pluribus-context 0.3.21 → 0.3.26

package/examples/context-input-evidence/secret-scanning-otel-trace.json

@@ -0,0 +1,794 @@
+{
+  "resourceSpans": [
+    {
+      "resource": {
+        "attributes": [
+          {
+            "key": "service.name",
+            "value": {
+              "stringValue": "pluribus-context-input-evidence-demo"
+            }
+          },
+          {
+            "key": "service.version",
+            "value": {
+              "stringValue": "0.3.23"
+            }
+          }
+        ]
+      },
+      "scopeSpans": [
+        {
+          "scope": {
+            "name": "pluribus.context_input_evidence.secret_scanning",
+            "version": "0.1.0"
+          },
+          "spans": [
+            {
+              "traceId": "739544dd256cb1c92a7518a1dc7a220f",
+              "spanId": "f2013e6856aa653b",
+              "name": "agent.session",
+              "kind": 1,
+              "startTimeUnixNano": "1779411600000000000",
+              "endTimeUnixNano": "1779411631000000000",
+              "attributes": [
+                {
+                  "key": "session.id",
+                  "value": {
+                    "stringValue": "demo-secret-scan-session"
+                  }
+                },
+                {
+                  "key": "gen_ai.conversation.id",
+                  "value": {
+                    "stringValue": "conv-secret-scan-demo"
+                  }
+                },
+                {
+                  "key": "agent.name",
+                  "value": {
+                    "stringValue": "copilot-cli"
+                  }
+                },
+                {
+                  "key": "mcp.provider",
+                  "value": {
+                    "stringValue": "github-mcp-server"
+                  }
+                },
+                {
+                  "key": "mcp.client",
+                  "value": {
+                    "stringValue": "github-copilot-cli"
+                  }
+                },
+                {
+                  "key": "repository.hash",
+                  "value": {
+                    "stringValue": "sha256:181c8327396b"
+                  }
+                },
+                {
+                  "key": "repository.path_hash",
+                  "value": {
+                    "stringValue": "sha256:ae5f25a41241d512bee36d07730f022985bf10649639ff9ab99ef32e538aece9"
+                  }
+                }
+              ],
+              "events": [
+                {
+                  "name": "security.secret_scanning.requested",
+                  "timeUnixNano": "1779411603000000000",
+                  "attributes": [
+                    {
+                      "key": "session.id",
+                      "value": {
+                        "stringValue": "demo-secret-scan-session"
+                      }
+                    },
+                    {
+                      "key": "gen_ai.conversation.id",
+                      "value": {
+                        "stringValue": "conv-secret-scan-demo"
+                      }
+                    },
+                    {
+                      "key": "agent.name",
+                      "value": {
+                        "stringValue": "copilot-cli"
+                      }
+                    },
+                    {
+                      "key": "mcp.provider",
+                      "value": {
+                        "stringValue": "github-mcp-server"
+                      }
+                    },
+                    {
+                      "key": "mcp.client",
+                      "value": {
+                        "stringValue": "github-copilot-cli"
+                      }
+                    },
+                    {
+                      "key": "repository.hash",
+                      "value": {
+                        "stringValue": "sha256:181c8327396b"
+                      }
+                    },
+                    {
+                      "key": "repository.path_hash",
+                      "value": {
+                        "stringValue": "sha256:ae5f25a41241d512bee36d07730f022985bf10649639ff9ab99ef32e538aece9"
+                      }
+                    },
+                    {
+                      "key": "security.scan.request.hash",
+                      "value": {
+                        "stringValue": "sha256:39e4a6f44d4d"
+                      }
+                    },
+                    {
+                      "key": "security.scan.trigger",
+                      "value": {
+                        "stringValue": "pre_commit_agent_prompt"
+                      }
+                    },
+                    {
+                      "key": "security.scan.toolset",
+                      "value": {
+                        "stringValue": "secret_protection"
+                      }
+                    },
+                    {
+                      "key": "security.scan.tool",
+                      "value": {
+                        "stringValue": "run_secret_scanning"
+                      }
+                    },
+                    {
+                      "key": "security.scan.scope",
+                      "value": {
+                        "stringValue": "current_changes"
+                      }
+                    },
+                    {
+                      "key": "security.scan.diff_path_count",
+                      "value": {
+                        "intValue": "3"
+                      }
+                    },
+                    {
+                      "key": "security.scan.diff_paths_hash",
+                      "value": {
+                        "stringValue": "sha256:3923a610ceb0197ebbbad5f3838177969b8632a8bd4da1419d5da3b48dce2a7e"
+                      }
+                    },
+                    {
+                      "key": "security.scan.prompt_hash",
+                      "value": {
