{"version":"1.164.0","results":[{"check_id":"generic.secrets.security.detected-username-and-password-in-uri.detected-username-and-password-in-uri","path":".env.docker.production.example","start":{"line":23,"col":14,"offset":1379},"end":{"line":23,"col":64,"offset":1429},"extra":{"message":"Username and password in URI detected","metadata":{"owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"cwe":["CWE-798: Use of Hard-coded Credentials"],"references":["https://github.com/grab/secret-scanner/blob/master/scanner/signatures/pattern.go"],"category":"security","technology":["secrets"],"confidence":"MEDIUM","cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["vuln"],"likelihood":"MEDIUM","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-username-and-password-in-uri.detected-username-and-password-in-uri","shortlink":"https://sg.run/8yA4"},"severity":"ERROR","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"generic.secrets.security.detected-username-and-password-in-uri.detected-username-and-password-in-uri","path":".env.example","start":{"line":7,"col":15,"offset":659},"end":{"line":7,"col":66,"offset":710},"extra":{"message":"Username and password in URI detected","metadata":{"owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"cwe":["CWE-798: Use of Hard-coded Credentials"],"references":["https://github.com/grab/secret-scanner/blob/master/scanner/signatures/pattern.go"],"category":"security","technology":["secrets"],"confidence":"MEDIUM","cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["vuln"],"likelihood":"MEDIUM","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-username-and-password-in-uri.detected-username-and-password-in-uri","shortlink":"https://sg.run/8yA4"},"severity":"ERROR","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"javascript.browser.security.wildcard-postmessage-configuration.wildcard-postmessage-configuration","path":"apps/dashboard/src/app/sign-in/[[...sign-in]]/SignInPageClient.tsx","start":{"line":17,"col":3,"offset":706},"end":{"line":17,"col":42,"offset":745},"extra":{"message":"The target origin of the window.postMessage() API is set to \"*\". This could allow for information disclosure due to the possibility of any origin allowed to receive the message.","metadata":{"owasp":["A08:2021 - Software and Data Integrity Failures","A08:2025 - Software or Data Integrity Failures"],"cwe":["CWE-345: Insufficient Verification of Data Authenticity"],"category":"security","technology":["browser"],"subcategory":["audit"],"likelihood":"HIGH","impact":"MEDIUM","confidence":"MEDIUM","references":["https://owasp.org/Top10/A08_2021-Software_and_Data_Integrity_Failures"],"license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Improper Authentication"],"source":"https://semgrep.dev/r/javascript.browser.security.wildcard-postmessage-configuration.wildcard-postmessage-configuration","shortlink":"https://sg.run/PJ4p"},"severity":"WARNING","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"javascript.browser.security.wildcard-postmessage-configuration.wildcard-postmessage-configuration","path":"apps/dashboard/src/components/layout/Sidebar.tsx","start":{"line":133,"col":3,"offset":4162},"end":{"line":133,"col":42,"offset":4201},"extra":{"message":"The target origin of the window.postMessage() API is set to \"*\". This could allow for information disclosure due to the possibility of any origin allowed to receive the message.","metadata":{"owasp":["A08:2021 - Software and Data Integrity Failures","A08:2025 - Software or Data Integrity Failures"],"cwe":["CWE-345: Insufficient Verification of Data Authenticity"],"category":"security","technology":["browser"],"subcategory":["audit"],"likelihood":"HIGH","impact":"MEDIUM","confidence":"MEDIUM","references":["https://owasp.org/Top10/A08_2021-Software_and_Data_Integrity_Failures"],"license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Improper Authentication"],"source":"https://semgrep.dev/r/javascript.browser.security.wildcard-postmessage-configuration.wildcard-postmessage-configuration","shortlink":"https://sg.run/PJ4p"},"severity":"WARNING","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"generic.secrets.security.detected-username-and-password-in-uri.detected-username-and-password-in-uri","path":"results/summaries/PCI_DSS_COMPLIANCE.md","start":{"line":74,"col":30,"offset":2112},"end":{"line":74,"col":80,"offset":2162},"extra":{"message":"Username