registry / @fjall/components-infrastructure / 3.4.1

@fjall/components-infrastructure@3.4.1

Published fjall infrastructure components and utilities.

Static Scan Results

scanned 6h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 267 file(s), 1.81 MB of source, external domains: 127.0.0.1, agent-edge.buildkite.com, clickhouse.com, github.com

Source & flagged code

4 flagged

dist/lib/lambda-assets/cert-generator/asset/index.jsView file

18031patternName = private_key_rsa severity = critical line = 18031 matchedText = return `...----

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/lib/lambda-assets/cert-generator/asset/index.jsView on unpkg · L18031

18031patternName = private_key_rsa severity = critical line = 18031 matchedText = return `...----

Critical

Secret Pattern

RSA private key in dist/lib/lambda-assets/cert-generator/asset/index.js

dist/lib/lambda-assets/cert-generator/asset/index.jsView on unpkg · L18031

dist/lib/resources/aws/networking/hostedZone.jsView file

Lines 1-30javascript

1import { Construct } from "constructs";

2import { CfnOutput, Fn, Tags } from "aws-cdk-lib";

3import { HostedZone as AWSHostedZone } from "aws-cdk-lib/aws-route53";

4import { getDomainExportNames } from "@fjall/util";

5import { toPascalCase, getSafeZoneName } from "../../../utils/capitaliseString.js";

6import { envAwareRemovalPolicyDefault, toRemovalPolicy } from "../../../utils/removalPolicy.js";

7import { DelegationRole } from "../iam/delegationRole.js";

8import { applyCostAllocationTags } from "../../../utils/costAllocationTags.js";

9import { resolveOrgId } from "../../../utils/cdkContext.js";

10export class HostedZoneFactory {

11 static import(stack, hostedZoneId, zoneName, opts) {

12 const safeZone = toPascalCase(getSafeZoneName(zoneName));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/lib/resources/aws/networking/hostedZone.jsView on unpkg · L10

13 return new HostedZone(stack.getStack(), `${safeZone}HostedZone`, {

14 hostedZoneId,

15 zoneName,

16 // BYO app-stack imports never mint the role: its fixed RoleName would

17 // collide with the domain stack's own DelegationRole in the same account.

18 createDelegationRole: false,

19 costAllocationEnvironment: opts?.costAllocationEnvironment,

20 costAllocationDomain: opts?.costAllocationDomain,

21 description: opts?.description

22 });

23 }

24}

25export class HostedZone extends Construct {

26 hostedZone;

27 hostedZoneId;

28 zoneName;

29 description;

30 nameServers;

dist/lib/resources/aws/compute/ecsNetworking.jsView file

Lines 52-92javascript

52 value: loadBalancer.loadBalancerDnsName

53 });

54 // Cross-stack exports consumed by the Domain construct's `fjallApp(<name>)`

55 // alias target. Names mirror the consumer contract in `cross-system-parity`.

56 new CfnOutput(ctx.scope, `${ctx.outputName}AlbDnsName`, {

Source & flagged code

4 flagged · loading source

dist/lib/lambda-assets/cert-generator/asset/index.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code