+                        "stringValue": "sha256:6c18550f453b1efb9b8a9d0b16652a63d6eaa5e35dbd867016bba7750335214a"
+                      }
+                    },
+                    {
+                      "key": "security.secret_scanning.push_protection_customization",
+                      "value": {
+                        "stringValue": "org-default-block-with-documented-bypass"
+                      }
+                    },
+                    {
+                      "key": "security.secret_scanning.persisted_as_github_alert",
+                      "value": {
+                        "boolValue": false
+                      }
+                    },
+                    {
+                      "key": "privacy.raw_prompt_recorded",
+                      "value": {
+                        "boolValue": false
+                      }
+                    },
+                    {
+                      "key": "privacy.raw_diff_paths_recorded",
+                      "value": {
+                        "boolValue": false
+                      }
+                    },
+                    {
+                      "key": "privacy.raw_secret_values_recorded",
+                      "value": {
+                        "boolValue": false
+                      }
+                    }
+                  ]
+                },
+                {
+                  "name": "security.secret_scanning.completed",
+                  "timeUnixNano": "1779411609000000000",
+                  "attributes": [
+                    {
+                      "key": "session.id",
+                      "value": {
+                        "stringValue": "demo-secret-scan-session"
+                      }
+                    },
+                    {
+                      "key": "gen_ai.conversation.id",
+                      "value": {
+                        "stringValue": "conv-secret-scan-demo"
+                      }
+                    },
+                    {
+                      "key": "agent.name",
+                      "value": {
+                        "stringValue": "copilot-cli"
+                      }
+                    },
+                    {
+                      "key": "mcp.provider",
+                      "value": {
+                        "stringValue": "github-mcp-server"
+                      }
+                    },
+                    {
+                      "key": "mcp.client",
+                      "value": {
+                        "stringValue": "github-copilot-cli"
+                      }
+                    },
+                    {
+                      "key": "repository.hash",
+                      "value": {
+                        "stringValue": "sha256:181c8327396b"
+                      }
+                    },
+                    {
+                      "key": "repository.path_hash",
+                      "value": {
+                        "stringValue": "sha256:ae5f25a41241d512bee36d07730f022985bf10649639ff9ab99ef32e538aece9"
+                      }
+                    },
+                    {
+                      "key": "security.scan.request.hash",
+                      "value": {
+                        "stringValue": "sha256:39e4a6f44d4d"
+                      }
+                    },
+                    {
+                      "key": "security.scan.status",
+                      "value": {
+                        "stringValue": "findings_presented"
+                      }
+                    },
+                    {
+                      "key": "security.scan.files_scanned",
+                      "value": {
+                        "intValue": "3"
+                      }
+                    },
+                    {
+                      "key": "security.scan.line_count_bucket",
+                      "value": {
+                        "stringValue": "under_2"
+                      }
+                    },
+                    {
+                      "key": "security.secret_scanning.finding_count",
+                      "value": {
+                        "intValue": "2"
+                      }
+                    },
+                    {
+                      "key": "security.secret_scanning.finding_count_bucket",
+                      "value": {
+                        "stringValue": "under_2"
+                      }
+                    },
+                    {
+                      "key": "security.secret_scanning.detector_count",
+                      "value": {
+                        "intValue": "39"
+                      }
+                    },
+                    {
+                      "key": "security.secret_scanning.engine_snapshot_hash",
+                      "value": {
+                        "stringValue": "sha256:cadae81726f1"
+                      }
+                    },
+                    {
+                      "key": "security.scan.latency_bucket",
+                      "value": {
+                        "stringValue": "under_10s"
+                      }
+                    },
+                    {
+                      "key": "security.scan.tool_response_hash",
+                      "value": {
+                        "stringValue": "sha256:f10bf3bfb0fa6c47f564e6f5e2fd6267323d1fa2a70c1e0acfdcdae469bc25b5"
+                      }
+                    },
+                    {
+                      "key": "privacy.raw_tool_response_recorded",
+                      "value": {
+                        "boolValue": false
+                      }
+                    },
+                    {
+                      "key": "privacy.raw_secret_values_recorded",
+                      "value": {
+                        "boolValue": false
+                      }
+                    }
+                  ]
+                },
+                {
+                  "name": "security.secret_scanning.finding.presented",