and password in URI detected","metadata":{"owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"cwe":["CWE-798: Use of Hard-coded Credentials"],"references":["https://github.com/grab/secret-scanner/blob/master/scanner/signatures/pattern.go"],"category":"security","technology":["secrets"],"confidence":"MEDIUM","cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["vuln"],"likelihood":"MEDIUM","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-username-and-password-in-uri.detected-username-and-password-in-uri","shortlink":"https://sg.run/8yA4"},"severity":"ERROR","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}},{"check_id":"generic.secrets.security.detected-username-and-password-in-uri.detected-username-and-password-in-uri","path":"results/summaries/PCI_DSS_COMPLIANCE.md","start":{"line":100,"col":30,"offset":2920},"end":{"line":100,"col":80,"offset":2970},"extra":{"message":"Username and password in URI detected","metadata":{"owasp":["A07:2021 - Identification and Authentication Failures","A07:2025 - Authentication Failures"],"cwe":["CWE-798: Use of Hard-coded Credentials"],"references":["https://github.com/grab/secret-scanner/blob/master/scanner/signatures/pattern.go"],"category":"security","technology":["secrets"],"confidence":"MEDIUM","cwe2022-top25":true,"cwe2021-top25":true,"subcategory":["vuln"],"likelihood":"MEDIUM","impact":"MEDIUM","license":"Semgrep Rules License v1.0. For more details, visit semgrep.dev/legal/rules-license","vulnerability_class":["Hard-coded Secrets"],"source":"https://semgrep.dev/r/generic.secrets.security.detected-username-and-password-in-uri.detected-username-and-password-in-uri","shortlink":"https://sg.run/8yA4"},"severity":"ERROR","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}}],"errors":[{"code":3,"level":"warn","type":"Syntax error","message":"Syntax error at line results/individual-repos/scan/trufflehog.json:2:\n `{` was unexpected","path":"results/individual-repos/scan/trufflehog.json"},{"code":3,"level":"warn","type":["PartialParsing",[{"path":"scripts/docker-prod-deploy.sh","start":{"line":8,"col":49,"offset":0},"end":{"line":8,"col":50,"offset":1}},{"path":"scripts/docker-prod-deploy.sh","start":{"line":8,"col":57,"offset":0},"end":{"line":8,"col":58,"offset":1}},{"path":"scripts/docker-prod-deploy.sh","start":{"line":8,"col":75,"offset":0},"end":{"line":8,"col":76,"offset":1}},{"path":"scripts/docker-prod-deploy.sh","start":{"line":8,"col":83,"offset":0},"end":{"line":8,"col":84,"offset":1}}]],"message":"Syntax error at line scripts/docker-prod-deploy.sh:8:\n `<` was unexpected","path":"scripts/docker-prod-deploy.sh","spans":[{"file":"scripts/docker-prod-deploy.sh","start":{"line":8,"col":49,"offset":0},"end":{"line":8,"col":50,"offset":1}},{"file":"scripts/docker-prod-deploy.sh","start":{"line":8,"col":57,"offset":0},"end":{"line":8,"col":58,"offset":1}},{"file":"scripts/docker-prod-deploy.sh","start":{"line":8,"col":75,"offset":0},"end":{"line":8,"col":76,"offset":1}},{"file":"scripts/docker-prod-deploy.sh","start":{"line":8,"col":83,"offset":0},"end":{"line":8,"col":84,"offset":1}}]}],"paths":{"scanned":[".claude/settings.local.json",".codex",".dockerignore",".env.docker.dev",".env.docker.production.example",".env.docker.production.generated",".env.docker.test",".env.example",".env_traefik",".gitignore",".gitlab-ci.yml","Dockerfile.dev","Dockerfile.production","Dockerfile.test","apps/admin/next-env.d.ts","apps/admin/next.config.js","apps/admin/package.json","apps/admin/postcss.config.js","apps/admin/src/app/auth-redirect/page.tsx","apps/admin/src/app/dashboard/admin-users/page.tsx","apps/admin/src/app/dashboard/audit-logs/page.tsx","apps/admin/src/app/dashboard/billing/page.tsx","apps/admin/src/app/dashboard/companies/[id]/page.tsx","apps/admin/src/app/dashboard/companies/page.tsx","apps/admin/src/app/dashboard/containers/page.tsx","apps/admin/src/app/dashboard/layout.tsx","apps/admin/src/app/dashboard/menu-management/page.tsx","apps/admin/src/app/dashboard/notifications/page.tsx","