Skip to content
Demo data.
Sign up to scan your APIs
Fendix logo
Back to scans

./src

Completed

Jul 23, 2026, 09:00 AM · 2.1s · whitebox mode

Release decision

BLOCK

1 finding meets the configured fail-on threshold, so this release is blocked.

Coverage
Required coverage complete
Policy
2.0.0
Scanned
Jul 23, 2026, 09:00 AM
Decided
Jul 23, 2026, 09:00 AM(1 day ago)

Blocking finding

Next steps

A release decision is a recommendation, not an approval. Your team stays accountable for the release.

Coverage

1 finding

Sample data
Finding decision
Severity

Each finding has its own decision. The release decision above is made once, for the whole scan.

SEC-003CRITICALFinding decision: BLOCKWhite-boxHardcoded AWS access key in source

Finding decisionBLOCKConfidence-gated policy

Meets the fail-on threshold, and independent evidence corroborates it.

Engine reason: severity at or above the --fail-on threshold; corroborated by: deterministic detection in production code

Confidence: HIGH

Evidence

[REDACTED len=20 sha256:3f1c9a…] found at line 18: matches the AWS access key pattern.

Remediation

Remove the key immediately and rotate it in AWS IAM. Use environment variables or a secrets manager.

Location: config/settings.py:18References: CWE-798