+                  "timeUnixNano": "1779411610000000000",
+                  "attributes": [
+                    {
+                      "key": "session.id",
+                      "value": {
+                        "stringValue": "demo-secret-scan-session"
+                      }
+                    },
+                    {
+                      "key": "gen_ai.conversation.id",
+                      "value": {
+                        "stringValue": "conv-secret-scan-demo"
+                      }
+                    },
+                    {
+                      "key": "agent.name",
+                      "value": {
+                        "stringValue": "copilot-cli"
+                      }
+                    },
+                    {
+                      "key": "mcp.provider",
+                      "value": {
+                        "stringValue": "github-mcp-server"
+                      }
+                    },
+                    {
+                      "key": "mcp.client",
+                      "value": {
+                        "stringValue": "github-copilot-cli"
+                      }
+                    },
+                    {
+                      "key": "repository.hash",
+                      "value": {
+                        "stringValue": "sha256:181c8327396b"
+                      }
+                    },
+                    {
+                      "key": "repository.path_hash",
+                      "value": {
+                        "stringValue": "sha256:ae5f25a41241d512bee36d07730f022985bf10649639ff9ab99ef32e538aece9"
+                      }
+                    },
+                    {
+                      "key": "security.scan.request.hash",
+                      "value": {
+                        "stringValue": "sha256:39e4a6f44d4d"
+                      }
+                    },
+                    {
+                      "key": "security.finding.hash",
+                      "value": {
+                        "stringValue": "sha256:28e963989ee7"
+                      }
+                    },
+                    {
+                      "key": "security.secret_scanning.secret_type",
+                      "value": {
+                        "stringValue": "stripe_webhook_secret"
+                      }
+                    },
+                    {
+                      "key": "security.finding.severity",
+                      "value": {
+                        "stringValue": "high"
+                      }
+                    },
+                    {
+                      "key": "security.finding.location_path_hash",
+                      "value": {
+                        "stringValue": "sha256:842f919923a9d0a0081ca3e70ae7cb88c8ae346413a16a3d78fd29bf27b0a5cb"
+                      }
+                    },
+                    {
+                      "key": "security.finding.line_bucket",
+                      "value": {
+                        "stringValue": "1_20"
+                      }
+                    },
+                    {
+                      "key": "security.finding.secret_value_hash",
+                      "value": {
+                        "stringValue": "sha256:38189798d422645b9474920b028be60324b65373b3b44251fa043ea9ce0ae6e1"
+                      }
+                    },
+                    {
+                      "key": "security.finding.remediation_hash",
+                      "value": {
+                        "stringValue": "sha256:602395d5766723df6f364c52a6132b9aa71aef7d9c0cfd3fa66d3619a8eccc0f"
+                      }
+                    },
+                    {
+                      "key": "security.secret_scanning.push_protection_action",
+                      "value": {
+                        "stringValue": "block"
+                      }
+                    },
+                    {
+                      "key": "security.secret_scanning.bypass_allowed",
+                      "value": {
+                        "boolValue": false
+                      }
+                    },
+                    {
+                      "key": "privacy.raw_location_path_recorded",
+                      "value": {
+                        "boolValue": false
+                      }
+                    },
+                    {
+                      "key": "privacy.raw_secret_value_recorded",
+                      "value": {
+                        "boolValue": false
+                      }
+                    },
+                    {
+                      "key": "privacy.raw_remediation_text_recorded",
+                      "value": {
+                        "boolValue": false
+                      }
+                    }
+                  ]
+                },
+                {
+                  "name": "security.secret_scanning.finding.presented",
+                  "timeUnixNano": "1779411610500000000",
+                  "attributes": [
+                    {
+                      "key": "session.id",
+                      "value": {
+                        "stringValue": "demo-secret-scan-session"
+                      }
+                    },
+                    {
+                      "key": "gen_ai.conversation.id",
+                      "value": {
+                        "stringValue": "conv-secret-scan-demo"
+                      }
+                    },
+                    {
+                      "key": "agent.name",
+                      "value": {
+                        "stringValue": "copilot-cli"
+                      }
+                    },
+                    {
+                      "key": "mcp.provider",
+                      "value": {
+                        "stringValue": "github-mcp-server"
+                      }
+                    },
+                    {
+                      "key": "mcp.client",