apps/admin/src/app/dashboard/page.tsx","apps/admin/src/app/dashboard/pricing/page.tsx","apps/admin/src/app/dashboard/renters/page.tsx","apps/admin/src/app/dashboard/site-config/page.tsx","apps/admin/src/app/favicon.ico/route.ts","apps/admin/src/app/forgot-password/page.tsx","apps/admin/src/app/globals.css","apps/admin/src/app/icon.tsx","apps/admin/src/app/layout.tsx","apps/admin/src/app/login/page.tsx","apps/admin/src/app/page.tsx","apps/admin/src/app/reset-password/page.tsx","apps/admin/src/components/I18nProvider.tsx","apps/admin/src/components/PublicFooter.tsx","apps/admin/src/components/PublicHeader.tsx","apps/admin/src/components/PublicShell.tsx","apps/admin/src/lib/api.ts","apps/admin/src/lib/appUrls.ts","apps/admin/tailwind.config.ts","apps/admin/tsconfig.json","apps/api/.env.test","apps/api/package.json","apps/api/src/app.ts","apps/api/src/data/platform-content.json","apps/api/src/http/errors/errorMiddleware.ts","apps/api/src/http/errors/index.ts","apps/api/src/http/respond/index.ts","apps/api/src/http/upload/index.ts","apps/api/src/http/validate/index.ts","apps/api/src/index.ts","apps/api/src/lib/emailTranslations.ts","apps/api/src/lib/isDatabaseUnavailable.ts","apps/api/src/lib/prisma.ts","apps/api/src/lib/redis.ts","apps/api/src/lib/storage/.gitkeep","apps/api/src/lib/storage/companies/cmoyu36ii000112g8j5m84zgv/vehicles/1959e058bf32f7f672cbea6b7683f88b.jpg","apps/api/src/lib/storage/companies/cmoyu36ii000112g8j5m84zgv/vehicles/d9b8c7164544f5d971a1ea09dba1ba38.jpg","apps/api/src/lib/storage/companies/cmoyu36ii000112g8j5m84zgv/vehicles/eae81e21ca0017a9d22eb92b64ff0c42.jpg","apps/api/src/lib/storage/companies/cmp1s6doc0003wims028due25/brand/logo.jpg","apps/api/src/lib/storage/companies/cmp1s6doc0003wims028due25/vehicles/02d49acd5dfd85c60ee1758a14dbef07.jpg","apps/api/src/lib/storage/companies/cmpbosg0o0001bh8tc433zxt2/vehicles/c2c92f69332b855e21ffeb95229a4add.jpg","apps/api/src/lib/storage.ts","apps/api/src/middleware/authHelpers.ts","apps/api/src/middleware/rateLimiter.ts","apps/api/src/middleware/requireAdminAuth.ts","apps/api/src/middleware/requireApiKey.ts","apps/api/src/middleware/requireCompanyAuth.ts","apps/api/src/middleware/requireRenterAuth.ts","apps/api/src/middleware/requireRole.ts","apps/api/src/middleware/requireSubscription.ts","apps/api/src/middleware/requireTenant.ts","apps/api/src/modules/admin/admin.billing.service.ts","apps/api/src/modules/admin/admin.presenter.ts","apps/api/src/modules/admin/admin.repo.test.ts","apps/api/src/modules/admin/admin.repo.ts","apps/api/src/modules/admin/admin.routes.ts","apps/api/src/modules/admin/admin.schemas.ts","apps/api/src/modules/admin/admin.service.test.ts","apps/api/src/modules/admin/admin.service.ts","apps/api/src/modules/analytics/analytics.routes.ts","apps/api/src/modules/analytics/analytics.schemas.ts","apps/api/src/modules/analytics/analytics.service.ts","apps/api/src/modules/auth/auth.company.repo.ts","apps/api/src/modules/auth/auth.company.routes.ts","apps/api/src/modules/auth/auth.company.schemas.ts","apps/api/src/modules/auth/auth.company.service.ts","apps/api/src/modules/auth/auth.employee.repo.test.ts","apps/api/src/modules/auth/auth.employee.repo.ts","apps/api/src/modules/auth/auth.employee.routes.ts","apps/api/src/modules/auth/auth.employee.schemas.ts","apps/api/src/modules/auth/auth.employee.service.test.ts","apps/api/src/modules/auth/auth.employee.service.ts","apps/api/src/modules/auth/auth.presenter.ts","apps/api/src/modules/auth/auth.renter.repo.ts","apps/api/src/modules/auth/auth.renter.routes.ts","apps/api/src/modules/auth/auth.renter.schemas.ts","apps/api/src/modules/auth/auth.renter.service.ts","apps/api/src/modules/companies/company.presenter.test.ts","apps/api/src/modules/companies/company.presenter.ts","apps/api/src/modules/companies/company.repo.ts","apps/api/src/modules/companies/company.routes.ts","apps/api/src/modules/companies/company.schemas.ts","apps/api/src/modules/companies/company.service.ts","apps/api/src/modules/companies/company.test.ts","apps/api/src/modules/complaints/complaint.repo.ts","apps/api/src/modules/complaints/complaint.routes.ts","apps/api/src/modules/complaints/complaint.schemas.ts","apps/api/src/modules/complaints/complaint.service.ts