrics do not include all negative or categorical assertions.", "SSH scope is exported source, not host-wide discovery." ] }, { "schemaVersion": 1, "runId": 39259959891, "attempt": 1, "commit": "8aebf54690f4cd69a60be445649b0038e15d9304", "date": "2026-10-19T13:25:56.448Z", "profile": "dotnet-windows-mssql", "configuration": { "name": "Aster Software", "description": "Fictional small software company processing synthetic orders and maintaining payment, identity and archive code.", "isolation": "Internal Docker Compose network, no published service ports, no production credentials or customer data.", "components": [ { "service": "compute", "role": "Orders API connected to PostgreSQL", "technology": "Node.js on Alpine Linux" }, { "service": "postgres", "role": "Orders database with restricted discovery account", "technology": "PostgreSQL 17" }, { "service": "redis", "role": "Cache with read-only discovery account", "technology": "Redis 7" }, { "service": "portal, api, legacy, hybrid, pqc", "role": "Five independently configured certificate and TLS endpoints", "technology": "OpenSSL: RSA, EC, ML-DSA, classical, hybrid and pure ML-KEM" }, { "service": "inaccessible", "role": "Intentionally inaccessible endpoint", "technology": "Negative connectivity scenario" }, { "service": "cloud", "role": "Authenticated AWS metadata, Azure contract and OCI registry simulation", "technology": "Python HTTPS server; real AWS CLI; Azure CLI shim" }, { "service": "ssh", "role": "Server-approved source inventory with pinned host key", "technology": "OpenSSH forced command and ephemeral client key" }, { "service": "init, validate", "role": "Disposable setup, actual scanners and independent evaluator", "technology": "Node.js, Python and OpenSSL" }, { "service": "finance-source", "role": "Finance API source, IIS host script and T-SQL schema", "technology": "C#/.NET 8, PowerShell, SQL Server T-SQL" } ], "sourceStacks": [ "Node.js payment signing, identity and archive code", "Dependency and infrastructure configurations", "C#/.NET 8 finance service", "IIS and SCHANNEL host configuration", "Microsoft SQL Server T-SQL" ], "credentials": "Ephemeral test keys and read-only accounts generated inside the run. No real cloud account access.", "complexityLevel": 6 }, "runtime": { "node": "24.18.0", "engine": "0.10.14" }, "status": "passed", "counts": { "passed": 180, "failed": 0, "blocked": 0 }, "metrics": { "offline": { "tp": 6, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "mcp": { "tp": 6, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "ssh": { "tp": 6, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "supplemental": { "tp": 18, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "onlinePositiveAssertions": { "tp": 16, "fp": 0, "fn": 0, "precision": 1, "recall": 1 } }, "coverage": { "offlineFilesScanned": 9, "offlineInventoryFiles": 9, "offlineFileCoverageRatio": 1, "endpointAttemptCoverageRatio": 1, "endpointsAttempted": 6, "endpointsExpected": 6, "endpointsMeasured": 5, "endpointsIndependentlyVerified": 6 }, "durationMs": 27547, "checks": [ { "id": "ssh|payments/sign.js|RSA", "status": "TP", "expectation": "e2a3acaed71b9636b7349492371b62b01ce93c7a804c7e4c1c8f6bce4033d4b5" }, { "id": "ssh|identity/sign.js|ECDSA", "status": "TP", "expectation": "607e11444277e415ca5e7523f6715d94b3b49986d34d54bb7bec1349eee18023" }, { "id": "ssh|archive/encrypt.js|AES-256", "status": "TP", "expectation": "e20ebc5698d15d7ecb5d7d8775e490ceb4a3362583871976dad8db08133bf0fd" }, { "id": "ssh|research/kem.js|ML-KEM", "status": "TP", "expectation": "a6537b86c497a0fb2541894063e016656ecaca92257b230a4f54ba6406022719" }, { "id": "ssh|archive/encrypt.js|Cryptographically secure random source", "status": "TP", "expectation": "953388514f6c6d395c4b299e4ae539857e61832afd3ed58ab97f6605aa79f0f0" }, { "id": "ssh|payments/package.json|Cryptographic dependency", "status": "TP", "expectation": "6fa70833286076bf12b3fad1372abf11f291bf2af1eabfcba542533cea6bb1e0" }, { "id": "openssl-digest-known-answer", "status": "pass", "expectation": "f1eeb8b50fa9ff2ad7623c8f9f5d6ca7605c84ab95e38a7b85b75a65c6d1eea7" }, { "id": "src/Finance.Api/Finance.Api.csproj|.NET cryptography and configuration", "status": "TP", "expectation": "56bffab7dcc4a31418ef37dc851d3c59994d801d3f505699570f694c3fe6c184" }, { "id": "src/Finance.Api/Finance.Api.csproj|Cryptographic dependency", "status": "TP", "expectation": "1d4601e4bad81d94bc262b35d5a50cf808b1f4a2af362e13b3242e94294b5342" }, { "id": "src/Finance.Api/appsettings.json|Java keystore or PKCS#12", "status": "TP", "expectation": "a4812df717f6912e94c87aa0680a9d6528010357628f497754651f6e2711b000" }, { "id": "src/Finance.Api/appsettings.json|JWT or JOSE signing algorithm", "status": "TP", "expectation": "a967e1337d8fa5b6ff327ff10058c5af4249e0de6bd420c8ae22c22ec0b73d76" }, { "id": "src/Finance.Api/Services/InvoiceSigner.cs|RSA", "status": "TP", "expectation": "cdfd1b1dc07ecb15197c3ba424a05bb5c09aa15dd11e72d093c89cb56ca09711" }, { "id": "src/Finance.Api/Services/InvoiceSigner.cs|MD5", "status": "TP", "expectation": "d4a4363f624aded77fe421a18e298da334b95bc98e886c204865570463e59882" }, { "id": "src/Finance.Api/Services/InvoiceSigner.cs|AES", "status": "TP", "expectation": "40c464398abb78da8cd5d35a90ea5401b0a0e3c0251a25bc07c416461721365a" }, { "id": "src/Finance.Api/Services/InvoiceSigner.cs|Cipher mode without authentication", "status": "TP", "expectation": "a9dfcd59a9f7cc2b24d32d37d0ca78fd757244625bd1f8b344cd21580d9338ba" }, { "id": "src/Finance.Api/Services/InvoiceSigner.cs|.NET cryptography and configuration", "status": "TP", "expectation": "99ace6893deac65f663996ed3a1f8a5ff2d0dae46f192311dad456e4f8da05ec" }, { "id": "src/Finance.Api/Services/LegacyCrypto.cs|.NET cryptography and configuration", "status": "TP", "expectation": "08781cd4d71b38cff895a92eb3873d3bce75fd4288a921b66db8a1194d562f64" }, { "id": "src/Finance.Api/Services/LegacyCrypto.cs|Cipher mode without authentication", "status": "TP", "expectation": "fde2ae8881ea337e362dcdbf14e95c47cc40f9aa4db58590601cc9f5ce68d567" }, { "id": "src/Finance.Api/Services/LegacyCrypto.cs|SHA-1", "status": "TP", "expectation": "daafcf371a717509d748e5a7d730e16ad9956ad15cde535ceed933532c13651b" }, { "id": "src/Finance.Api/Services/LegacyCrypto.cs|DES, 3DES, RC4, RC2 or Blowfish", "status": "TP", "expectation": "0ec2df4483f3160e2fbc10eb2e46911a145cc7641499989ec61a7e6e96810ef4" }, { "id": "deploy/enable-legacy-tls.ps1|RSA", "status": "TP", "expectation": "d9de974ec68163b7b397cbdaf69b27ed3c6bc1314b22fd4a58ac2f858e305965" }, { "id": "deploy/enable-legacy-tls.ps1|Java keystore or PKCS#12", "status": "TP", "expectation": "ae50ed22b0c5f3f0c287c9df6e84f900ed9037a36901b07763db63cd5313ab8a" }, { "id": "deploy/enable-legacy-tls.ps1|PowerShell cryptography", "status": "TP", "expectation": "4bfe1c6e25e909e34c72a788a5078dac03185df729b97b86294c1eae1606d59c" }, { "id": "db/schema.sql|MD5", "status": "TP", "expectation": "8d66912107a3e11e08cc6aaea944dc42bb5cc4f911af68c85cea738df7f9c153" }, { "id": "db/schema.sql|SHA-1", "status": "TP", "expectation": "0f8ad6d3d62b8a359131f04eb635727e1b78a1307b56c20b51d15cbde0069765" }, { "id": "src/Finance.Api/Finance.Api.csproj|.NET cryptography and configuration|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "src/Finance.Api/Finance.Api.csproj|Cryptographic dependency|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "src/Finance.Api/appsettings.json|Java keystore or PKCS#12|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "src/Finance.Api/appsettings.json|JWT or JOSE signing algorithm|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "src/Finance.Api/Services/InvoiceSigner.cs|RSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "src/Finance.Api/Services/InvoiceSigner.cs|MD5|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "src/Finance.Api/Services/InvoiceSigner.cs|AES|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "src/Finance.Api/Services/InvoiceSigner.cs|Cipher mode without authentication|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "src/Finance.Api/Services/InvoiceSigner.cs|.NET cryptography and configuration|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "src/Finance.Api/Services/LegacyCrypto.cs|.NET cryptography and configuration|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "src/Finance.Api/Services/LegacyCrypto.cs|Cipher mode without authentication|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "src/Finance.Api/Services/LegacyCrypto.cs|SHA-1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "src/Finance.Api/Services/LegacyCrypto.cs|DES, 3DES, RC4, RC2 or Blowfish|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "deploy/enable-legacy-tls.ps1|RSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "deploy/enable-legacy-tls.ps1|Java keystore or PKCS#12|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "deploy/enable-legacy-tls.ps1|PowerShell cryptography|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "db/schema.sql|MD5|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "db/schema.sql|SHA-1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/sign.js", "status": "pass", "expectation": "e8b23eea492794f0ab96c8733248040a339ebf48aef55d2a79e4b7c3b8748d48" }, { "id": "identity/sign.js", "status": "pass", "expectation": "661f629aa11008c66b57c76c75abb4e3c8ea187f71b79a3b76a6b94e0ffe6cb2" }, { "id": "research/kem.js", "status": "pass", "expectation": "cdd9034d18880c55d18391dac9dc846b22afd2e3228c98b6c3b39620b8be550a" }, { "id": "archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "RSA-2048-and-P256-parameters", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:identity/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:infrastructure/postgresql.conf", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:infrastructure/redis.conf", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:negative/comments.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:payments/package.json", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:payments/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:research/kem.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:unknown/provider.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/sign.js|RSA", "status": "TP", "expectation": "e2a3acaed71b9636b7349492371b62b01ce93c7a804c7e4c1c8f6bce4033d4b5" }, { "id": "identity/sign.js|ECDSA", "status": "TP", "expectation": "607e11444277e415ca5e7523f6715d94b3b49986d34d54bb7bec1349eee18023" }, { "id": "archive/encrypt.js|AES-256", "status": "TP", "expectation": "e20ebc5698d15d7ecb5d7d8775e490ceb4a3362583871976dad8db08133bf0fd" }, { "id": "research/kem.js|ML-KEM", "status": "TP", "expectation": "a6537b86c497a0fb2541894063e016656ecaca92257b230a4f54ba6406022719" }, { "id": "archive/encrypt.js|Cryptographically secure random source", "status": "TP", "expectation": "953388514f6c6d395c4b299e4ae539857e61832afd3ed58ab97f6605aa79f0f0" }, { "id": "payments/package.json|Cryptographic dependency", "status": "TP", "expectation": "6fa70833286076bf12b3fad1372abf11f291bf2af1eabfcba542533cea6bb1e0" }, { "id": "payments/sign.js|RSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "identity/sign.js|ECDSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js|AES-256|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "research/kem.js|ML-KEM|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js|Cryptographically secure random source|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/package.json|Cryptographic dependency|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "negative/comments.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "unknown/provider.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "node-forge", "status": "pass", "expectation": "aa007b9f0deb17fe214e071df0f37248e947c3f59ff1e596c7ca0584816824cf" }, { "id": "initialize", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "discovery", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "scan-project", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inventory", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "missing-project", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "missing-project-error-flag", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "mcp-cloud-aws", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-image-export", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-registry-image", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-deny-cloud-provider", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-deny-image-path", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-ssh-inventory", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-deny-ssh-target", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "unknown-tool", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "unknown-method", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/sign.js|RSA", "status": "TP", "expectation": "e2a3acaed71b9636b7349492371b62b01ce93c7a804c7e4c1c8f6bce4033d4b5" }, { "id": "identity/sign.js|ECDSA", "status": "TP", "expectation": "607e11444277e415ca5e7523f6715d94b3b49986d34d54bb7bec1349eee18023" }, { "id": "archive/encrypt.js|AES-256", "status": "TP", "expectation": "e20ebc5698d15d7ecb5d7d8775e490ceb4a3362583871976dad8db08133bf0fd" }, { "id": "research/kem.js|ML-KEM", "status": "TP", "expectation": "a6537b86c497a0fb2541894063e016656ecaca92257b230a4f54ba6406022719" }, { "id": "archive/encrypt.js|Cryptographically secure random source", "status": "TP", "expectation": "953388514f6c6d395c4b299e4ae539857e61832afd3ed58ab97f6605aa79f0f0" }, { "id": "payments/package.json|Cryptographic dependency", "status": "TP", "expectation": "6fa70833286076bf12b3fad1372abf11f291bf2af1eabfcba542533cea6bb1e0" }, { "id": "payments/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "identity/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "research/kem.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/package.json", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "portal.