All findings
500 findings across categories.
Category:
Severity:
Rule:
500 findings
| Category | Rule | Evidence | Actions | ||
|---|---|---|---|---|---|
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/cron/email-reminders/route.ts:269 | return result; Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/cron/email-reminders/route.ts:270 | } Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/cron/email-reminders/route.ts:266 | }); Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/cron/email-reminders/route.ts:273 | Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/cron/email-reminders/route.ts:268 | if (workflows.length === 0) {Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/cron/email-reminders/route.ts:274 | for (const tenantId of tenantIds) {Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/cron/email-reminders/route.ts:275 | try {Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/cron/email-reminders/route.ts:276 | // Find upcoming shifts Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/cron/email-reminders/route.ts:277 | const shifts = await database.scheduleShift.findMany({Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/cron/email-reminders/route.ts:278 | where: {Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/cron/email-reminders/route.ts:281 | gte: twoHoursFromNow, Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/cron/email-reminders/route.ts:272 | const tenantIds = [...new Set(workflows.map((w) => w.tenantId))]; Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/cron/email-reminders/route.ts:297 | const employees = await database.user.findMany({Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/cron/email-reminders/route.ts:282 | lte: twelveHoursFromNow, Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/cron/email-reminders/route.ts:283 | }, Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/cron/email-reminders/route.ts:284 | deletedAt: null, Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/cron/email-reminders/route.ts:285 | }, Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/cron/email-reminders/route.ts:286 | }); Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/cron/email-reminders/route.ts:287 | Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/cron/email-reminders/route.ts:288 | if (shifts.length === 0) {Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/cron/email-reminders/route.ts:289 | continue; Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/cron/email-reminders/route.ts:290 | } Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/cron/email-reminders/route.ts:291 | Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/cron/email-reminders/route.ts:292 | // Get unique employee IDs and location IDs Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/cron/email-reminders/route.ts:293 | const employeeIds = [...new Set(shifts.map((s) => s.employeeId))]; Scope-checking auth functions defined but never consumed by route handlers |
Page 1 of 20