","apps/api/src/modules/customers/customer.presenter.ts","apps/api/src/modules/customers/customer.repo.ts","apps/api/src/modules/customers/customer.routes.ts","apps/api/src/modules/customers/customer.schemas.ts","apps/api/src/modules/customers/customer.service.ts","apps/api/src/modules/customers/customer.test.ts","apps/api/src/modules/marketplace/marketplace.presenter.ts","apps/api/src/modules/marketplace/marketplace.repo.ts","apps/api/src/modules/marketplace/marketplace.routes.ts","apps/api/src/modules/marketplace/marketplace.schemas.ts","apps/api/src/modules/marketplace/marketplace.service.ts","apps/api/src/modules/marketplace/marketplace.test.ts","apps/api/src/modules/menu/menu.service.test.ts","apps/api/src/modules/menu/menu.service.ts","apps/api/src/modules/notifications/notification.repo.ts","apps/api/src/modules/notifications/notification.routes.ts","apps/api/src/modules/notifications/notification.schemas.ts","apps/api/src/modules/notifications/notification.service.ts","apps/api/src/modules/offers/offer.repo.ts","apps/api/src/modules/offers/offer.routes.ts","apps/api/src/modules/offers/offer.schemas.ts","apps/api/src/modules/offers/offer.service.ts","apps/api/src/modules/payments/payment.repo.ts","apps/api/src/modules/payments/payment.routes.ts","apps/api/src/modules/payments/payment.schemas.ts","apps/api/src/modules/payments/payment.service.ts","apps/api/src/modules/reservations/reservation.additional-driver.service.ts","apps/api/src/modules/reservations/reservation.document.service.ts","apps/api/src/modules/reservations/reservation.inspection.service.ts","apps/api/src/modules/reservations/reservation.insurance.service.ts","apps/api/src/modules/reservations/reservation.lifecycle.service.ts","apps/api/src/modules/reservations/reservation.photo.service.ts","apps/api/src/modules/reservations/reservation.presenter.test.ts","apps/api/src/modules/reservations/reservation.presenter.ts","apps/api/src/modules/reservations/reservation.pricing.service.ts","apps/api/src/modules/reservations/reservation.repo.ts","apps/api/src/modules/reservations/reservation.routes.ts","apps/api/src/modules/reservations/reservation.schemas.ts","apps/api/src/modules/reservations/reservation.service.ts","apps/api/src/modules/reservations/reservation.test.ts","apps/api/src/modules/reviews/review.repo.ts","apps/api/src/modules/reviews/review.routes.ts","apps/api/src/modules/reviews/review.schemas.ts","apps/api/src/modules/reviews/review.service.ts","apps/api/src/modules/site/site.presenter.ts","apps/api/src/modules/site/site.repo.ts","apps/api/src/modules/site/site.routes.ts","apps/api/src/modules/site/site.schemas.ts","apps/api/src/modules/site/site.service.ts","apps/api/src/modules/site/site.test.ts","apps/api/src/modules/subscriptions/subscription.entitlement.ts","apps/api/src/modules/subscriptions/subscription.policy.ts","apps/api/src/modules/subscriptions/subscription.repo.ts","apps/api/src/modules/subscriptions/subscription.routes.ts","apps/api/src/modules/subscriptions/subscription.schemas.ts","apps/api/src/modules/subscriptions/subscription.service.ts","apps/api/src/modules/team/team.routes.ts","apps/api/src/modules/team/team.schemas.ts","apps/api/src/modules/team/team.service.ts","apps/api/src/modules/vehicles/vehicle.presenter.ts","apps/api/src/modules/vehicles/vehicle.repo.ts","apps/api/src/modules/vehicles/vehicle.routes.ts","apps/api/src/modules/vehicles/vehicle.schemas.ts","apps/api/src/modules/vehicles/vehicle.service.ts","apps/api/src/modules/vehicles/vehicle.test.ts","apps/api/src/modules/webhooks/webhook.routes.ts","apps/api/src/services/additionalDriverService.ts","apps/api/src/services/amanpayService.ts","apps/api/src/services/containerService.ts","apps/api/src/services/financialReportService.ts","apps/api/src/services/insuranceService.ts","apps/api/src/services/invoicePdfService.ts","apps/api/src/services/licenseValidationService.ts","apps/api/src/services/notificationLocalizationService.test.ts","apps/api/src/services/notificationLocalizationService.ts","apps/api/src/services/notificationService.ts","apps/api/src/services/paypalService.ts","apps/api/src/services/platformContentService.ts","apps/api/src/services/pricingRuleService.ts","apps/api/src/services