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "portal.aster.test|TLS 1.2", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "portal.aster.test|TLS 1.3", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "api.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "api.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|TLS 1.3", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "api.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|group", "status": "pass", "expectation": "157a98347b761dfa81d4a395d5b040c285f2d6721d079658a375df598795c117" }, { "id": "api.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "legacy.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "legacy.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|TLS 1.3", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|TLS 1.0", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "legacy.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "hybrid.aster.test|TLS 1.3", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "hybrid.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "hybrid.aster.test|pqcHybrid", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|group", "status": "pass", "expectation": "8a0cd8fba868c4b4bdf0de29b2c952d0dc5bb6ff298c03827acb3e9f974fbbef" }, { "id": "hybrid.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "pqc.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "pqc.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|TLS 1.3", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "pqc.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|group", "status": "pass", "expectation": "f2a489db5a42670d76b65f3ec708c941968ca109733076659bdf0ca97ff2c86f" }, { "id": "pqc.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "inaccessible.aster.test|measured", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "inaccessible.aster.test|conclusive", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "inaccessible.aster.test|TLS 1.3", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inaccessible.aster.test|TLS 1.2", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inaccessible.aster.test|TLS 1.1", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inaccessible.aster.test|TLS 1.0", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "offline-no-unexpected-findings", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-no-unexpected-findings", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "fixture-integrity-after-mcp", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "postgres-read-only-default", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "postgres-deny-create", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "redis-read-ping", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "redis-deny-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "container-deny-source-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "ssh-force-command-denies-arbitrary-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "ssh-host-key-mismatch-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "ssh-invalid-client-key-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws-real-cli-version-compatibility", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws|portal.aster.test", "status": "pass", "expectation": "a887ad51f9f75299a47e06924efede6006d04345b7de4871aab233fa4540a6b8" }, { "id": "aws|api.aster.test", "status": "pass", "expectation": "377dd0ed3b66e659b603f03638a73aa2185ebb419b776a1c9c877e5bc91308f9" }, { "id": "aws|payments-signing", "status": "pass", "expectation": "a887ad51f9f75299a47e06924efede6006d04345b7de4871aab233fa4540a6b8" }, { "id": "aws|identity-signing", "status": "pass", "expectation": "377dd0ed3b66e659b603f03638a73aa2185ebb419b776a1c9c877e5bc91308f9" }, { "id": "aws|orders-at-rest", "status": "pass", "expectation": "3aa56fe77893bfacbc4874dab9984c88fc4e959f236c0d3e549392c487b0ff1b" }, { "id": "aws|aster-edge", "status": "pass", "expectation": "bfcdd63a36b496b70bb81a58d598114bacb10074001179378977af362896ad7a" }, { "id": "azure|aster-vault/portal", "status": "pass", "expectation": "a887ad51f9f75299a47e06924efede6006d04345b7de4871aab233fa4540a6b8" }, { "id": "azure|aster-vault/identity", "status": "pass", "expectation": "e40b6bb5cce1aeeec63d4ef7848fd9355ba97eb65fe44e94adcf3a4230eb4ea3" }, { "id": "azure|aster-application-gateway", "status": "pass", "expectation": "bfcdd63a36b496b70bb81a58d598114bacb10074001179378977af362896ad7a" }, { "id": "aws|restricted.aster.test|must-remain-unknown", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws|incomplete-metadata|must-remain-unknown", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure|aster-vault/incomplete|must-remain-unknown", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure-restricted-vault-reported", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws-invalid-signature-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws-discovery-deny-create-key", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure-invalid-token-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure-discovery-deny-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "compute-app-connected-to-database", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registry-requires-token", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "imageExport-layers-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "imageExport-tls-config-found", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "imageExport-dependency-metadata-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registryImage-layers-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registryImage-tls-config-found", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registryImage-dependency-metadata-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" } ], "issues": [], "limitations": [ "Synthetic corpus only; no universal accuracy claim.", "Node TLS transport; deployed Worker transport is not tested by this lab.", "AWS and Azure are simulations, not real cloud accounts.", "Image limits may leave oversized entries unmeasured.", "Online positive metrics do not include all negative or categorical assertions.", "SSH scope is exported source, not host-wide discovery." ] }, { "schemaVersion": 1, "runId": 39258789627, "attempt": 1, "commit": "eac1d3bbbc60d477c2f35d84b25a47f1f9aa1879", "date": "2026-10-19T13:17:55.370Z", "profile": "legacy-web-perl-php", "configuration": { "name": "Aster Software", "description": "Fictional small software company processing synthetic orders and maintaining payment, identity and archive code.", "isolation": "Internal Docker Compose network, no published service ports, no production credentials or customer data.", "components": [ { "service": "compute", "role": "Orders API connected to PostgreSQL", "technology": "Node.js on Alpine Linux" }, { "service": "postgres", "role": "Orders database with restricted discovery account", "technology": "PostgreSQL 17" }, { "service": "redis", "role": "Cache with read-only discovery account", "technology": "Redis 7" }, { "service": "portal, api, legacy, hybrid, pqc", "role": "Five independently configured certificate and TLS endpoints", "technology": "OpenSSL: RSA, EC, ML-DSA, classical, hybrid and pure ML-KEM" }, { "service": "inaccessible", "role": "Intentionally inaccessible endpoint", "technology": "Negative connectivity scenario" }, { "service": "cloud", "role": "Authenticated AWS metadata, Azure contract and OCI registry simulation", "technology": "Python HTTPS server; real AWS CLI; Azure CLI shim" }, { "service": "ssh", "role": "Server-approved source inventory with pinned host key", "technology": "OpenSSH forced command and ephemeral client key" }, { "service": "init, validate", "role": "Disposable setup, actual scanners and independent evaluator", "technology": "Node.js, Python and OpenSSL" }, { "service": "cms-source", "role": "Public website and intranet source, CGI script and Apache TLS configuration", "technology": "PHP 8.3, Perl 5, Apache httpd, OpenSSL" } ], "sourceStacks": [ "Node.js payment signing, identity and archive code", "Dependency and infrastructure configurations", "PHP (WordPress style) theme and legacy plugin", "Perl CGI membership script", "Apache httpd TLS configuration and PEM certificates" ], "credentials": "Ephemeral test keys and read-only accounts generated inside the run. No real cloud account access.", "complexityLevel": 5 }, "runtime": { "node": "24.18.0", "engine": "0.10.14" }, "status": "passed", "counts": { "passed": 180, "failed": 0, "blocked": 0 }, "metrics": { "offline": { "tp": 6, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "mcp": { "tp": 6, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "ssh": { "tp": 6, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "supplemental": { "tp": 17, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "onlinePositiveAssertions": { "tp": 16, "fp": 0, "fn": 0, "precision": 1, "recall": 1 } }, "coverage": { "offlineFilesScanned": 9, "offlineInventoryFiles": 9, "offlineFileCoverageRatio": 1, "endpointAttemptCoverageRatio": 1, "endpointsAttempted": 6, "endpointsExpected": 6, "endpointsMeasured": 5, "endpointsIndependentlyVerified": 6 }, "durationMs": 24724, "checks": [ { "id": "ssh|payments/sign.js|RSA", "status": "TP", "expectation": "e2a3acaed71b9636b7349492371b62b01ce93c7a804c7e4c1c8f6bce4033d4b5" }, { "id": "ssh|identity/sign.js|ECDSA", "status": "TP", "expectation": "607e11444277e415ca5e7523f6715d94b3b49986d34d54bb7bec1349eee18023" }, { "id": "ssh|archive/encrypt.js|AES-256", "status": "TP", "expectation": "e20ebc5698d15d7ecb5d7d8775e490ceb4a3362583871976dad8db08133bf0fd" }, { "id": "ssh|research/kem.js|ML-KEM", "status": "TP", "expectation": "a6537b86c497a0fb2541894063e016656ecaca92257b230a4f54ba6406022719" }, { "id": "ssh|archive/encrypt.js|Cryptographically secure random source", "status": "TP", "expectation": "953388514f6c6d395c4b299e4ae539857e61832afd3ed58ab97f6605aa79f0f0" }, { "id": "ssh|payments/package.json|Cryptographic dependency", "status": "TP", "expectation": "6fa70833286076bf12b3fad1372abf11f291bf2af1eabfcba542533cea6bb1e0" }, { "id": "php-openssl-known-answer", "status": "pass", "expectation": "6fc19bcc0c0b53936908663d4a485f741d07c5836fcb59a2c70f0e5730caa2e8" }, { "id": "perl-digest-known-answer", "status": "pass", "expectation": "2744d75a8642b6012397dfed3002c45489b2045bd429a9b8803bf22b8bac2b14" }, { "id": "public_html/wp-content/themes/marina/functions.php|MD5", "status": "TP", "expectation": "84eea7aa40753636e237f14a68d8b23175d81fe37f6620e17beb81cc9535401d" }, { "id": "public_html/wp-content/themes/marina/functions.php|SHA-1", "status": "TP", "expectation": "3abbe2413d99847e5fabcca22c43e567d914b7738d971009c0934a29cd67aab0" }, { "id": "public_html/wp-content/themes/marina/functions.php|AES-128", "status": "TP", "expectation": "9c22c23a29b42a049195ca07b91a089517ef283a1901a0cfcc007962f8cc5f18" }, { "id": "public_html/wp-content/themes/marina/functions.php|AES-256", "status": "TP", "expectation": "ec365ee4a2757a8ba548dcbb6c21989b4b43f184d4a302f0722dd46ccf92161c" }, { "id": "public_html/wp-content/themes/marina/functions.php|Cipher mode without authentication", "status": "TP", "expectation": "a3a1399b68c149a31f0b04e7d91bed804c2ac7a88ef4c1a8045e2efed06e78e8" }, { "id": "public_html/wp-content/themes/marina/functions.php|Deprecated or low level cryptographic API", "status": "TP", "expectation": "7d5eec5cdfb9e67baedebb21314761f35d35463e97ad810b609e2d96f07235a5" }, { "id": "public_html/wp-content/themes/marina/functions.php|Cryptographically secure random source", "status": "TP", "expectation": "f24ccbc2996b8a8709600b31ed80f9c6fa2efc36fc75def73c90aec678dc503d" }, { "id": "public_html/wp-content/plugins/legacy-forms/upload.php|MD5", "status": "TP", "expectation": "59c1cbfa80561d301c362597d8d38e94964cff318969afd125797d3544882318" }, { "id": "public_html/wp-content/plugins/legacy-forms/upload.php|DES, 3DES, RC4, RC2 or Blowfish", "status": "TP", "expectation": "b115555edecf2de58d4ba5f3dd28ff9619919f62e1899bc3182841183819fec2" }, { "id": "public_html/wp-content/plugins/legacy-forms/upload.php|Deprecated or low level cryptographic API", "status": "TP", "expectation": "30edf160fa7868413914f218337f7cd18e5c671c2d349cbde80ee0ae44ec4855" }, { "id": "cgi-bin/membership.pl|MD5", "status": "TP", "expectation": "ba96373517129574393c6b76c99bc8ca1cc120124f3e13f30ac9009cd7970e94" }, { "id": "cgi-bin/membership.pl|SHA-1", "status": "TP", "expectation": "de409500eacf32f4047274d5e3e92ce83f9ef354bc65709600841cb0dc049779" }, { "id": "cgi-bin/membership.pl|Perl cryptography", "status": "TP", "expectation": "ee4f1ac2f4753c1439694507253dfbb81680e5363819022ddae42a0c951b79f2" }, { "id": "conf/httpd.conf|DES, 3DES, RC4, RC2 or Blowfish", "status": "TP", "expectation": "ab558855960d7d23bcccce0504ba150b37ee399b97a1bfd387bc8e0774ce7e5e" }, { "id": "conf/httpd.conf|TLS 1.0 or TLS 1.1", "status": "TP", "expectation": "ccfac1d983704c24ac8e305dc81699b9a62449af9af6e7a2e00cc8e15fbe2247" }, { "id": "conf/httpd.conf|Server or proxy TLS configuration", "status": "TP", "expectation": "2c7c5143443adb12b2555ac5b1da7cbc44558f35953d1b7fe4ba9a0588f60fd2" }, { "id": "certs/portal.crt|Certificate material in repository", "status": "TP", "expectation": "1b5e028c9ffc348cf858ba3b6dcd8d24a594106e1bf6b7934a860f41246cbb09" }, { "id": "public_html/wp-content/themes/marina/functions.php|MD5|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "public_html/wp-content/themes/marina/functions.php|SHA-1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "public_html/wp-content/themes/marina/functions.php|AES-128|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "public_html/wp-content/themes/marina/functions.php|AES-256|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "public_html/wp-content/themes/marina/functions.php|Cipher mode without authentication|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "public_html/wp-content/themes/marina/functions.php|Deprecated or low level cryptographic API|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "public_html/wp-content/themes/marina/functions.php|Cryptographically secure random source|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "public_html/wp-content/plugins/legacy-forms/upload.php|MD5|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "public_html/wp-content/plugins/legacy-forms/upload.php|DES, 3DES, RC4, RC2 or Blowfish|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "public_html/wp-content/plugins/legacy-forms/upload.php|Deprecated or low level cryptographic API|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "cgi-bin/membership.pl|MD5|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "cgi-bin/membership.pl|SHA-1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "cgi-bin/membership.pl|Perl cryptography|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "conf/httpd.conf|DES, 3DES, RC4, RC2 or Blowfish|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "conf/httpd.conf|TLS 1.0 or TLS 1.1|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "conf/httpd.conf|Server or proxy TLS configuration|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "certs/portal.crt|Certificate material in repository|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "public_html/wp-config.php", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/sign.js", "status": "pass", "expectation": "e8b23eea492794f0ab96c8733248040a339ebf48aef55d2a79e4b7c3b8748d48" }, { "id": "identity/sign.js", "status": "pass", "expectation": "661f629aa11008c66b57c76c75abb4e3c8ea187f71b79a3b76a6b94e0ffe6cb2" }, { "id": "research/kem.js", "status": "pass", "expectation": "cdd9034d18880c55d18391dac9dc846b22afd2e3228c98b6c3b39620b8be550a" }, { "id": "archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "RSA-2048-and-P256-parameters", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:identity/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:infrastructure/postgresql.conf", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:infrastructure/redis.conf", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:negative/comments.