{
  "$schema": "https://docs.oasis-open.org/sarif/sarif/v2.1.0/errata01/os/schemas/sarif-schema-2.1.0.json",
  "version": "2.1.0",
  "runs": [
    {
      "tool": {
        "driver": {
          "name": "ndaal-demo-scanner",
          "organization": "ndaal GmbH & Co KG",
          "version": "1.0.0",
          "informationUri": "https://ndaal.eu",
          "rules": [
            {
              "id": "NDAAL001",
              "name": "HardcodedSecret",
              "shortDescription": { "text": "Hardcoded secret detected" },
              "defaultConfiguration": { "level": "error" }
            },
            {
              "id": "NDAAL002",
              "name": "WeakHash",
              "shortDescription": { "text": "Weak hash algorithm" },
              "defaultConfiguration": { "level": "warning" }
            }
          ]
        }
      },
      "results": [
        {
          "ruleId": "NDAAL001",
          "ruleIndex": 0,
          "level": "error",
          "message": { "text": "Possible hardcoded API key in source." },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": { "uri": "src/config.rs" },
                "region": { "startLine": 12, "startColumn": 5 }
              }
            }
          ]
        },
        {
          "ruleId": "NDAAL002",
          "ruleIndex": 1,
          "level": "warning",
          "message": { "text": "MD5 is cryptographically broken; use SHA-256 or BLAKE3." },
          "locations": [
            {
              "physicalLocation": {
                "artifactLocation": { "uri": "src/hash.rs" },
                "region": { "startLine": 48 }
              }
            }
          ]
        }
      ]
    }
  ]
}