/teamService.test.ts","apps/api/src/services/teamService.ts","apps/api/src/services/vehicleAvailabilityService.ts","apps/api/src/swagger/openapi.ts","apps/api/src/types/express.d.ts","apps/api/tsconfig.json","apps/api/tsconfig.vehicle-pricing.json","apps/api/vitest.config.ts","apps/api/vitest.integration.config.ts","apps/dashboard/README.md","apps/dashboard/next-env.d.ts","apps/dashboard/next.config.js","apps/dashboard/package.json","apps/dashboard/postcss.config.js","apps/dashboard/public/vehicle-condition-template.png","apps/dashboard/src/app/(dashboard)/billing/page.tsx","apps/dashboard/src/app/(dashboard)/complaints/page.tsx","apps/dashboard/src/app/(dashboard)/contracts/[id]/page.tsx","apps/dashboard/src/app/(dashboard)/contracts/page.tsx","apps/dashboard/src/app/(dashboard)/customers/page.tsx","apps/dashboard/src/app/(dashboard)/fleet/[id]/page.tsx","apps/dashboard/src/app/(dashboard)/fleet/page.tsx","apps/dashboard/src/app/(dashboard)/layout.tsx","apps/dashboard/src/app/(dashboard)/notifications/page.tsx","apps/dashboard/src/app/(dashboard)/offers/page.tsx","apps/dashboard/src/app/(dashboard)/online-reservations/page.tsx","apps/dashboard/src/app/(dashboard)/page.tsx","apps/dashboard/src/app/(dashboard)/reports/page.tsx","apps/dashboard/src/app/(dashboard)/reservations/[id]/page.tsx","apps/dashboard/src/app/(dashboard)/reservations/new/page.tsx","apps/dashboard/src/app/(dashboard)/reservations/page.tsx","apps/dashboard/src/app/(dashboard)/reviews/page.tsx","apps/dashboard/src/app/(dashboard)/settings/page.tsx","apps/dashboard/src/app/(dashboard)/subscription/page.tsx","apps/dashboard/src/app/(dashboard)/team/page.tsx","apps/dashboard/src/app/(public)/layout.tsx","apps/dashboard/src/app/(public)/sign-in/page.tsx","apps/dashboard/src/app/forgot-password/ForgotPasswordPageClient.tsx","apps/dashboard/src/app/forgot-password/page.tsx","apps/dashboard/src/app/globals.css","apps/dashboard/src/app/icon.svg","apps/dashboard/src/app/layout.tsx","apps/dashboard/src/app/onboarding/accept-invite/page.tsx","apps/dashboard/src/app/onboarding/page.tsx","apps/dashboard/src/app/reset-password/ResetPasswordPageClient.tsx","apps/dashboard/src/app/reset-password/page.tsx","apps/dashboard/src/app/sign-in/[[...sign-in]]/SignInPageClient.tsx","apps/dashboard/src/app/sign-up/[[...sign-up]]/page.tsx","apps/dashboard/src/components/I18nProvider.tsx","apps/dashboard/src/components/VehicleCalendar.tsx","apps/dashboard/src/components/VehiclePricingManager.tsx","apps/dashboard/src/components/layout/DashboardAccessGuard.tsx","apps/dashboard/src/components/layout/PublicFooter.tsx","apps/dashboard/src/components/layout/PublicHeader.tsx","apps/dashboard/src/components/layout/PublicShell.tsx","apps/dashboard/src/components/layout/Sidebar.tsx","apps/dashboard/src/components/layout/TopBar.tsx","apps/dashboard/src/components/reservations/DamageInspectionCard.tsx","apps/dashboard/src/components/reservations/ReservationPhotoSection.tsx","apps/dashboard/src/components/reservations/VehicleConditionSheet.tsx","apps/dashboard/src/components/team/EditMemberModal.tsx","apps/dashboard/src/components/team/InviteModal.tsx","apps/dashboard/src/components/team/PermissionsMatrix.tsx","apps/dashboard/src/components/ui/BilingualInput.tsx","apps/dashboard/src/components/ui/StatCard.tsx","apps/dashboard/src/hooks/useTeam.ts","apps/dashboard/src/lib/api.ts","apps/dashboard/src/lib/appUrls.ts","apps/dashboard/src/lib/dashboardPaths.ts","apps/dashboard/src/lib/preferences.ts","apps/dashboard/src/lib/urls.ts","apps/dashboard/src/middleware.ts","apps/dashboard/tailwind.config.ts","apps/dashboard/tsconfig.json","apps/marketplace/next-env.d.ts","apps/marketplace/next.config.js","apps/marketplace/package.json","apps/marketplace/postcss.config.js","apps/marketplace/src/app/(public)/HomeContent.tsx","apps/marketplace/src/app/(public)/app-privacy-ar/page.tsx","apps/marketplace/src/app/(public)/app-privacy-en/page.tsx","apps/marketplace/src/app/(public)/app-privacy-fr/page.tsx","apps/marketplace/src/app/(public)/app-tc-ar/page.tsx","apps/marketplace/src/app/(public)/app-tc-en/page.tsx","apps/marketplace/src/app/(public)/app-tc-fr/page.tsx","apps/marketplace/src/app/(public)/company-workspace/page.tsx","apps