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:payments/package.json", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:payments/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:research/kem.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:unknown/provider.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/sign.js|RSA", "status": "TP", "expectation": "e2a3acaed71b9636b7349492371b62b01ce93c7a804c7e4c1c8f6bce4033d4b5" }, { "id": "identity/sign.js|ECDSA", "status": "TP", "expectation": "607e11444277e415ca5e7523f6715d94b3b49986d34d54bb7bec1349eee18023" }, { "id": "archive/encrypt.js|AES-256", "status": "TP", "expectation": "e20ebc5698d15d7ecb5d7d8775e490ceb4a3362583871976dad8db08133bf0fd" }, { "id": "research/kem.js|ML-KEM", "status": "TP", "expectation": "a6537b86c497a0fb2541894063e016656ecaca92257b230a4f54ba6406022719" }, { "id": "archive/encrypt.js|Cryptographically secure random source", "status": "TP", "expectation": "953388514f6c6d395c4b299e4ae539857e61832afd3ed58ab97f6605aa79f0f0" }, { "id": "payments/package.json|Cryptographic dependency", "status": "TP", "expectation": "6fa70833286076bf12b3fad1372abf11f291bf2af1eabfcba542533cea6bb1e0" }, { "id": "payments/sign.js|RSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "identity/sign.js|ECDSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js|AES-256|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "research/kem.js|ML-KEM|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js|Cryptographically secure random source|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/package.json|Cryptographic dependency|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "negative/comments.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "unknown/provider.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "node-forge", "status": "pass", "expectation": "aa007b9f0deb17fe214e071df0f37248e947c3f59ff1e596c7ca0584816824cf" }, { "id": "initialize", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "discovery", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "scan-project", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inventory", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "missing-project", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "missing-project-error-flag", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "mcp-cloud-aws", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-image-export", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-registry-image", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-deny-cloud-provider", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-deny-image-path", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-ssh-inventory", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-deny-ssh-target", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "unknown-tool", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "unknown-method", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/sign.js|RSA", "status": "TP", "expectation": "e2a3acaed71b9636b7349492371b62b01ce93c7a804c7e4c1c8f6bce4033d4b5" }, { "id": "identity/sign.js|ECDSA", "status": "TP", "expectation": "607e11444277e415ca5e7523f6715d94b3b49986d34d54bb7bec1349eee18023" }, { "id": "archive/encrypt.js|AES-256", "status": "TP", "expectation": "e20ebc5698d15d7ecb5d7d8775e490ceb4a3362583871976dad8db08133bf0fd" }, { "id": "research/kem.js|ML-KEM", "status": "TP", "expectation": "a6537b86c497a0fb2541894063e016656ecaca92257b230a4f54ba6406022719" }, { "id": "archive/encrypt.js|Cryptographically secure random source", "status": "TP", "expectation": "953388514f6c6d395c4b299e4ae539857e61832afd3ed58ab97f6605aa79f0f0" }, { "id": "payments/package.json|Cryptographic dependency", "status": "TP", "expectation": "6fa70833286076bf12b3fad1372abf11f291bf2af1eabfcba542533cea6bb1e0" }, { "id": "payments/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "identity/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "research/kem.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/package.json", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "portal.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "portal.aster.test|TLS 1.2", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "portal.aster.test|TLS 1.3", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "api.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "api.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|TLS 1.3", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "api.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|group", "status": "pass", "expectation": "157a98347b761dfa81d4a395d5b040c285f2d6721d079658a375df598795c117" }, { "id": "api.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "legacy.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "legacy.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|TLS 1.3", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|TLS 1.0", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "legacy.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "hybrid.aster.test|TLS 1.3", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "hybrid.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "hybrid.aster.test|pqcHybrid", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|group", "status": "pass", "expectation": "8a0cd8fba868c4b4bdf0de29b2c952d0dc5bb6ff298c03827acb3e9f974fbbef" }, { "id": "hybrid.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "pqc.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "pqc.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|TLS 1.3", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "pqc.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|group", "status": "pass", "expectation": "f2a489db5a42670d76b65f3ec708c941968ca109733076659bdf0ca97ff2c86f" }, { "id": "pqc.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "inaccessible.aster.test|measured", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "inaccessible.aster.test|conclusive", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "inaccessible.aster.test|TLS 1.3", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inaccessible.aster.test|TLS 1.2", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inaccessible.aster.test|TLS 1.1", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inaccessible.aster.test|TLS 1.0", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "offline-no-unexpected-findings", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-no-unexpected-findings", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "fixture-integrity-after-mcp", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "postgres-read-only-default", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "postgres-deny-create", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "redis-read-ping", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "redis-deny-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "container-deny-source-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "ssh-force-command-denies-arbitrary-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "ssh-host-key-mismatch-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "ssh-invalid-client-key-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws-real-cli-version-compatibility", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws|portal.aster.test", "status": "pass", "expectation": "a887ad51f9f75299a47e06924efede6006d04345b7de4871aab233fa4540a6b8" }, { "id": "aws|api.aster.test", "status": "pass", "expectation": "377dd0ed3b66e659b603f03638a73aa2185ebb419b776a1c9c877e5bc91308f9" }, { "id": "aws|payments-signing", "status": "pass", "expectation": "a887ad51f9f75299a47e06924efede6006d04345b7de4871aab233fa4540a6b8" }, { "id": "aws|identity-signing", "status": "pass", "expectation": "377dd0ed3b66e659b603f03638a73aa2185ebb419b776a1c9c877e5bc91308f9" }, { "id": "aws|orders-at-rest", "status": "pass", "expectation": "3aa56fe77893bfacbc4874dab9984c88fc4e959f236c0d3e549392c487b0ff1b" }, { "id": "aws|aster-edge", "status": "pass", "expectation": "bfcdd63a36b496b70bb81a58d598114bacb10074001179378977af362896ad7a" }, { "id": "azure|aster-vault/portal", "status": "pass", "expectation": "a887ad51f9f75299a47e06924efede6006d04345b7de4871aab233fa4540a6b8" }, { "id": "azure|aster-vault/identity", "status": "pass", "expectation": "e40b6bb5cce1aeeec63d4ef7848fd9355ba97eb65fe44e94adcf3a4230eb4ea3" }, { "id": "azure|aster-application-gateway", "status": "pass", "expectation": "bfcdd63a36b496b70bb81a58d598114bacb10074001179378977af362896ad7a" }, { "id": "aws|restricted.aster.test|must-remain-unknown", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws|incomplete-metadata|must-remain-unknown", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure|aster-vault/incomplete|must-remain-unknown", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure-restricted-vault-reported", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws-invalid-signature-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws-discovery-deny-create-key", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure-invalid-token-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure-discovery-deny-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "compute-app-connected-to-database", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registry-requires-token", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "imageExport-layers-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "imageExport-tls-config-found", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "imageExport-dependency-metadata-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registryImage-layers-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registryImage-tls-config-found", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registryImage-dependency-metadata-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" } ], "issues": [], "limitations": [ "Synthetic corpus only; no universal accuracy claim.", "Node TLS transport; deployed Worker transport is not tested by this lab.", "AWS and Azure are simulations, not real cloud accounts.", "Image limits may leave oversized entries unmeasured.", "Online positive metrics do not include all negative or categorical assertions.", "SSH scope is exported source, not host-wide discovery." ] }, { "schemaVersion": 1, "runId": 39195760699, "attempt": 1, "commit": "dcffceed1c2e1981cc63b7e08f643b5a36843ca4", "date": "2026-10-19T03:40:59.663Z", "profile": "core", "configuration": { "name": "Aster Software", "description": "Fictional small software company processing synthetic orders and maintaining payment, identity and archive code.", "isolation": "Internal Docker Compose network, no published service ports, no production credentials or customer data.", "components": [ { "service": "compute", "role": "Orders API connected to PostgreSQL", "technology": "Node.js on Alpine Linux" }, { "service": "postgres", "role": "Orders database with restricted discovery account", "technology": "PostgreSQL 17" }, { "service": "redis", "role": "Cache with read-only discovery account", "technology": "Redis 7" }, { "service": "portal, api, legacy, hybrid, pqc", "role": "Five independently configured certificate and TLS endpoints", "technology": "OpenSSL: RSA, EC, ML-DSA, classical, hybrid and pure ML-KEM" }, { "service": "inaccessible", "role": "Intentionally inaccessible endpoint", "technology": "Negative connectivity scenario" }, { "service": "cloud", "role": "Authenticated AWS metadata, Azure contract and OCI registry simulation", "technology": "Python HTTPS server; real AWS CLI; Azure CLI shim" }, { "service": "ssh", "role": "Server-approved source inventory with pinned host key", "technology": "OpenSSH forced command and ephemeral client key" }, { "service": "init, validate", "role": "Disposable setup, actual scanners and independent evaluator", "technology": "Node.js, Python and OpenSSL" } ], "sourceStacks": [ "Node.js payment signing, identity and archive code", "Dependency and infrastructure configurations" ], "credentials": "Ephemeral test keys and read-only accounts generated inside the run. No