All findings
500 findings across categories.
Category:
Severity:
Rule:
500 findings
| Category | Rule | Evidence | Actions | ||
|---|---|---|---|---|---|
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/integrations/webhooks/delivery-logs/route.ts:73 | logs, Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/integrations/webhooks/delivery-logs/route.ts:76 | limit, Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/integrations/webhooks/delivery-logs/route.ts:77 | offset, Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/integrations/webhooks/delivery-logs/route.ts:75 | total, Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/integrations/webhooks/delivery-logs/route.ts:79 | }, Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/integrations/webhooks/delivery-logs/route.ts:80 | }); Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/integrations/webhooks/delivery-logs/route.ts:81 | } catch (error) {Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/integrations/webhooks/delivery-logs/route.ts:82 | captureException(error); Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/integrations/webhooks/delivery-logs/route.ts:83 | log.error("Error fetching delivery logs:", error);Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/integrations/webhooks/delivery-logs/route.ts:84 | return NextResponse.json( Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/integrations/webhooks/delivery-logs/route.ts:85 | { error: "Failed to fetch delivery logs" },Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/integrations/webhooks/delivery-logs/route.ts:87 | ); Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/integrations/webhooks/dlq/[id]/resolve/route.ts:11 | import { database } from "@repo/database";Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/integrations/webhooks/delivery-logs/route.ts:88 | } Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/integrations/webhooks/delivery-logs/route.ts:89 | } Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/integrations/webhooks/delivery-logs/route.ts:90 | Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/integrations/webhooks/delivery-logs/route.ts:91 | export const runtime = "nodejs"; Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/integrations/webhooks/delivery-logs/route.ts:92 | Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/integrations/webhooks/dlq/[id]/resolve/route.ts:1 | /** Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/integrations/webhooks/dlq/[id]/resolve/route.ts:2 | * Webhook DLQ Resolve API Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/integrations/webhooks/dlq/[id]/resolve/route.ts:3 | * Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/integrations/webhooks/dlq/[id]/resolve/route.ts:4 | * POST /api/integrations/webhooks/dlq/[id]/resolve - Mark DLQ entry as resolved Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/integrations/webhooks/dlq/[id]/resolve/route.ts:5 | * Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/integrations/webhooks/dlq/[id]/resolve/route.ts:6 | * Mark a DLQ entry as resolved with optional notes. This is used when the issue Scope-checking auth functions defined but never consumed by route handlers | |
| high | security theater | security_theater.api_key_scopes_never_enforced | apps/api/app/api/integrations/webhooks/dlq/[id]/resolve/route.ts:7 | * has been addressed outside the system (e.g., fixed in the destination system). Scope-checking auth functions defined but never consumed by route handlers |
Page 1 of 20