🛡️ Sentinel: [MEDIUM] Fix missing input validation on external JSON data #409
Annotations
1 warning and 6 notices
|
setup-ecosystem
The `python-version` input is not set. The version of Python currently in `PATH` will be used.
|
|
submit-dependency-snapshot
Snapshot successfully created at 2026-02-20T11:02:14.475Z
|
|
submit-dependency-snapshot
{
"manifests": {
"requirements.txt": {
"resolved": {
"pkg:pypi/anyio@4.12.1": {
"package_url": "pkg:pypi/anyio@4.12.1",
"relationship": "indirect",
"scope": "runtime",
"dependencies": []
},
"pkg:pypi/typing-extensions@4.15.0": {
"package_url": "pkg:pypi/typing-extensions@4.15.0",
"relationship": "indirect",
"scope": "runtime",
"dependencies": []
},
"pkg:pypi/httpx@0.28.1": {
"package_url": "pkg:pypi/httpx@0.28.1",
"relationship": "direct",
"scope": "runtime",
"dependencies": [
"pkg:pypi/anyio@4.12.1",
"pkg:pypi/typing-extensions@4.15.0",
"pkg:pypi/certifi@2026.1.4",
"pkg:pypi/h11@0.16.0",
"pkg:pypi/idna@3.11",
"pkg:pypi/httpcore@1.0.9"
]
},
"pkg:pypi/certifi@2026.1.4": {
"package_url": "pkg:pypi/certifi@2026.1.4",
"relationship": "indirect",
"scope": "runtime",
"dependencies": []
},
"pkg:pypi/h11@0.16.0": {
"package_url": "pkg:pypi/h11@0.16.0",
"relationship": "indirect",
"scope": "runtime",
"dependencies": []
},
"pkg:pypi/idna@3.11": {
"package_url": "pkg:pypi/idna@3.11",
"relationship": "indirect",
"scope": "runtime",
"dependencies": []
},
"pkg:pypi/httpcore@1.0.9": {
"package_url": "pkg:pypi/httpcore@1.0.9",
"relationship": "indirect",
"scope": "runtime",
"dependencies": []
},
"pkg:pypi/python-dotenv@1.2.1": {
"package_url": "pkg:pypi/python-dotenv@1.2.1",
"relationship": "direct",
"scope": "runtime",
"dependencies": []
}
},
"name": "requirements.txt",
"file": {
"source_location": "requirements.txt"
}
}
},
"version": 0,
"job": {
"correlator": "submit-pypi",
"id": "22221537752"
},
"sha": "30cab3ad7300dd69435f1f1b9c104f6efe67452b",
"ref": "refs/heads/sentinel-validation-fix-13083465383994297818",
"scanned": "2026-02-20T11:02:14.196Z",
"detector": {
"name": "Automatic Dependency Submission",
"version": "0b8e67cacb3b",
"url": "https://github.com/actions/component-detection-dependency-submission-action"
}
}
|
|
submit-dependency-snapshot
Submitting snapshot...
|
|
log-toolchain-versions
Using pip-compile version: pip-compile, version 7.5.3
|
|
log-toolchain-versions
Using pip version: pip 24.0 from /usr/lib/python3/dist-packages/pip (python 3.12)
|
|
log-toolchain-versions
Using python version: Python 3.12.3
|
Loading