real cloud account access.", "complexityLevel": 2 }, "runtime": { "node": "24.18.1" }, "status": "passed", "counts": { "passed": 143, "failed": 0, "blocked": 0 }, "metrics": { "offline": { "tp": 6, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "mcp": { "tp": 6, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "ssh": { "tp": 6, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "supplemental": null, "onlinePositiveAssertions": { "tp": 16, "fp": 0, "fn": 0, "precision": 1, "recall": 1 } }, "coverage": { "offlineFilesScanned": 9, "offlineInventoryFiles": 9, "offlineFileCoverageRatio": 1, "endpointAttemptCoverageRatio": 1, "endpointsAttempted": 6, "endpointsExpected": 6, "endpointsMeasured": 5, "endpointsIndependentlyVerified": 6 }, "durationMs": 33501, "checks": [ { "id": "ssh|payments/sign.js|RSA", "status": "TP", "expectation": "e2a3acaed71b9636b7349492371b62b01ce93c7a804c7e4c1c8f6bce4033d4b5" }, { "id": "ssh|identity/sign.js|ECDSA", "status": "TP", "expectation": "607e11444277e415ca5e7523f6715d94b3b49986d34d54bb7bec1349eee18023" }, { "id": "ssh|archive/encrypt.js|AES-256", "status": "TP", "expectation": "e20ebc5698d15d7ecb5d7d8775e490ceb4a3362583871976dad8db08133bf0fd" }, { "id": "ssh|research/kem.js|ML-KEM", "status": "TP", "expectation": "a6537b86c497a0fb2541894063e016656ecaca92257b230a4f54ba6406022719" }, { "id": "ssh|archive/encrypt.js|Cryptographically secure random source", "status": "TP", "expectation": "953388514f6c6d395c4b299e4ae539857e61832afd3ed58ab97f6605aa79f0f0" }, { "id": "ssh|payments/package.json|Cryptographic dependency", "status": "TP", "expectation": "6fa70833286076bf12b3fad1372abf11f291bf2af1eabfcba542533cea6bb1e0" }, { "id": "payments/sign.js", "status": "pass", "expectation": "e8b23eea492794f0ab96c8733248040a339ebf48aef55d2a79e4b7c3b8748d48" }, { "id": "identity/sign.js", "status": "pass", "expectation": "661f629aa11008c66b57c76c75abb4e3c8ea187f71b79a3b76a6b94e0ffe6cb2" }, { "id": "research/kem.js", "status": "pass", "expectation": "cdd9034d18880c55d18391dac9dc846b22afd2e3228c98b6c3b39620b8be550a" }, { "id": "archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "RSA-2048-and-P256-parameters", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:identity/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:infrastructure/postgresql.conf", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:infrastructure/redis.conf", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:negative/comments.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:payments/package.json", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:payments/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:research/kem.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:unknown/provider.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/sign.js|RSA", "status": "TP", "expectation": "e2a3acaed71b9636b7349492371b62b01ce93c7a804c7e4c1c8f6bce4033d4b5" }, { "id": "identity/sign.js|ECDSA", "status": "TP", "expectation": "607e11444277e415ca5e7523f6715d94b3b49986d34d54bb7bec1349eee18023" }, { "id": "archive/encrypt.js|AES-256", "status": "TP", "expectation": "e20ebc5698d15d7ecb5d7d8775e490ceb4a3362583871976dad8db08133bf0fd" }, { "id": "research/kem.js|ML-KEM", "status": "TP", "expectation": "a6537b86c497a0fb2541894063e016656ecaca92257b230a4f54ba6406022719" }, { "id": "archive/encrypt.js|Cryptographically secure random source", "status": "TP", "expectation": "953388514f6c6d395c4b299e4ae539857e61832afd3ed58ab97f6605aa79f0f0" }, { "id": "payments/package.json|Cryptographic dependency", "status": "TP", "expectation": "6fa70833286076bf12b3fad1372abf11f291bf2af1eabfcba542533cea6bb1e0" }, { "id": "payments/sign.js|RSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "identity/sign.js|ECDSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js|AES-256|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "research/kem.js|ML-KEM|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js|Cryptographically secure random source|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/package.json|Cryptographic dependency|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "negative/comments.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "unknown/provider.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "node-forge", "status": "pass", "expectation": "aa007b9f0deb17fe214e071df0f37248e947c3f59ff1e596c7ca0584816824cf" }, { "id": "initialize", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "discovery", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "scan-project", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inventory", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "missing-project", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "missing-project-error-flag", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "mcp-cloud-aws", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-image-export", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-registry-image", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-deny-cloud-provider", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-deny-image-path", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-ssh-inventory", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-deny-ssh-target", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "unknown-tool", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "unknown-method", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/sign.js|RSA", "status": "TP", "expectation": "e2a3acaed71b9636b7349492371b62b01ce93c7a804c7e4c1c8f6bce4033d4b5" }, { "id": "identity/sign.js|ECDSA", "status": "TP", "expectation": "607e11444277e415ca5e7523f6715d94b3b49986d34d54bb7bec1349eee18023" }, { "id": "archive/encrypt.js|AES-256", "status": "TP", "expectation": "e20ebc5698d15d7ecb5d7d8775e490ceb4a3362583871976dad8db08133bf0fd" }, { "id": "research/kem.js|ML-KEM", "status": "TP", "expectation": "a6537b86c497a0fb2541894063e016656ecaca92257b230a4f54ba6406022719" }, { "id": "archive/encrypt.js|Cryptographically secure random source", "status": "TP", "expectation": "953388514f6c6d395c4b299e4ae539857e61832afd3ed58ab97f6605aa79f0f0" }, { "id": "payments/package.json|Cryptographic dependency", "status": "TP", "expectation": "6fa70833286076bf12b3fad1372abf11f291bf2af1eabfcba542533cea6bb1e0" }, { "id": "payments/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "identity/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "research/kem.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/package.json", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "portal.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "portal.aster.test|TLS 1.2", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "portal.aster.test|TLS 1.3", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "api.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "api.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|TLS 1.3", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "api.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|group", "status": "pass", "expectation": "157a98347b761dfa81d4a395d5b040c285f2d6721d079658a375df598795c117" }, { "id": "api.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "legacy.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "legacy.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|TLS 1.3", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|TLS 1.0", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "legacy.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "hybrid.aster.test|TLS 1.3", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "hybrid.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "hybrid.aster.test|pqcHybrid", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|group", "status": "pass", "expectation": "8a0cd8fba868c4b4bdf0de29b2c952d0dc5bb6ff298c03827acb3e9f974fbbef" }, { "id": "hybrid.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "pqc.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "pqc.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|TLS 1.3", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "pqc.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|group", "status": "pass", "expectation": "f2a489db5a42670d76b65f3ec708c941968ca109733076659bdf0ca97ff2c86f" }, { "id": "pqc.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "inaccessible.aster.test|measured", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "inaccessible.aster.test|conclusive", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "inaccessible.aster.test|TLS 1.3", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inaccessible.aster.test|TLS 1.2", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inaccessible.aster.test|TLS 1.1", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inaccessible.aster.test|TLS 1.0", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "offline-no-unexpected-findings", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-no-unexpected-findings", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "fixture-integrity-after-mcp", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "postgres-read-only-default", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "postgres-deny-create", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "redis-read-ping", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "redis-deny-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "container-deny-source-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "ssh-force-command-denies-arbitrary-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "ssh-host-key-mismatch-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "ssh-invalid-client-key-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws-real-cli-version-compatibility", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws|portal.aster.test", "status": "pass", "expectation": "a887ad51f9f75299a47e06924efede6006d04345b7de4871aab233fa4540a6b8" }, { "id": "aws|api.aster.test", "status": "pass", "expectation": "377dd0ed3b66e659b603f03638a73aa2185ebb419b776a1c9c877e5bc91308f9" }, { "id": "aws|payments-signing", "status": "pass", "expectation": "a887ad51f9f75299a47e06924efede6006d04345b7de4871aab233fa4540a6b8" }, { "id": "aws|identity-signing", "status": "pass", "expectation": "377dd0ed3b66e659b603f03638a73aa2185ebb419b776a1c9c877e5bc91308f9" }, { "id": "aws|orders-at-rest", "status": "pass", "expectation": "3aa56fe77893bfacbc4874dab9984c88fc4e959f236c0d3e549392c487b0ff1b" }, { "id": "aws|aster-edge", "status": "pass", "expectation": "bfcdd63a36b496b70bb81a58d598114bacb10074001179378977af362896ad7a" }, { "id": "azure|aster-vault/portal", "status": "pass", "expectation": "a887ad51f9f75299a47e06924efede6006d04345b7de4871aab233fa4540a6b8" }, { "id": "azure|aster-vault/identity", "status": "pass", "expectation": "e40b6bb5cce1aeeec63d4ef7848fd9355ba97eb65fe44e94adcf3a4230eb4ea3" }, { "id": "azure|aster-application-gateway", "status": "pass", "expectation": "bfcdd63a36b496b70bb81a58d598114bacb10074001179378977af362896ad7a" }, { "id": "aws|restricted.aster.test|must-remain-unknown", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws|incomplete-metadata|must-remain-unknown", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure|aster-vault/incomplete|must-remain-unknown", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure-restricted-vault-reported", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws-invalid-signature-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws-discovery-deny-create-key", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure-invalid-token-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure-discovery-deny-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "compute-app-connected-to-database", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registry-requires-token", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "imageExport-layers-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "imageExport-tls-config-found", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "imageExport-dependency-metadata-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registryImage-layers-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registryImage-tls-config-found", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registryImage-dependency-metadata-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" } ], "issues": [], "limitations": [ "Synthetic corpus only; no universal accuracy claim.", "Node TLS transport; deployed Worker transport is not tested by this lab.", "AWS and Azure are simulations, not real cloud accounts.", "Image limits may leave oversized entries unmeasured.", "Online positive metrics do not include all negative or categorical assertions.", "SSH scope is exported source, not host-wide discovery." ] }, { "schemaVersion": 1, "runId": 39090764323, "attempt": 1, "commit": "fc896bac88a9f9d5129741df0e767aece8e25d93", "date": "2026-10-18T02:38:42.494Z", "profile": "python-services", "configuration": { "name": "Aster Software", "description": "Fictional small software company processing synthetic orders and maintaining payment, identity and archive code.", "isolation": "Internal Docker Compose network, no published service ports, no production credentials or customer data.", "components": [ { "service": "compute", "role": "Orders API connected to PostgreSQL", "technology": "Node.js on Alpine Linux" }, { "service": "postgres", "role": "Orders database with restricted discovery account", "technology": "PostgreSQL 17" }, { "service": "redis", "role": "Cache with read-only discovery account", "technology": "Redis 7" }, { "service": "portal, api, legacy, hybrid, pqc", "role": "Five independently configured certificate and TLS endpoints", "technology": "OpenSSL: RSA, EC, ML-DSA, classical, hybrid and pure ML-KEM" }, { "service": "inaccessible", "role": "Intentionally inaccessible endpoint", "technology": "Negative connectivity scenario" }, { "service": "cloud", "role": "Authenticated AWS metadata, Azure contract and OCI registry simulation", "technology": "Python HTTPS