/marketplace/src/app/(public)/explore/ExploreSearchForm.tsx","apps/marketplace/src/app/(public)/explore/ExploreVehicleGrid.tsx","apps/marketplace/src/app/(public)/explore/[slug]/page.tsx","apps/marketplace/src/app/(public)/explore/[slug]/vehicles/[id]/page.tsx","apps/marketplace/src/app/(public)/explore/page.tsx","apps/marketplace/src/app/(public)/features/page.tsx","apps/marketplace/src/app/(public)/footer/[slug]/page.tsx","apps/marketplace/src/app/(public)/layout.tsx","apps/marketplace/src/app/(public)/page.tsx","apps/marketplace/src/app/(public)/platform-operations/page.tsx","apps/marketplace/src/app/(public)/pricing/PricingClient.tsx","apps/marketplace/src/app/(public)/pricing/PricingPageContent.tsx","apps/marketplace/src/app/(public)/pricing/page.tsx","apps/marketplace/src/app/(public)/review/page.tsx","apps/marketplace/src/app/globals.css","apps/marketplace/src/app/layout.tsx","apps/marketplace/src/app/renter/dashboard/page.tsx","apps/marketplace/src/app/renter/layout.tsx","apps/marketplace/src/app/renter/notifications/page.tsx","apps/marketplace/src/app/renter/profile/page.tsx","apps/marketplace/src/app/renter/saved-companies/page.tsx","apps/marketplace/src/app/renter/sign-in/page.tsx","apps/marketplace/src/app/renter/sign-up/page.tsx","apps/marketplace/src/app/sign-in/page.tsx","apps/marketplace/src/components/BookingForm.tsx","apps/marketplace/src/components/FooterContentPage.tsx","apps/marketplace/src/components/MarketplaceFooter.tsx","apps/marketplace/src/components/MarketplaceHeader.tsx","apps/marketplace/src/components/MarketplaceShell.tsx","apps/marketplace/src/components/RenterShell.tsx","apps/marketplace/src/components/WorkspaceFrame.tsx","apps/marketplace/src/components/WorkspaceTabs.tsx","apps/marketplace/src/lib/api.ts","apps/marketplace/src/lib/appUrls.ts","apps/marketplace/src/lib/footerContent.ts","apps/marketplace/src/lib/i18n.server.ts","apps/marketplace/src/lib/i18n.ts","apps/marketplace/src/lib/preferences.ts","apps/marketplace/src/lib/renter.ts","apps/marketplace/src/middleware.ts","apps/marketplace/tailwind.config.ts","apps/marketplace/tsconfig.json","car_management_system.code-workspace","car_rental_app.code-workspace","command_to_run_dev.txt","deploy_dev.txt","docker/pgadmin/servers.json","docker/pgmanage/override.py","docker/scripts/dev-bootstrap.sh","docker/scripts/npm","docker-compose.dev.yml","docker-compose.pgmanage.yml","docker-compose.portainer.production.yml","docker-compose.production.yml","docker-compose.registry.local.yml","docker-compose.registry.production.yml","docker-compose.test.yml","docs/DOCKER.md","docs/README.md","docs/dev_docker_run.md","docs/project-design/API_REFACTOR_TASK_LIST.md","docs/project-design/AUDIT.md","docs/project-design/B2B_BILLING_AND_INVOICE_EXECUTION_PLAN.md","docs/project-design/B2B_SUBSCRIPTION_EXECUTION_PLAN.md","docs/project-design/COOKIE_POLICY.md","docs/project-design/FEATURES.md","docs/project-design/INTEGRATION.md","docs/project-design/NOTIFICATION_LOCALIZATION_POLICY.md","docs/project-design/PAGES.md","docs/project-design/VULNERABILITY_FIXES_2026-05-22.md","docs/project-design/advanced-features.md","docs/project-design/api-routes.md","docs/project-design/command_Create_admin_account.md","docs/project-design/contrat_location_voiture_maroc_with_laws.md","docs/project-design/review_management_process.md","docs/project-design/schema.md","docs/project-design/simple_robust_car_rental_process.md","docs/rental_car_pricing_management_plan.md","docs/stubs/EditMemberModal.tsx","docs/stubs/InviteModal.tsx","docs/stubs/PermissionsMatrix.tsx","docs/stubs/requireRole.ts","docs/stubs/team.ts","docs/stubs/team.tsx","docs/stubs/teamService.ts","docs/stubs/useTeam.ts","docs/stubs/webhooks.ts","docs/website-admin-menu-management-plan.md","memory/MEMORY.md","memory/project_auth_architecture.md","package-lock.json","package.json","packages/database/client.d.ts","packages/database/client.js","packages/database/package.json","packages/database/prisma/migrations/00000000000000_init/migration.sql","packages/database/prisma/migrations/20260507000000_add_company_containers/migration.sql","packages/database/prisma/migrations/20260508000000_add_employee_password_hash/migration.sql","packages/database/