{"data":{"slug":"docker-build-strategies","verdict":"passed","scannedAt":"2026-10-26T02:53:43.487Z","scannerVersion":"1.2.1","latest":{"id":"5866a731-c849-4f1d-8d34-e3271de99ab5","createdAt":"2026-10-25T23:23:42.029Z","version":"3189252","trigger":"new","scannerVersion":"1.2.1","verdict":"passed","checks":[{"id":"hidden_instructions","status":"passed","findings":0,"label":"Hidden instructions"},{"id":"hidden_text","status":"passed","findings":0,"label":"Invisible text"},{"id":"sensitive_access","status":"passed","findings":3,"label":"Access to credentials"},{"id":"remote_code","status":"passed","findings":0,"label":"Downloads and runs code"},{"id":"exfiltration","status":"passed","findings":0,"label":"Sends data out"},{"id":"secrets","status":"passed","findings":0,"label":"Leaked secrets"}],"findings":[{"rule":"SA-001","check":"sensitive_access","title":"Refers to SSH keys or cloud credentials","detail":"Mentions files that hold private keys or cloud tokens.","evidence":"…**Do NOT** `COPY` credential files into the build context: `.npmrc`, `.pypirc`, `.netrc`, `pip.conf`, Maven `settings.xml`, `.env`, cloud credentia…","location":"SKILL.md, line 58","severity":"low"},{"rule":"SA-001","check":"sensitive_access","title":"Refers to SSH keys or cloud credentials","detail":"Mentions files that hold private keys or cloud tokens.","evidence":"…`COPY` credential files into the build context: `.npmrc`, `.pypirc`, `.netrc`, `pip.conf`, Maven `settings.xml`, `.env`, cloud credentials (`~/.aw…","location":"SKILL.md, line 58","severity":"low"},{"rule":"SA-001","check":"sensitive_access","title":"Refers to SSH keys or cloud credentials","detail":"Mentions files that hold private keys or cloud tokens.","evidence":"…trc`, `pip.conf`, Maven `settings.xml`, `.env`, cloud credentials (`~/.aws/credentials`, `~/.config/gcloud/`, service-account JSON files, `~/.azure/`), secr…","location":"SKILL.md, line 58","severity":"low"}],"toolCount":null},"history":[{"id":"5866a731-c849-4f1d-8d34-e3271de99ab5","createdAt":"2026-10-25T23:23:42.029Z","version":"3189252","trigger":"new","scannerVersion":"1.2.1","verdict":"passed","checks":[{"id":"hidden_instructions","status":"passed","findings":0,"label":"Hidden instructions"},{"id":"hidden_text","status":"passed","findings":0,"label":"Invisible text"},{"id":"sensitive_access","status":"passed","findings":3,"label":"Access to credentials"},{"id":"remote_code","status":"passed","findings":0,"label":"Downloads and runs code"},{"id":"exfiltration","status":"passed","findings":0,"label":"Sends data out"},{"id":"secrets","status":"passed","findings":0,"label":"Leaked secrets"}],"findings":[{"rule":"SA-001","check":"sensitive_access","title":"Refers to SSH keys or cloud credentials","detail":"Mentions files that hold private keys or cloud tokens.","evidence":"…**Do NOT** `COPY` credential files into the build context: `.npmrc`, `.pypirc`, `.netrc`, `pip.conf`, Maven `settings.xml`, `.env`, cloud credentia…","location":"SKILL.md, line 58","severity":"low"},{"rule":"SA-001","check":"sensitive_access","title":"Refers to SSH keys or cloud credentials","detail":"Mentions files that hold private keys or cloud tokens.","evidence":"…`COPY` credential files into the build context: `.npmrc`, `.pypirc`, `.netrc`, `pip.conf`, Maven `settings.xml`, `.env`, cloud credentials (`~/.aw…","location":"SKILL.md, line 58","severity":"low"},{"rule":"SA-001","check":"sensitive_access","title":"Refers to SSH keys or cloud credentials","detail":"Mentions files that hold private keys or cloud tokens.","evidence":"…trc`, `pip.conf`, Maven `settings.xml`, `.env`, cloud credentials (`~/.aws/credentials`, `~/.config/gcloud/`, service-account JSON files, `~/.azure/`), secr…","location":"SKILL.md, line 58","severity":"low"}],"toolCount":null}],"endpoint":null,"tools":[],"toolsHash":null,"toolsPinnedAt":null,"toolsLastSeenAt":null,"toolChanges":[]}}