server; real AWS CLI; Azure CLI shim" }, { "service": "ssh", "role": "Server-approved source inventory with pinned host key", "technology": "OpenSSH forced command and ephemeral client key" }, { "service": "init, validate", "role": "Disposable setup, actual scanners and independent evaluator", "technology": "Node.js, Python and OpenSSL" } ], "sourceStacks": [ "Node.js payment signing, identity and archive code", "Dependency and infrastructure configurations", "Python hashlib legacy integration and misleading-comment negative fixture" ], "credentials": "Ephemeral test keys and read-only accounts generated inside the run. No real cloud account access.", "complexityLevel": 2 }, "runtime": { "node": "24.18.1" }, "status": "passed", "counts": { "passed": 147, "failed": 0, "blocked": 0 }, "metrics": { "offline": { "tp": 6, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "mcp": { "tp": 6, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "ssh": { "tp": 6, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "supplemental": { "tp": 1, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "onlinePositiveAssertions": { "tp": 16, "fp": 0, "fn": 0, "precision": 1, "recall": 1 } }, "coverage": { "offlineFilesScanned": 9, "offlineInventoryFiles": 9, "offlineFileCoverageRatio": 1, "endpointAttemptCoverageRatio": 1, "endpointsAttempted": 6, "endpointsExpected": 6, "endpointsMeasured": 5, "endpointsIndependentlyVerified": 6 }, "durationMs": 33731, "checks": [ { "id": "ssh|payments/sign.js|RSA", "status": "TP", "expectation": "e2a3acaed71b9636b7349492371b62b01ce93c7a804c7e4c1c8f6bce4033d4b5" }, { "id": "ssh|identity/sign.js|ECDSA", "status": "TP", "expectation": "607e11444277e415ca5e7523f6715d94b3b49986d34d54bb7bec1349eee18023" }, { "id": "ssh|archive/encrypt.js|AES-256", "status": "TP", "expectation": "e20ebc5698d15d7ecb5d7d8775e490ceb4a3362583871976dad8db08133bf0fd" }, { "id": "ssh|research/kem.js|ML-KEM", "status": "TP", "expectation": "a6537b86c497a0fb2541894063e016656ecaca92257b230a4f54ba6406022719" }, { "id": "ssh|archive/encrypt.js|Cryptographically secure random source", "status": "TP", "expectation": "953388514f6c6d395c4b299e4ae539857e61832afd3ed58ab97f6605aa79f0f0" }, { "id": "ssh|payments/package.json|Cryptographic dependency", "status": "TP", "expectation": "6fa70833286076bf12b3fad1372abf11f291bf2af1eabfcba542533cea6bb1e0" }, { "id": "python-runtime-known-answer", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "legacy.py|MD5", "status": "TP", "expectation": "cb44fea1e01988be766a828dd8a33c779f985e21ff7fc3a05005309482fc6971" }, { "id": "legacy.py|MD5|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "comments.py", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/sign.js", "status": "pass", "expectation": "e8b23eea492794f0ab96c8733248040a339ebf48aef55d2a79e4b7c3b8748d48" }, { "id": "identity/sign.js", "status": "pass", "expectation": "661f629aa11008c66b57c76c75abb4e3c8ea187f71b79a3b76a6b94e0ffe6cb2" }, { "id": "research/kem.js", "status": "pass", "expectation": "cdd9034d18880c55d18391dac9dc846b22afd2e3228c98b6c3b39620b8be550a" }, { "id": "archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "RSA-2048-and-P256-parameters", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:identity/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:infrastructure/postgresql.conf", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:infrastructure/redis.conf", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:negative/comments.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:payments/package.json", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:payments/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:research/kem.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:unknown/provider.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/sign.js|RSA", "status": "TP", "expectation": "e2a3acaed71b9636b7349492371b62b01ce93c7a804c7e4c1c8f6bce4033d4b5" }, { "id": "identity/sign.js|ECDSA", "status": "TP", "expectation": "607e11444277e415ca5e7523f6715d94b3b49986d34d54bb7bec1349eee18023" }, { "id": "archive/encrypt.js|AES-256", "status": "TP", "expectation": "e20ebc5698d15d7ecb5d7d8775e490ceb4a3362583871976dad8db08133bf0fd" }, { "id": "research/kem.js|ML-KEM", "status": "TP", "expectation": "a6537b86c497a0fb2541894063e016656ecaca92257b230a4f54ba6406022719" }, { "id": "archive/encrypt.js|Cryptographically secure random source", "status": "TP", "expectation": "953388514f6c6d395c4b299e4ae539857e61832afd3ed58ab97f6605aa79f0f0" }, { "id": "payments/package.json|Cryptographic dependency", "status": "TP", "expectation": "6fa70833286076bf12b3fad1372abf11f291bf2af1eabfcba542533cea6bb1e0" }, { "id": "payments/sign.js|RSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "identity/sign.js|ECDSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js|AES-256|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "research/kem.js|ML-KEM|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js|Cryptographically secure random source|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/package.json|Cryptographic dependency|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "negative/comments.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "unknown/provider.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "node-forge", "status": "pass", "expectation": "aa007b9f0deb17fe214e071df0f37248e947c3f59ff1e596c7ca0584816824cf" }, { "id": "initialize", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "discovery", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "scan-project", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inventory", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "missing-project", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "missing-project-error-flag", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "mcp-cloud-aws", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-image-export", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-registry-image", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-deny-cloud-provider", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-deny-image-path", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-ssh-inventory", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-deny-ssh-target", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "unknown-tool", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "unknown-method", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/sign.js|RSA", "status": "TP", "expectation": "e2a3acaed71b9636b7349492371b62b01ce93c7a804c7e4c1c8f6bce4033d4b5" }, { "id": "identity/sign.js|ECDSA", "status": "TP", "expectation": "607e11444277e415ca5e7523f6715d94b3b49986d34d54bb7bec1349eee18023" }, { "id": "archive/encrypt.js|AES-256", "status": "TP", "expectation": "e20ebc5698d15d7ecb5d7d8775e490ceb4a3362583871976dad8db08133bf0fd" }, { "id": "research/kem.js|ML-KEM", "status": "TP", "expectation": "a6537b86c497a0fb2541894063e016656ecaca92257b230a4f54ba6406022719" }, { "id": "archive/encrypt.js|Cryptographically secure random source", "status": "TP", "expectation": "953388514f6c6d395c4b299e4ae539857e61832afd3ed58ab97f6605aa79f0f0" }, { "id": "payments/package.json|Cryptographic dependency", "status": "TP", "expectation": "6fa70833286076bf12b3fad1372abf11f291bf2af1eabfcba542533cea6bb1e0" }, { "id": "payments/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "identity/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "research/kem.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/package.json", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "portal.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "portal.aster.test|TLS 1.2", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "portal.aster.test|TLS 1.3", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "api.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "api.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|TLS 1.3", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "api.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|group", "status": "pass", "expectation": "157a98347b761dfa81d4a395d5b040c285f2d6721d079658a375df598795c117" }, { "id": "api.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "legacy.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "legacy.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|TLS 1.3", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|TLS 1.0", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "legacy.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "hybrid.aster.test|TLS 1.3", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "hybrid.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "hybrid.aster.test|pqcHybrid", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|group", "status": "pass", "expectation": "8a0cd8fba868c4b4bdf0de29b2c952d0dc5bb6ff298c03827acb3e9f974fbbef" }, { "id": "hybrid.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "pqc.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "pqc.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|TLS 1.3", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "pqc.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|group", "status": "pass", "expectation": "f2a489db5a42670d76b65f3ec708c941968ca109733076659bdf0ca97ff2c86f" }, { "id": "pqc.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "inaccessible.aster.test|measured", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "inaccessible.aster.test|conclusive", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "inaccessible.aster.test|TLS 1.3", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inaccessible.aster.test|TLS 1.2", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inaccessible.aster.test|TLS 1.1", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inaccessible.aster.test|TLS 1.0", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "offline-no-unexpected-findings", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-no-unexpected-findings", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "fixture-integrity-after-mcp", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "postgres-read-only-default", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "postgres-deny-create", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "redis-read-ping", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "redis-deny-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "container-deny-source-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "ssh-force-command-denies-arbitrary-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "ssh-host-key-mismatch-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "ssh-invalid-client-key-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws-real-cli-version-compatibility", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws|portal.aster.test", "status": "pass", "expectation": "a887ad51f9f75299a47e06924efede6006d04345b7de4871aab233fa4540a6b8" }, { "id": "aws|api.aster.test", "status": "pass", "expectation": "377dd0ed3b66e659b603f03638a73aa2185ebb419b776a1c9c877e5bc91308f9" }, { "id": "aws|payments-signing", "status": "pass", "expectation": "a887ad51f9f75299a47e06924efede6006d04345b7de4871aab233fa4540a6b8" }, { "id": "aws|identity-signing", "status": "pass", "expectation": "377dd0ed3b66e659b603f03638a73aa2185ebb419b776a1c9c877e5bc91308f9" }, { "id": "aws|orders-at-rest", "status": "pass", "expectation": "3aa56fe77893bfacbc4874dab9984c88fc4e959f236c0d3e549392c487b0ff1b" }, { "id": "aws|aster-edge", "status": "pass", "expectation": "bfcdd63a36b496b70bb81a58d598114bacb10074001179378977af362896ad7a" }, { "id": "azure|aster-vault/portal", "status": "pass", "expectation": "a887ad51f9f75299a47e06924efede6006d04345b7de4871aab233fa4540a6b8" }, { "id": "azure|aster-vault/identity", "status": "pass", "expectation": "e40b6bb5cce1aeeec63d4ef7848fd9355ba97eb65fe44e94adcf3a4230eb4ea3" }, { "id": "azure|aster-application-gateway", "status": "pass", "expectation": "bfcdd63a36b496b70bb81a58d598114bacb10074001179378977af362896ad7a" }, { "id": "aws|restricted.aster.test|must-remain-unknown", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws|incomplete-metadata|must-remain-unknown", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure|aster-vault/incomplete|must-remain-unknown", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure-restricted-vault-reported", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws-invalid-signature-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws-discovery-deny-create-key", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure-invalid-token-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure-discovery-deny-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "compute-app-connected-to-database", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registry-requires-token", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "imageExport-layers-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "imageExport-tls-config-found", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "imageExport-dependency-metadata-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registryImage-layers-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registryImage-tls-config-found", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registryImage-dependency-metadata-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" } ], "issues": [], "limitations": [ "Synthetic corpus only; no universal accuracy claim.", "Node TLS transport; deployed Worker transport is not tested by this lab.", "AWS and Azure are simulations, not real cloud accounts.", "Image limits may leave oversized entries unmeasured.", "Online positive metrics do not include all negative or categorical assertions.", "SSH scope is exported source, not host-wide discovery." ] }, { "schemaVersion": 1, "runId": 39089966509, "attempt": 1, "commit": "766125f1473080f1a6859824ace5c99d86dcaeb1", "date": "2026-10-18T02:25:20.242Z", "profile": "core", "configuration": { "name": "Aster Software", "description": "Fictional small software company