prisma/migrations/20260508000001_add_password_reset_tokens/migration.sql","packages/database/prisma/migrations/20260509000000_add_vehicle_calendar_blocks/migration.sql","packages/database/prisma/migrations/20260511000000_review_token/migration.sql","packages/database/prisma/migrations/20260511000001_reservation_vehicle_category/migration.sql","packages/database/prisma/migrations/20260518000000_add_employee_preferred_language/migration.sql","packages/database/prisma/migrations/20260520000000_add_customer_license_image/migration.sql","packages/database/prisma/migrations/20260524000000_add_vehicle_pickup_dropoff/migration.sql","packages/database/prisma/migrations/20260524000001_backfill_vehicle_location_arrays/migration.sql","packages/database/prisma/migrations/20260525000000_add_pricing_config/migration.sql","packages/database/prisma/migrations/20260525130000_b2b_subscription_lifecycle/migration.sql","packages/database/prisma/migrations/20260525140000_pricing_promotions/migration.sql","packages/database/prisma/migrations/20260525153000_plan_features/migration.sql","packages/database/prisma/migrations/20260525170000_b2b_billing_foundation/migration.sql","packages/database/prisma/migrations/20260525190000_notification_localization/migration.sql","packages/database/prisma/migrations/20260525193000_booking_confirmed_pickup_details/migration.sql","packages/database/prisma/migrations/20260525200000_reservation_photos/migration.sql","packages/database/prisma/migrations/20260525210000_expand_vehicle_status/migration.sql","packages/database/prisma/migrations/20260525220000_review_management/migration.sql","packages/database/prisma/migrations/20260602000000_vehicle_pricing_management/migration.sql","packages/database/prisma/migrations/20260603000000_menu_management/migration.sql","packages/database/prisma/migrations/20260603010000_seed_default_sidebar_menu/migration.sql","packages/database/prisma/migrations/migration_lock.toml","packages/database/prisma/schema.prisma","packages/database/prisma/seed.ts","packages/database/scripts/db-deploy.cjs","packages/database/src/client.d.ts","packages/database/src/client.js","packages/database/src/index.d.ts","packages/database/src/index.js","packages/database/src/index.ts","packages/database/src/runtime-config.js","packages/database/src/runtime-config.ts","packages/database/tsconfig.json","packages/types/package.json","packages/types/src/api.ts","packages/types/src/damage.ts","packages/types/src/fuel.ts","packages/types/src/index.ts","packages/types/src/marketplace-homepage.ts","packages/types/tsconfig.json","results/.scan_metadata.json","results/individual-repos/scan/checkov.json","results/individual-repos/scan/hadolint.json","results/individual-repos/scan/trivy.json","results/individual-repos/scan/trufflehog.json","results/summaries/COMPLIANCE_SUMMARY.md","results/summaries/PCI_DSS_COMPLIANCE.md","results/summaries/SUMMARY.md","results/summaries/attack-navigator.json","results/summaries/dashboard.html","scripts/backup-restore-guide.md","scripts/cronjobs.md","scripts/docker-cleanup.sh","scripts/docker-prod-backup.sh","scripts/docker-prod-common.sh","scripts/docker-prod-deploy.sh","scripts/docker-prod-restore.sh","scripts/docker-prod-run-pulled-image.sh","scripts/docker-prod-up-admin.sh","scripts/docker-prod-up-all.sh","scripts/docker-prod-up-api.sh","scripts/docker-prod-up-dashboard.sh","scripts/docker-prod-up-frontends.sh","scripts/docker-prod-up-marketplace.sh","scripts/docker-prod-up-pgmanage.sh","scripts/docker-prod-up-portainer.sh","scripts/docker-prod-up-postgres.sh","scripts/docker-prod-up-redis.sh","scripts/docker-prod-up-registry.sh","scripts/docker-prod-up-traefik.sh","scripts/docker-registry-local-up.sh","scripts/run-with-env-file.cjs","scripts/setup-clerk-keys.sh","security-reports/semgrep.json","security-reports/trivy.json","traefik.yaml","tsconfig.base.json","turbo.json"]},"time":{"rules":[],"rules_parse_time":0.30164408683776855,"profiling_times":{"config_time":0.9542222023010254,"core_time":14.531525611877441,"ignores_time":0.0008528232574462891,"total_time":15.492584943771362},"parsing_time":{"total_time":0.0,"per_file_time":{"mean":0.0,"std_dev":0.0},"very_slow_stats":{"time_ratio":0.0,"count_ratio":0.0},