registry / @codemieai/cdk / 0.1.479

@codemieai/cdk@0.1.479

Infrastructure as Code solution for managing Codemie AI assistants, datasources, and workflows through declarative YAML configuration

Static Scan Results

scanned 7d ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

CryptoEnvironmentVarsFilesystem

Supply chain

UrlStrings

Manifest

NoLicense

scanned 2 file(s), 353 KB of source, external domains: your-instance.codemie.ai, your-keycloak.auth.com

Source & flagged code

2 flagged

dist/index.jsView file

Lines 3487-3527javascript

3487 const config = {

3488 version: "1",

3489 project: {

3490 name: projectName,

3491 description: `Backup from ${backup.metadata.timestamp}`

3492 },

3493 environment: {

3494 // biome-ignore lint/suspicious/noTemplateCurlyInString: Not a template, but exact formatting

3495 codemie_api_url: "${CODEMIE_API_URL}",

3496 // biome-ignore lint/suspicious/noTemplateCurlyInString: Not a template, but exact formatting

3497 auth_server_url: "${CODEMIE_AUTH_URL}",

3498 // biome-ignore lint/suspicious/noTemplateCurlyInString: Not a template, but exact formatting

3499 auth_realm_name: "${CODEMIE_REALM:-codemie}",

3500 // biome-ignore lint/suspicious/noTemplateCurlyInString: Not a template, but exact formatting

3501 client_id: "${CODEMIE_CLIENT_ID:-}",

3502 // biome-ignore lint/suspicious/noTemplateCurlyInString: Not a template, but exact formatting

3503 client_secret: "${CODEMIE_CLIENT_SECRET:-}",

3504 // biome-ignore lint/suspicious/noTemplateCurlyInString: Not a template, but exact formatting

3505 username: "${CODEMIE_USERNAME:-}",

3506 // biome-ignore lint/suspicious/noTemplateCurlyInString: Not a template, but exact formatting

3507 password: "${CODEMIE_PASSWORD:-}"

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.jsView on unpkg · L3507

3508 },

3509 imported: {

3510 assistants: [],

3511 datasources: [],

3512 integrations: integrationArray

3513 },

3514 datasource_defaults: {

3515 code: { type: "code", index_type: "code", embeddings_model: "ada-002", shared_with_project: true },

3516 knowledge_base_confluence: {

3517 type: "knowledge_base_confluence",

3518 embeddings_model: "ada-002",

3519 shared_with_project: true

3520 },

3521 knowledge_base_jira: { type: "knowledge_base_jira", embeddings_model: "ada-002", shared_with_project: true }

3522 },

3523 resources: {

3524 assistants: backup.resources.assistants.map(

3525 (assistant) => prepareAssistantForYaml(assistant, backup.state, integrationIdToAlias, integrationSpecPaths, skillIdToName)

3526 ),

3527 datasources: backup.resources.datasources.map(

dist/cli/index.jsView file

Lines 1281-1321javascript

1281 const config = {

1282 version: "1",

1283 project: {

1284 name: projectName,

1285 description: `Backup from ${backup.metadata.timestamp}`

1286 },

1287 environment: {

1288 // biome-ignore lint/suspicious/noTemplateCurlyInString: Not a template, but exact formatting

Source & flagged code

2 flagged · loading source

dist/index.jsView file

3507patternName = generic_password severity = medium line = 3507 matchedText = password...:-}"

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.jsView on unpkg · L3507

dist/cli/index.jsView file

1301patternName = generic_password severity = medium line = 1301 matchedText = password...:-}"

Medium

Secret Pattern

Hardcoded password in dist/cli/index.js

dist/cli/index.jsView on unpkg · L1301

Findings

3 Medium4 Low

MediumSecret Patterndist/index.js

MediumEnvironment Vars

MediumSecret Patterndist/cli/index.js

LowScripts Present

LowFilesystem

LowUrl Strings

LowNo License

Source & flagged code

2 flagged

dist/index.jsView file

Lines 3487-3527javascript

3487 const config = {

3488 version: "1",

3489 project: {

3490 name: projectName,

3491 description: `Backup from ${backup.metadata.timestamp}`

3492 },

3493 environment: {

3494 // biome-ignore lint/suspicious/noTemplateCurlyInString: Not a template, but exact formatting

3495 codemie_api_url: "${CODEMIE_API_URL}",

3496 // biome-ignore lint/suspicious/noTemplateCurlyInString: Not a template, but exact formatting

3497 auth_server_url: "${CODEMIE_AUTH_URL}",

3498 // biome-ignore lint/suspicious/noTemplateCurlyInString: Not a template, but exact formatting

3499 auth_realm_name: "${CODEMIE_REALM:-codemie}",

3500 // biome-ignore lint/suspicious/noTemplateCurlyInString: Not a template, but exact formatting

3501 client_id: "${CODEMIE_CLIENT_ID:-}",

3502 // biome-ignore lint/suspicious/noTemplateCurlyInString: Not a template, but exact formatting

3503 client_secret: "${CODEMIE_CLIENT_SECRET:-}",

3504 // biome-ignore lint/suspicious/noTemplateCurlyInString: Not a template, but exact formatting

3505 username: "${CODEMIE_USERNAME:-}",

3506 // biome-ignore lint/suspicious/noTemplateCurlyInString: Not a template, but exact formatting

3507 password: "${CODEMIE_PASSWORD:-}"

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.jsView on unpkg · L3507

3508 },

3509 imported: {

3510 assistants: [],

3511 datasources: [],

3512 integrations: integrationArray

3513 },

3514 datasource_defaults: {

3515 code: { type: "code", index_type: "code", embeddings_model: "ada-002", shared_with_project: true },

3516 knowledge_base_confluence: {

3517 type: "knowledge_base_confluence",

3518 embeddings_model: "ada-002",

3519 shared_with_project: true

3520 },

3521 knowledge_base_jira: { type: "knowledge_base_jira", embeddings_model: "ada-002", shared_with_project: true }

3522 },

3523 resources: {

3524 assistants: backup.resources.assistants.map(

3525 (assistant) => prepareAssistantForYaml(assistant, backup.state, integrationIdToAlias, integrationSpecPaths, skillIdToName)

3526 ),

3527 datasources: backup.resources.datasources.map(

dist/cli/index.jsView file

Lines 1281-1321javascript

1281 const config = {

1282 version: "1",

1283 project: {

1284 name: projectName,

1285 description: `Backup from ${backup.metadata.timestamp}`

1286 },

1287 environment: {

1288 // biome-ignore lint/suspicious/noTemplateCurlyInString: Not a template, but exact formatting