processing synthetic orders and maintaining payment, identity and archive code.", "isolation": "Internal Docker Compose network, no published service ports, no production credentials or customer data.", "components": [ { "service": "compute", "role": "Orders API connected to PostgreSQL", "technology": "Node.js on Alpine Linux" }, { "service": "postgres", "role": "Orders database with restricted discovery account", "technology": "PostgreSQL 17" }, { "service": "redis", "role": "Cache with read-only discovery account", "technology": "Redis 7" }, { "service": "portal, api, legacy, hybrid, pqc", "role": "Five independently configured certificate and TLS endpoints", "technology": "OpenSSL: RSA, EC, ML-DSA, classical, hybrid and pure ML-KEM" }, { "service": "inaccessible", "role": "Intentionally inaccessible endpoint", "technology": "Negative connectivity scenario" }, { "service": "cloud", "role": "Authenticated AWS metadata, Azure contract and OCI registry simulation", "technology": "Python HTTPS server; real AWS CLI; Azure CLI shim" }, { "service": "ssh", "role": "Server-approved source inventory with pinned host key", "technology": "OpenSSH forced command and ephemeral client key" }, { "service": "init, validate", "role": "Disposable setup, actual scanners and independent evaluator", "technology": "Node.js, Python and OpenSSL" } ], "sourceStacks": [ "Node.js payment signing, identity and archive code", "Dependency and infrastructure configurations" ], "credentials": "Ephemeral test keys and read-only accounts generated inside the run. No real cloud account access.", "complexityLevel": 2 }, "runtime": {}, "status": "passed", "counts": { "passed": 141, "failed": 0, "blocked": 0 }, "metrics": { "offline": { "tp": 6, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "mcp": { "tp": 6, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "ssh": { "tp": 6, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "supplemental": null, "onlinePositiveAssertions": { "tp": 16, "fp": 0, "fn": 0, "precision": 1, "recall": 1 } }, "coverage": { "offlineFilesScanned": 9, "offlineInventoryFiles": 9, "offlineFileCoverageRatio": 1, "endpointAttemptCoverageRatio": 1, "endpointsAttempted": 6, "endpointsExpected": 6, "endpointsMeasured": 5, "endpointsIndependentlyVerified": 6 }, "durationMs": 19002, "checks": [ { "id": "ssh|payments/sign.js|RSA", "status": "TP", "expectation": "e2a3acaed71b9636b7349492371b62b01ce93c7a804c7e4c1c8f6bce4033d4b5" }, { "id": "ssh|identity/sign.js|ECDSA", "status": "TP", "expectation": "607e11444277e415ca5e7523f6715d94b3b49986d34d54bb7bec1349eee18023" }, { "id": "ssh|archive/encrypt.js|AES-256", "status": "TP", "expectation": "e20ebc5698d15d7ecb5d7d8775e490ceb4a3362583871976dad8db08133bf0fd" }, { "id": "ssh|research/kem.js|ML-KEM", "status": "TP", "expectation": "a6537b86c497a0fb2541894063e016656ecaca92257b230a4f54ba6406022719" }, { "id": "ssh|archive/encrypt.js|Cryptographically secure random source", "status": "TP", "expectation": "953388514f6c6d395c4b299e4ae539857e61832afd3ed58ab97f6605aa79f0f0" }, { "id": "ssh|payments/package.json|Cryptographic dependency", "status": "TP", "expectation": "6fa70833286076bf12b3fad1372abf11f291bf2af1eabfcba542533cea6bb1e0" }, { "id": "payments/sign.js", "status": "pass", "expectation": "e8b23eea492794f0ab96c8733248040a339ebf48aef55d2a79e4b7c3b8748d48" }, { "id": "identity/sign.js", "status": "pass", "expectation": "661f629aa11008c66b57c76c75abb4e3c8ea187f71b79a3b76a6b94e0ffe6cb2" }, { "id": "research/kem.js", "status": "pass", "expectation": "cdd9034d18880c55d18391dac9dc846b22afd2e3228c98b6c3b39620b8be550a" }, { "id": "archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "RSA-2048-and-P256-parameters", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:identity/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:infrastructure/postgresql.conf", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:infrastructure/redis.conf", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:negative/comments.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:payments/package.json", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:payments/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:research/kem.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:unknown/provider.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/sign.js|RSA", "status": "TP", "expectation": "e2a3acaed71b9636b7349492371b62b01ce93c7a804c7e4c1c8f6bce4033d4b5" }, { "id": "identity/sign.js|ECDSA", "status": "TP", "expectation": "607e11444277e415ca5e7523f6715d94b3b49986d34d54bb7bec1349eee18023" }, { "id": "archive/encrypt.js|AES-256", "status": "TP", "expectation": "e20ebc5698d15d7ecb5d7d8775e490ceb4a3362583871976dad8db08133bf0fd" }, { "id": "research/kem.js|ML-KEM", "status": "TP", "expectation": "a6537b86c497a0fb2541894063e016656ecaca92257b230a4f54ba6406022719" }, { "id": "archive/encrypt.js|Cryptographically secure random source", "status": "TP", "expectation": "953388514f6c6d395c4b299e4ae539857e61832afd3ed58ab97f6605aa79f0f0" }, { "id": "payments/package.json|Cryptographic dependency", "status": "TP", "expectation": "6fa70833286076bf12b3fad1372abf11f291bf2af1eabfcba542533cea6bb1e0" }, { "id": "payments/sign.js|RSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "identity/sign.js|ECDSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js|AES-256|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "research/kem.js|ML-KEM|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js|Cryptographically secure random source|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/package.json|Cryptographic dependency|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "negative/comments.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "unknown/provider.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "dependency-0", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "initialize", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "discovery", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "scan-project", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inventory", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "missing-project", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "missing-project-error-flag", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "mcp-cloud-aws", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-image-export", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-registry-image", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-deny-cloud-provider", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-deny-image-path", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-ssh-inventory", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-deny-ssh-target", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "unknown-tool", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "unknown-method", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/sign.js|RSA", "status": "TP", "expectation": "e2a3acaed71b9636b7349492371b62b01ce93c7a804c7e4c1c8f6bce4033d4b5" }, { "id": "identity/sign.js|ECDSA", "status": "TP", "expectation": "607e11444277e415ca5e7523f6715d94b3b49986d34d54bb7bec1349eee18023" }, { "id": "archive/encrypt.js|AES-256", "status": "TP", "expectation": "e20ebc5698d15d7ecb5d7d8775e490ceb4a3362583871976dad8db08133bf0fd" }, { "id": "research/kem.js|ML-KEM", "status": "TP", "expectation": "a6537b86c497a0fb2541894063e016656ecaca92257b230a4f54ba6406022719" }, { "id": "archive/encrypt.js|Cryptographically secure random source", "status": "TP", "expectation": "953388514f6c6d395c4b299e4ae539857e61832afd3ed58ab97f6605aa79f0f0" }, { "id": "payments/package.json|Cryptographic dependency", "status": "TP", "expectation": "6fa70833286076bf12b3fad1372abf11f291bf2af1eabfcba542533cea6bb1e0" }, { "id": "payments/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "identity/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "research/kem.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/package.json", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "portal.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "portal.aster.test|TLS 1.2", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "portal.aster.test|TLS 1.3", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "api.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "api.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|TLS 1.3", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "api.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|group", "status": "pass", "expectation": "157a98347b761dfa81d4a395d5b040c285f2d6721d079658a375df598795c117" }, { "id": "api.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "legacy.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "legacy.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|TLS 1.3", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|TLS 1.0", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "legacy.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "hybrid.aster.test|TLS 1.3", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "hybrid.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "hybrid.aster.test|pqcHybrid", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|group", "status": "pass", "expectation": "8a0cd8fba868c4b4bdf0de29b2c952d0dc5bb6ff298c03827acb3e9f974fbbef" }, { "id": "hybrid.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "pqc.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "pqc.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|TLS 1.3", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "pqc.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|group", "status": "pass", "expectation": "f2a489db5a42670d76b65f3ec708c941968ca109733076659bdf0ca97ff2c86f" }, { "id": "pqc.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "inaccessible.aster.test|measured", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "inaccessible.aster.test|conclusive", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "inaccessible.aster.test|TLS 1.3", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inaccessible.aster.test|TLS 1.2", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inaccessible.aster.test|TLS 1.1", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inaccessible.aster.test|TLS 1.0", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "fixture-integrity-after-mcp", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "postgres-read-only-default", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "postgres-deny-create", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "redis-read-ping", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "redis-deny-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "container-deny-source-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "ssh-force-command-denies-arbitrary-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "ssh-host-key-mismatch-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "ssh-invalid-client-key-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws-real-cli-version-compatibility", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws|portal.aster.test", "status": "pass", "expectation": "a887ad51f9f75299a47e06924efede6006d04345b7de4871aab233fa4540a6b8" }, { "id": "aws|api.aster.test", "status": "pass", "expectation": "377dd0ed3b66e659b603f03638a73aa2185ebb419b776a1c9c877e5bc91308f9" }, { "id": "aws|payments-signing", "status": "pass", "expectation": "a887ad51f9f75299a47e06924efede6006d04345b7de4871aab233fa4540a6b8" }, { "id": "aws|identity-signing", "status": "pass", "expectation": "377dd0ed3b66e659b603f03638a73aa2185ebb419b776a1c9c877e5bc91308f9" }, { "id": "aws|orders-at-rest", "status": "pass", "expectation": "3aa56fe77893bfacbc4874dab9984c88fc4e959f236c0d3e549392c487b0ff1b" }, { "id": "aws|aster-edge", "status": "pass", "expectation": "bfcdd63a36b496b70bb81a58d598114bacb10074001179378977af362896ad7a" }, { "id": "azure|aster-vault/portal", "status": "pass", "expectation": "a887ad51f9f75299a47e06924efede6006d04345b7de4871aab233fa4540a6b8" }, { "id": "azure|aster-vault/identity", "status": "pass", "expectation": "e40b6bb5cce1aeeec63d4ef7848fd9355ba97eb65fe44e94adcf3a4230eb4ea3" }, { "id": "azure|aster-application-gateway", "status": "pass", "expectation": "bfcdd63a36b496b70bb81a58d598114bacb10074001179378977af362896ad7a" }, { "id": "aws|restricted.aster.test|must-remain-unknown", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws|incomplete-metadata|must-remain-unknown", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure|aster-vault/incomplete|must-remain-unknown", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure-restricted-vault-reported", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws-invalid-signature-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws-discovery-deny-create-key", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure-invalid-token-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure-discovery-deny-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "compute-app-connected-to-database", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registry-requires-token", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "imageExport-layers-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "imageExport-tls-config-found", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "imageExport-dependency-metadata-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registryImage-layers-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registryImage-tls-config-found", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registryImage-dependency-metadata-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "offline-no-unexpected-findings", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-no-unexpected-findings", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" } ], "issues": [], "limitations": [ "Synthetic corpus only; no universal accuracy claim.", "Node TLS transport; deployed Worker transport is not tested by this lab.", "AWS and Azure are simulations, not real cloud accounts.", "Image