+                      "value": {
+                        "stringValue": "github-copilot-cli"
+                      }
+                    },
+                    {
+                      "key": "repository.hash",
+                      "value": {
+                        "stringValue": "sha256:181c8327396b"
+                      }
+                    },
+                    {
+                      "key": "repository.path_hash",
+                      "value": {
+                        "stringValue": "sha256:ae5f25a41241d512bee36d07730f022985bf10649639ff9ab99ef32e538aece9"
+                      }
+                    },
+                    {
+                      "key": "security.scan.request.hash",
+                      "value": {
+                        "stringValue": "sha256:39e4a6f44d4d"
+                      }
+                    },
+                    {
+                      "key": "security.finding.hash",
+                      "value": {
+                        "stringValue": "sha256:f75f745c015f"
+                      }
+                    },
+                    {
+                      "key": "security.secret_scanning.secret_type",
+                      "value": {
+                        "stringValue": "github_personal_access_token"
+                      }
+                    },
+                    {
+                      "key": "security.finding.severity",
+                      "value": {
+                        "stringValue": "critical"
+                      }
+                    },
+                    {
+                      "key": "security.finding.location_path_hash",
+                      "value": {
+                        "stringValue": "sha256:a96dedf7aea119254c328e6f83265ccb3954034121e22ea90538c1c7a235212e"
+                      }
+                    },
+                    {
+                      "key": "security.finding.line_bucket",
+                      "value": {
+                        "stringValue": "21_100"
+                      }
+                    },
+                    {
+                      "key": "security.finding.secret_value_hash",
+                      "value": {
+                        "stringValue": "sha256:a28adec774fdc7744c1996c4a6eda2d89ec2c36c3a4c464cedcfb504900b9c2b"
+                      }
+                    },
+                    {
+                      "key": "security.finding.remediation_hash",
+                      "value": {
+                        "stringValue": "sha256:ea7421a264ef997696101319f6d964fd8c82d6cb0ab2ff4c84dbcce5f2d03164"
+                      }
+                    },
+                    {
+                      "key": "security.secret_scanning.push_protection_action",
+                      "value": {
+                        "stringValue": "block"
+                      }
+                    },
+                    {
+                      "key": "security.secret_scanning.bypass_allowed",
+                      "value": {
+                        "boolValue": false
+                      }
+                    },
+                    {
+                      "key": "privacy.raw_location_path_recorded",
+                      "value": {
+                        "boolValue": false
+                      }
+                    },
+                    {
+                      "key": "privacy.raw_secret_value_recorded",
+                      "value": {
+                        "boolValue": false
+                      }
+                    },
+                    {
+                      "key": "privacy.raw_remediation_text_recorded",
+                      "value": {
+                        "boolValue": false
+                      }
+                    }
+                  ]
+                },
+                {
+                  "name": "security.secret_scanning.bypass.evaluated",
+                  "timeUnixNano": "1779411612000000000",
+                  "attributes": [
+                    {
+                      "key": "session.id",
+                      "value": {
+                        "stringValue": "demo-secret-scan-session"
+                      }
+                    },
+                    {
+                      "key": "gen_ai.conversation.id",
+                      "value": {
+                        "stringValue": "conv-secret-scan-demo"
+                      }
+                    },
+                    {
+                      "key": "agent.name",
+                      "value": {
+                        "stringValue": "copilot-cli"
+                      }
+                    },
+                    {
+                      "key": "mcp.provider",
+                      "value": {
+                        "stringValue": "github-mcp-server"
+                      }
+                    },
+                    {
+                      "key": "mcp.client",
+                      "value": {
+                        "stringValue": "github-copilot-cli"
+                      }
+                    },
+                    {
+                      "key": "repository.hash",
+                      "value": {
+                        "stringValue": "sha256:181c8327396b"
+                      }
+                    },
+                    {
+                      "key": "repository.path_hash",
+                      "value": {
+                        "stringValue": "sha256:ae5f25a41241d512bee36d07730f022985bf10649639ff9ab99ef32e538aece9"
+                      }
+                    },
+                    {
+                      "key": "security.scan.request.hash",
+                      "value": {
+                        "stringValue": "sha256:39e4a6f44d4d"
+                      }
+                    },
+                    {
+                      "key": "security.policy.hash",
+                      "value": {
+                        "stringValue": "sha256:cf2826a34eba"
+                      }