"very_slow_files":[]},"scanning_time":{"total_time":52.028945446014404,"per_file_time":{"mean":0.04045796690980898,"std_dev":0.026577249628501647},"very_slow_stats":{"time_ratio":0.10603678454864524,"count_ratio":0.0015552099533437014},"very_slow_files":[{"fpath":"apps/admin/src/app/dashboard/companies/[id]/page.tsx","ftime":1.5096909999847412},{"fpath":"security-reports/trivy.json","ftime":4.007291078567505}]},"matching_time":{"total_time":0.0,"per_file_and_rule_time":{"mean":0.0,"std_dev":0.0},"very_slow_stats":{"time_ratio":0.0,"count_ratio":0.0},"very_slow_rules_on_files":[]},"tainting_time":{"total_time":0.0,"per_def_and_rule_time":{"mean":0.0,"std_dev":0.0},"very_slow_stats":{"time_ratio":0.0,"count_ratio":0.0},"very_slow_rules_on_defs":[]},"fixpoint_timeouts":[{"error_type":"Fixpoint timeout","severity":"warn","message":"Fixpoint timeout while performing taint analysis at apps/admin/src/app/dashboard/billing/page.tsx:232:24 [rules: 4, first: javascript.express.security.x-frame-options-misconfiguration.x-frame-options-misconfiguration]","location":{"path":"apps/admin/src/app/dashboard/billing/page.tsx","start":{"line":232,"col":25,"offset":5397},"end":{"line":232,"col":41,"offset":5413}}},{"error_type":"Fixpoint timeout","severity":"warn","message":"Fixpoint timeout while performing taint analysis at apps/admin/src/app/dashboard/companies/[id]/page.tsx:309:24 [rules: 5, first: javascript.express.security.injection.raw-html-format.raw-html-format]","location":{"path":"apps/admin/src/app/dashboard/companies/[id]/page.tsx","start":{"line":309,"col":25,"offset":9977},"end":{"line":309,"col":47,"offset":9999}}},{"error_type":"Fixpoint timeout","severity":"warn","message":"Fixpoint timeout while performing taint analysis at apps/admin/src/app/dashboard/menu-management/page.tsx:163:24 [rules: 1, first: javascript.express.security.injection.raw-html-format.raw-html-format]","location":{"path":"apps/admin/src/app/dashboard/menu-management/page.tsx","start":{"line":163,"col":25,"offset":4362},"end":{"line":163,"col":43,"offset":4380}}},{"error_type":"Fixpoint timeout","severity":"warn","message":"Fixpoint timeout while performing taint analysis at apps/dashboard/src/app/(dashboard)/reservations/[id]/page.tsx:259:24 [rules: 3, first: javascript.express.security.x-frame-options-misconfiguration.x-frame-options-misconfiguration]","location":{"path":"apps/dashboard/src/app/(dashboard)/reservations/[id]/page.tsx","start":{"line":259,"col":25,"offset":11353},"end":{"line":259,"col":46,"offset":11374}}},{"error_type":"Fixpoint timeout","severity":"warn","message":"Fixpoint timeout while performing taint analysis at apps/dashboard/src/app/(dashboard)/reservations/new/page.tsx:41:24 [rules: 1, first: javascript.express.security.x-frame-options-misconfiguration.x-frame-options-misconfiguration]","location":{"path":"apps/dashboard/src/app/(dashboard)/reservations/new/page.tsx","start":{"line":41,"col":25,"offset":1170},"end":{"line":41,"col":43,"offset":1188}}},{"error_type":"Fixpoint timeout","severity":"warn","message":"Fixpoint timeout while performing taint analysis at apps/dashboard/src/components/VehicleCalendar.tsx:46:24 [rules: 1, first: javascript.express.security.injection.raw-html-format.raw-html-format]","location":{"path":"apps/dashboard/src/components/VehicleCalendar.tsx","start":{"line":46,"col":25,"offset":1467},"end":{"line":46,"col":40,"offset":1482}}},{"error_type":"Fixpoint timeout","severity":"warn","message":"Fixpoint timeout while performing taint analysis at apps/dashboard/src/components/VehiclePricingManager.tsx:172:24 [rules: 4, first: javascript.express.security.injection.raw-html-format.raw-html-format]","location":{"path":"apps/dashboard/src/components/VehiclePricingManager.tsx","start":{"line":172,"col":25,"offset":5234},"end":{"line":172,"col":46,"offset":5255}}}],"prefiltering":{"project_level_time":0.0,"file_level_time":0.0,"rules_with_project_prefilters_ratio":0.0,"rules_with_file_prefilters_ratio":0.9869868764084663,"rules_selected_ratio":0.039657991250938975,"rules_matched_ratio":0.039657991250938975},"targets":[],"total_bytes":0,"max_memory_bytes":2159705728},"engine_requested":"OSS","skipped_rules":[],"profiling_results":[]}