limits may leave oversized entries unmeasured.", "Online positive metrics do not include all negative or categorical assertions.", "SSH scope is exported source, not host-wide discovery." ] }, { "schemaVersion": 1, "runId": 39089103778, "attempt": 1, "commit": "3dd1e522ec21761de718f22038d4f8be6961910a", "date": "2026-10-18T02:10:52.759Z", "profile": "core", "configuration": { "name": "Aster Software", "description": "Fictional small software company processing synthetic orders and maintaining payment, identity and archive code.", "isolation": "Internal Docker Compose network, no published service ports, no production credentials or customer data.", "components": [ { "service": "compute", "role": "Orders API connected to PostgreSQL", "technology": "Node.js on Alpine Linux" }, { "service": "postgres", "role": "Orders database with restricted discovery account", "technology": "PostgreSQL 17" }, { "service": "redis", "role": "Cache with read-only discovery account", "technology": "Redis 7" }, { "service": "portal, api, legacy, hybrid, pqc", "role": "Five independently configured certificate and TLS endpoints", "technology": "OpenSSL: RSA, EC, ML-DSA, classical, hybrid and pure ML-KEM" }, { "service": "inaccessible", "role": "Intentionally inaccessible endpoint", "technology": "Negative connectivity scenario" }, { "service": "cloud", "role": "Authenticated AWS metadata, Azure contract and OCI registry simulation", "technology": "Python HTTPS server; real AWS CLI; Azure CLI shim" }, { "service": "init, validate", "role": "Disposable setup, actual scanners and independent evaluator", "technology": "Node.js, Python and OpenSSL" } ], "sourceStacks": [ "Node.js payment signing, identity and archive code", "Dependency and infrastructure configurations" ], "credentials": "Ephemeral test keys and read-only accounts generated inside the run. No real cloud account access.", "complexityLevel": 1 }, "runtime": {}, "status": "failed", "counts": { "passed": 129, "failed": 2, "blocked": 0 }, "metrics": { "offline": { "tp": 6, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "mcp": { "tp": 6, "fp": 0, "fn": 0, "precision": 1, "recall": 1 }, "ssh": null, "supplemental": null, "onlinePositiveAssertions": { "tp": 16, "fp": 0, "fn": 0, "precision": 1, "recall": 1 } }, "coverage": { "offlineFilesScanned": 9, "offlineInventoryFiles": 9, "offlineFileCoverageRatio": 1, "endpointAttemptCoverageRatio": 1, "endpointsAttempted": 6, "endpointsExpected": 6, "endpointsMeasured": 5, "endpointsIndependentlyVerified": 6 }, "durationMs": 92145, "checks": [ { "id": "payments/sign.js", "status": "pass", "expectation": "e8b23eea492794f0ab96c8733248040a339ebf48aef55d2a79e4b7c3b8748d48" }, { "id": "identity/sign.js", "status": "pass", "expectation": "661f629aa11008c66b57c76c75abb4e3c8ea187f71b79a3b76a6b94e0ffe6cb2" }, { "id": "research/kem.js", "status": "pass", "expectation": "cdd9034d18880c55d18391dac9dc846b22afd2e3228c98b6c3b39620b8be550a" }, { "id": "archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "RSA-2048-and-P256-parameters", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:identity/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:infrastructure/postgresql.conf", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:infrastructure/redis.conf", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:negative/comments.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:payments/package.json", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:payments/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:research/kem.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:unknown/provider.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/sign.js|RSA", "status": "TP", "expectation": "e2a3acaed71b9636b7349492371b62b01ce93c7a804c7e4c1c8f6bce4033d4b5" }, { "id": "identity/sign.js|ECDSA", "status": "TP", "expectation": "607e11444277e415ca5e7523f6715d94b3b49986d34d54bb7bec1349eee18023" }, { "id": "archive/encrypt.js|AES-256", "status": "TP", "expectation": "e20ebc5698d15d7ecb5d7d8775e490ceb4a3362583871976dad8db08133bf0fd" }, { "id": "research/kem.js|ML-KEM", "status": "TP", "expectation": "a6537b86c497a0fb2541894063e016656ecaca92257b230a4f54ba6406022719" }, { "id": "archive/encrypt.js|Cryptographically secure random source", "status": "TP", "expectation": "953388514f6c6d395c4b299e4ae539857e61832afd3ed58ab97f6605aa79f0f0" }, { "id": "payments/package.json|Cryptographic dependency", "status": "TP", "expectation": "6fa70833286076bf12b3fad1372abf11f291bf2af1eabfcba542533cea6bb1e0" }, { "id": "payments/sign.js|RSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "identity/sign.js|ECDSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js|AES-256|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "research/kem.js|ML-KEM|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js|Cryptographically secure random source|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/package.json|Cryptographic dependency|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "negative/comments.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "unknown/provider.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "dependency-0", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "initialize", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "discovery", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "scan-project", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inventory", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "missing-project", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "missing-project-error-flag", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "mcp-cloud-aws", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-image-export", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-registry-image", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-deny-cloud-provider", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-deny-image-path", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-deny-ssh-target", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "unknown-tool", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "unknown-method", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/sign.js|RSA", "status": "TP", "expectation": "e2a3acaed71b9636b7349492371b62b01ce93c7a804c7e4c1c8f6bce4033d4b5" }, { "id": "identity/sign.js|ECDSA", "status": "TP", "expectation": "607e11444277e415ca5e7523f6715d94b3b49986d34d54bb7bec1349eee18023" }, { "id": "archive/encrypt.js|AES-256", "status": "TP", "expectation": "e20ebc5698d15d7ecb5d7d8775e490ceb4a3362583871976dad8db08133bf0fd" }, { "id": "research/kem.js|ML-KEM", "status": "TP", "expectation": "a6537b86c497a0fb2541894063e016656ecaca92257b230a4f54ba6406022719" }, { "id": "archive/encrypt.js|Cryptographically secure random source", "status": "TP", "expectation": "953388514f6c6d395c4b299e4ae539857e61832afd3ed58ab97f6605aa79f0f0" }, { "id": "payments/package.json|Cryptographic dependency", "status": "TP", "expectation": "6fa70833286076bf12b3fad1372abf11f291bf2af1eabfcba542533cea6bb1e0" }, { "id": "payments/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "identity/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "research/kem.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/package.json", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "portal.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "portal.aster.test|TLS 1.2", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "portal.aster.test|TLS 1.3", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "api.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "api.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|TLS 1.3", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "api.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|group", "status": "pass", "expectation": "157a98347b761dfa81d4a395d5b040c285f2d6721d079658a375df598795c117" }, { "id": "api.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "legacy.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "legacy.aster.test|TLS 1.2", "status": "fail", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|TLS 1.3", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|TLS 1.0", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "legacy.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "hybrid.aster.test|TLS 1.3", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "hybrid.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "hybrid.aster.test|pqcHybrid", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|group", "status": "pass", "expectation": "8a0cd8fba868c4b4bdf0de29b2c952d0dc5bb6ff298c03827acb3e9f974fbbef" }, { "id": "hybrid.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "pqc.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "pqc.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|TLS 1.3", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "pqc.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|group", "status": "fail", "expectation": "f2a489db5a42670d76b65f3ec708c941968ca109733076659bdf0ca97ff2c86f" }, { "id": "pqc.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "inaccessible.aster.test|measured", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "inaccessible.aster.test|conclusive", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "inaccessible.aster.test|TLS 1.3", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inaccessible.aster.test|TLS 1.2", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inaccessible.aster.test|TLS 1.1", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inaccessible.aster.test|TLS 1.0", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "fixture-integrity-after-mcp", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "postgres-read-only-default", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "postgres-deny-create", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "redis-read-ping", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "redis-deny-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "container-deny-source-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws-real-cli-version-compatibility", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws|portal.aster.test", "status": "pass", "expectation": "a887ad51f9f75299a47e06924efede6006d04345b7de4871aab233fa4540a6b8" }, { "id": "aws|api.aster.test", "status": "pass", "expectation": "377dd0ed3b66e659b603f03638a73aa2185ebb419b776a1c9c877e5bc91308f9" }, { "id": "aws|payments-signing", "status": "pass", "expectation": "a887ad51f9f75299a47e06924efede6006d04345b7de4871aab233fa4540a6b8" }, { "id": "aws|identity-signing", "status": "pass", "expectation": "377dd0ed3b66e659b603f03638a73aa2185ebb419b776a1c9c877e5bc91308f9" }, { "id": "aws|orders-at-rest", "status": "pass", "expectation": "3aa56fe77893bfacbc4874dab9984c88fc4e959f236c0d3e549392c487b0ff1b" }, { "id": "aws|aster-edge", "status": "pass", "expectation": "bfcdd63a36b496b70bb81a58d598114bacb10074001179378977af362896ad7a" }, { "id": "azure|aster-vault/portal", "status": "pass", "expectation": "a887ad51f9f75299a47e06924efede6006d04345b7de4871aab233fa4540a6b8" }, { "id": "azure|aster-vault/identity", "status": "pass", "expectation": "e40b6bb5cce1aeeec63d4ef7848fd9355ba97eb65fe44e94adcf3a4230eb4ea3" }, { "id": "azure|aster-application-gateway", "status": "pass", "expectation": "bfcdd63a36b496b70bb81a58d598114bacb10074001179378977af362896ad7a" }, { "id": "aws|restricted.aster.test|must-remain-unknown", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws|incomplete-metadata|must-remain-unknown", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure|aster-vault/incomplete|must-remain-unknown", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure-restricted-vault-reported", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws-invalid-signature-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws-discovery-deny-create-key", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure-invalid-token-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure-discovery-deny-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "compute-app-connected-to-database", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registry-requires-token", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "imageExport-layers-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "imageExport-tls-config-found", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "imageExport-dependency-metadata-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registryImage-layers-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registryImage-tls-config-found", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registryImage-dependency-metadata-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "offline-no-unexpected-findings", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-no-unexpected-findings", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" } ], "issues": [ { "area": "TLS measurement", "status": "open-at-test", "checks": [ "legacy.aster.test|TLS 1.2", "pqc.aster.test|group" ] } ], "limitations": [ "Synthetic corpus only; no universal accuracy claim.", "Node TLS transport; deployed Worker transport is not tested by this lab.", "AWS and Azure are simulations, not real cloud accounts.", "Image limits may leave oversized entries unmeasured.", "Online positive metrics do not include all negative or categorical assertions.", "SSH scope is exported source, not host-wide discovery." ] }, { "schemaVersion": 1, "runId": 39085595692, "attempt": 1, "commit": "5ce9574b7180bfe5bc65614eac1a4a3299c00591", "date": "2026-10-18T01:12:50.067Z", "profile": "core", "configuration": { "name": "Aster Software", "description": "Fictional small software company processing synthetic orders and maintaining payment, identity and archive code.", "isolation": "Internal Docker Compose network, no published service ports, no production credentials or customer data.", "components": [ { "service": "compute", "role": "Orders API connected to PostgreSQL", "technology": "Node.js on Alpine