+                    },
+                    {
+                      "key": "security.secret_scanning.bypass_requested",
+                      "value": {
+                        "boolValue": false
+                      }
+                    },
+                    {
+                      "key": "security.secret_scanning.bypass_allowed",
+                      "value": {
+                        "boolValue": false
+                      }
+                    },
+                    {
+                      "key": "security.secret_scanning.bypass_reason",
+                      "value": {
+                        "stringValue": "not_applicable"
+                      }
+                    },
+                    {
+                      "key": "security.secret_scanning.decision",
+                      "value": {
+                        "stringValue": "block_until_removed"
+                      }
+                    },
+                    {
+                      "key": "security.operator_note_hash",
+                      "value": {
+                        "stringValue": "sha256:5e261d3b2549fdda2ee5dd91b13ec86f409f2a890fa2f76e45e7b56d0d7f6cb1"
+                      }
+                    },
+                    {
+                      "key": "privacy.raw_operator_note_recorded",
+                      "value": {
+                        "boolValue": false
+                      }
+                    }
+                  ]
+                },
+                {
+                  "name": "security.secret_scanning.remediation.verified",
+                  "timeUnixNano": "1779411631000000000",
+                  "attributes": [
+                    {
+                      "key": "session.id",
+                      "value": {
+                        "stringValue": "demo-secret-scan-session"
+                      }
+                    },
+                    {
+                      "key": "gen_ai.conversation.id",
+                      "value": {
+                        "stringValue": "conv-secret-scan-demo"
+                      }
+                    },
+                    {
+                      "key": "agent.name",
+                      "value": {
+                        "stringValue": "copilot-cli"
+                      }
+                    },
+                    {
+                      "key": "mcp.provider",
+                      "value": {
+                        "stringValue": "github-mcp-server"
+                      }
+                    },
+                    {
+                      "key": "mcp.client",
+                      "value": {
+                        "stringValue": "github-copilot-cli"
+                      }
+                    },
+                    {
+                      "key": "repository.hash",
+                      "value": {
+                        "stringValue": "sha256:181c8327396b"
+                      }
+                    },
+                    {
+                      "key": "repository.path_hash",
+                      "value": {
+                        "stringValue": "sha256:ae5f25a41241d512bee36d07730f022985bf10649639ff9ab99ef32e538aece9"
+                      }
+                    },
+                    {
+                      "key": "security.scan.request.hash",
+                      "value": {
+                        "stringValue": "sha256:39e4a6f44d4d"
+                      }
+                    },
+                    {
+                      "key": "security.scan.rescan.hash",
+                      "value": {
+                        "stringValue": "sha256:b55991d4f92f"
+                      }
+                    },
+                    {
+                      "key": "security.scan.status",
+                      "value": {
+                        "stringValue": "clean"
+                      }
+                    },
+                    {
+                      "key": "security.scan.changed_path_count",
+                      "value": {
+                        "intValue": "2"
+                      }
+                    },
+                    {
+                      "key": "security.scan.changed_paths_hash",
+                      "value": {
+                        "stringValue": "sha256:ac83d426b4016f9a21d2fbbeb3851b6ddbea3a154a9ec037c77c8cb315d2b79d"
+                      }
+                    },
+                    {
+                      "key": "security.secret_scanning.finding_count_after",
+                      "value": {
+                        "intValue": "0"
+                      }
+                    },
+                    {
+                      "key": "security.remediation.rotation_ticket_hash",
+                      "value": {
+                        "stringValue": "sha256:b4cd09aa218698ca93ec8f1650cf22574ea931fc522d6b1fa89d0f1798ca51a4"
+                      }
+                    },
+                    {
+                      "key": "security.scan.latency_bucket",
+                      "value": {
+                        "stringValue": "under_10s"
+                      }
+                    },
+                    {
+                      "key": "privacy.raw_changed_paths_recorded",
+                      "value": {
+                        "boolValue": false
+                      }
+                    },
+                    {
+                      "key": "privacy.raw_rotation_ticket_recorded",
+                      "value": {
+                        "boolValue": false
+                      }
+                    },
+                    {
+                      "key": "audit.gap",
+                      "value": {
+                        "stringValue": "receipt_proves_scan_findings_policy_and_clean_rescan_not_secret_revocation_completion"
+                      }
+                    }
+                  ]
+                }
+              ]
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}