Linux" }, { "service": "postgres", "role": "Orders database with restricted discovery account", "technology": "PostgreSQL 17" }, { "service": "redis", "role": "Cache with read-only discovery account", "technology": "Redis 7" }, { "service": "portal, api, legacy, hybrid, pqc", "role": "Five independently configured certificate and TLS endpoints", "technology": "OpenSSL: RSA, EC, ML-DSA, classical, hybrid and pure ML-KEM" }, { "service": "inaccessible", "role": "Intentionally inaccessible endpoint", "technology": "Negative connectivity scenario" }, { "service": "cloud", "role": "Authenticated AWS metadata, Azure contract and OCI registry simulation", "technology": "Python HTTPS server; real AWS CLI; Azure CLI shim" }, { "service": "init, validate", "role": "Disposable setup, actual scanners and independent evaluator", "technology": "Node.js, Python and OpenSSL" } ], "sourceStacks": [ "Node.js payment signing, identity and archive code", "Dependency and infrastructure configurations" ], "credentials": "Ephemeral test keys and read-only accounts generated inside the run. No real cloud account access.", "complexityLevel": 1 }, "runtime": {}, "status": "failed", "counts": { "passed": 112, "failed": 15, "blocked": 0 }, "metrics": { "offline": { "tp": 6, "fp": 1, "fn": 0, "precision": 0.8571428571428571, "recall": 1 }, "mcp": { "tp": 6, "fp": 1, "fn": 0, "precision": 0.8571428571428571, "recall": 1 }, "ssh": null, "supplemental": null, "onlinePositiveAssertions": { "tp": 11, "fp": 0, "fn": 5, "precision": 1, "recall": 0.6875 } }, "coverage": { "offlineFilesScanned": 9, "offlineInventoryFiles": 9, "offlineFileCoverageRatio": 1, "endpointAttemptCoverageRatio": 1, "endpointsAttempted": 6, "endpointsExpected": 6, "endpointsMeasured": 5, "endpointsIndependentlyVerified": 6 }, "durationMs": 73048, "checks": [ { "id": "payments/sign.js", "status": "pass", "expectation": "e8b23eea492794f0ab96c8733248040a339ebf48aef55d2a79e4b7c3b8748d48" }, { "id": "identity/sign.js", "status": "pass", "expectation": "661f629aa11008c66b57c76c75abb4e3c8ea187f71b79a3b76a6b94e0ffe6cb2" }, { "id": "research/kem.js", "status": "pass", "expectation": "cdd9034d18880c55d18391dac9dc846b22afd2e3228c98b6c3b39620b8be550a" }, { "id": "archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "RSA-2048-and-P256-parameters", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:identity/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:infrastructure/postgresql.conf", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:infrastructure/redis.conf", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:negative/comments.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:payments/package.json", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:payments/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:research/kem.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "hash:unknown/provider.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/sign.js|RSA", "status": "TP", "expectation": "e2a3acaed71b9636b7349492371b62b01ce93c7a804c7e4c1c8f6bce4033d4b5" }, { "id": "identity/sign.js|ECDSA", "status": "TP", "expectation": "607e11444277e415ca5e7523f6715d94b3b49986d34d54bb7bec1349eee18023" }, { "id": "archive/encrypt.js|AES-256", "status": "TP", "expectation": "e20ebc5698d15d7ecb5d7d8775e490ceb4a3362583871976dad8db08133bf0fd" }, { "id": "research/kem.js|ML-KEM", "status": "TP", "expectation": "a6537b86c497a0fb2541894063e016656ecaca92257b230a4f54ba6406022719" }, { "id": "archive/encrypt.js|Cryptographically secure random source", "status": "TP", "expectation": "953388514f6c6d395c4b299e4ae539857e61832afd3ed58ab97f6605aa79f0f0" }, { "id": "payments/package.json|Cryptographic dependency", "status": "TP", "expectation": "6fa70833286076bf12b3fad1372abf11f291bf2af1eabfcba542533cea6bb1e0" }, { "id": "research/kem.js|Post-quantum algorithm or hybrid group in configuration", "status": "FP", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/sign.js|RSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "identity/sign.js|ECDSA|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js|AES-256|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "research/kem.js|ML-KEM|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js|Cryptographically secure random source|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/package.json|Cryptographic dependency|risk", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "negative/comments.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "unknown/provider.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "dependency-0", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "initialize", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "discovery", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "scan-project", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inventory", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "missing-project", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "missing-project-error-flag", "status": "fail", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "unknown-tool", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "unknown-method", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/sign.js|RSA", "status": "TP", "expectation": "e2a3acaed71b9636b7349492371b62b01ce93c7a804c7e4c1c8f6bce4033d4b5" }, { "id": "identity/sign.js|ECDSA", "status": "TP", "expectation": "607e11444277e415ca5e7523f6715d94b3b49986d34d54bb7bec1349eee18023" }, { "id": "archive/encrypt.js|AES-256", "status": "TP", "expectation": "e20ebc5698d15d7ecb5d7d8775e490ceb4a3362583871976dad8db08133bf0fd" }, { "id": "research/kem.js|ML-KEM", "status": "TP", "expectation": "a6537b86c497a0fb2541894063e016656ecaca92257b230a4f54ba6406022719" }, { "id": "archive/encrypt.js|Cryptographically secure random source", "status": "TP", "expectation": "953388514f6c6d395c4b299e4ae539857e61832afd3ed58ab97f6605aa79f0f0" }, { "id": "payments/package.json|Cryptographic dependency", "status": "TP", "expectation": "6fa70833286076bf12b3fad1372abf11f291bf2af1eabfcba542533cea6bb1e0" }, { "id": "research/kem.js|Post-quantum algorithm or hybrid group in configuration", "status": "FP", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "identity/sign.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "research/kem.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "archive/encrypt.js", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "payments/package.json", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "portal.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "portal.aster.test|TLS 1.2", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "portal.aster.test|TLS 1.3", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "portal.aster.test|certificate", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "api.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "api.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|TLS 1.3", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "api.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "api.aster.test|group", "status": "pass", "expectation": "157a98347b761dfa81d4a395d5b040c285f2d6721d079658a375df598795c117" }, { "id": "api.aster.test|certificate", "status": "fail", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "legacy.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "legacy.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|TLS 1.3", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|TLS 1.0", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "legacy.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "legacy.aster.test|certificate", "status": "fail", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "hybrid.aster.test|TLS 1.3", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "hybrid.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "hybrid.aster.test|pqcHybrid", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "hybrid.aster.test|group", "status": "pass", "expectation": "8a0cd8fba868c4b4bdf0de29b2c952d0dc5bb6ff298c03827acb3e9f974fbbef" }, { "id": "hybrid.aster.test|certificate", "status": "fail", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "pqc.aster.test|measured", "status": "pass", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "pqc.aster.test|TLS 1.2", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|TLS 1.3", "status": "fail", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "pqc.aster.test|TLS 1.0", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|TLS 1.1", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|pqcHybrid", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "pqc.aster.test|group", "status": "fail", "expectation": "f2a489db5a42670d76b65f3ec708c941968ca109733076659bdf0ca97ff2c86f" }, { "id": "pqc.aster.test|certificate", "status": "fail", "expectation": "b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b" }, { "id": "inaccessible.aster.test|measured", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "inaccessible.aster.test|conclusive", "status": "pass", "expectation": "fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa" }, { "id": "inaccessible.aster.test|TLS 1.3", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inaccessible.aster.test|TLS 1.2", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inaccessible.aster.test|TLS 1.1", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "inaccessible.aster.test|TLS 1.0", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "fixture-integrity-after-mcp", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "postgres-read-only-default", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "postgres-deny-create", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "redis-read-ping", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "redis-deny-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "container-deny-source-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws-real-cli-version-compatibility", "status": "fail", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws|portal.aster.test", "status": "pass", "expectation": "a887ad51f9f75299a47e06924efede6006d04345b7de4871aab233fa4540a6b8" }, { "id": "aws|api.aster.test", "status": "fail", "expectation": "377dd0ed3b66e659b603f03638a73aa2185ebb419b776a1c9c877e5bc91308f9" }, { "id": "aws|payments-signing", "status": "pass", "expectation": "a887ad51f9f75299a47e06924efede6006d04345b7de4871aab233fa4540a6b8" }, { "id": "aws|identity-signing", "status": "pass", "expectation": "377dd0ed3b66e659b603f03638a73aa2185ebb419b776a1c9c877e5bc91308f9" }, { "id": "aws|orders-at-rest", "status": "pass", "expectation": "3aa56fe77893bfacbc4874dab9984c88fc4e959f236c0d3e549392c487b0ff1b" }, { "id": "aws|aster-edge", "status": "pass", "expectation": "283e334ac70ded6dff6b8466941e8274f1d430b5fedd6eed4badce9a6216f7f2" }, { "id": "azure|aster-vault/portal", "status": "pass", "expectation": "a887ad51f9f75299a47e06924efede6006d04345b7de4871aab233fa4540a6b8" }, { "id": "azure|aster-vault/identity", "status": "pass", "expectation": "e40b6bb5cce1aeeec63d4ef7848fd9355ba97eb65fe44e94adcf3a4230eb4ea3" }, { "id": "azure|aster-application-gateway", "status": "pass", "expectation": "283e334ac70ded6dff6b8466941e8274f1d430b5fedd6eed4badce9a6216f7f2" }, { "id": "aws|restricted.aster.test|must-remain-unknown", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws|incomplete-metadata|must-remain-unknown", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure|aster-vault/incomplete|must-remain-unknown", "status": "fail", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure-restricted-vault-reported", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws-invalid-signature-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "aws-discovery-deny-create-key", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure-invalid-token-denied", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "azure-discovery-deny-write", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "compute-app-connected-to-database", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registry-requires-token", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "imageExport-layers-read", "status": "fail", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "imageExport-tls-config-found", "status": "fail", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "imageExport-dependency-metadata-read", "status": "fail", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registryImage-layers-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registryImage-tls-config-found", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "registryImage-dependency-metadata-read", "status": "pass", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "offline-no-unexpected-findings", "status": "fail", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" }, { "id": "mcp-no-unexpected-findings", "status": "fail", "expectation": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b" } ], "issues": [ { "area": "TLS measurement", "status": "open-at-test", "checks": [ "api.aster.test|certificate", "legacy.aster.test|certificate", "hybrid.aster.test|certificate", "pqc.aster.test|TLS 1.3", "pqc.aster.test|group", "pqc.aster.test|certificate" ] }, { "area": "Cloud, image and permissions", "status": "open-at-test", "checks": [ "aws-real-cli-version-compatibility", "aws|api.aster.test", "azure|aster-vault/incomplete|must-remain-unknown", "imageExport-layers-read", "imageExport-tls-config-found", "imageExport-dependency-metadata-read" ] }, { "area": "Source and MCP discovery", "status": "open-at-test", "checks": [ "offline-no-unexpected-findings", "mcp-no-unexpected-findings", "missing-project-error-flag" ] } ], "limitations": [ "Synthetic corpus only; no universal accuracy claim.", "Node TLS transport; deployed Worker transport is not tested by this lab.", "AWS and Azure are simulations, not real cloud accounts.", "Image limits may leave oversized entries unmeasured.", "Online positive metrics do not include all negative or categorical assertions.", "SSH scope is exported source, not host-wide discovery." ] } ] }