Add preliminary ground truth

This commit is contained in:
Alexander Braml
2026-04-08 15:29:55 +02:00
parent 42cdf985ca
commit 3cc086a1d6

115
findings.csv Normal file
View File

@@ -0,0 +1,115 @@
file_path,line_number,classification
src/security_demo/web_app.py,22,TRUE_POSITIVE
src/security_demo/web_app.py,25,FALSE_POSITIVE
src/security_demo/web_app.py,35,TRUE_POSITIVE
src/security_demo/web_app.py,43,FALSE_POSITIVE
src/security_demo/web_app.py,50,FALSE_POSITIVE
src/security_demo/web_app.py,62,TRUE_POSITIVE
src/security_demo/web_app.py,69,FALSE_POSITIVE
src/security_demo/web_app.py,82,TRUE_POSITIVE
src/security_demo/web_app.py,91,FALSE_POSITIVE
src/security_demo/web_app.py,104,TRUE_POSITIVE
src/security_demo/web_app.py,112,FALSE_POSITIVE
src/security_demo/web_app.py,125,TRUE_POSITIVE
src/security_demo/web_app.py,135,FALSE_POSITIVE
src/security_demo/web_app.py,147,TRUE_POSITIVE
src/security_demo/web_app.py,152,FALSE_POSITIVE
src/security_demo/web_app.py,164,TRUE_POSITIVE
src/security_demo/web_app.py,169,FALSE_POSITIVE
src/security_demo/semgrep_patterns.py,31,TRUE_POSITIVE
src/security_demo/semgrep_patterns.py,38,FALSE_POSITIVE
src/security_demo/semgrep_patterns.py,48,UNCERTAIN
src/security_demo/semgrep_patterns.py,62,TRUE_POSITIVE
src/security_demo/semgrep_patterns.py,70,FALSE_POSITIVE
src/security_demo/semgrep_patterns.py,85,TRUE_POSITIVE
src/security_demo/semgrep_patterns.py,89,TRUE_POSITIVE
src/security_demo/semgrep_patterns.py,94,FALSE_POSITIVE
src/security_demo/semgrep_patterns.py,105,TRUE_POSITIVE
src/security_demo/semgrep_patterns.py,113,FALSE_POSITIVE
src/security_demo/semgrep_patterns.py,129,TRUE_POSITIVE
src/security_demo/semgrep_patterns.py,130,TRUE_POSITIVE
src/security_demo/semgrep_patterns.py,133,FALSE_POSITIVE
src/security_demo/semgrep_patterns.py,134,FALSE_POSITIVE
src/security_demo/semgrep_patterns.py,137,UNCERTAIN
src/security_demo/semgrep_patterns.py,146,TRUE_POSITIVE
src/security_demo/semgrep_patterns.py,151,FALSE_POSITIVE
src/security_demo/semgrep_patterns.py,163,TRUE_POSITIVE
src/security_demo/semgrep_patterns.py,168,FALSE_POSITIVE
src/security_demo/semgrep_patterns.py,179,TRUE_POSITIVE
src/security_demo/semgrep_patterns.py,184,TRUE_POSITIVE
src/security_demo/semgrep_patterns.py,192,TRUE_POSITIVE
src/security_demo/crypto_utils.py,26,TRUE_POSITIVE
src/security_demo/crypto_utils.py,29,FALSE_POSITIVE
src/security_demo/crypto_utils.py,32,FALSE_POSITIVE
src/security_demo/crypto_utils.py,35,UNCERTAIN
src/security_demo/crypto_utils.py,44,TRUE_POSITIVE
src/security_demo/crypto_utils.py,50,TRUE_POSITIVE
src/security_demo/crypto_utils.py,55,FALSE_POSITIVE
src/security_demo/crypto_utils.py,60,FALSE_POSITIVE
src/security_demo/crypto_utils.py,67,FALSE_POSITIVE
src/security_demo/crypto_utils.py,77,TRUE_POSITIVE
src/security_demo/crypto_utils.py,84,FALSE_POSITIVE
src/security_demo/crypto_utils.py,97,TRUE_POSITIVE
src/security_demo/crypto_utils.py,105,FALSE_POSITIVE
src/security_demo/database.py,30,TRUE_POSITIVE
src/security_demo/database.py,37,TRUE_POSITIVE
src/security_demo/database.py,44,FALSE_POSITIVE
src/security_demo/database.py,52,UNCERTAIN
src/security_demo/database.py,66,TRUE_POSITIVE
src/security_demo/database.py,70,TRUE_POSITIVE
src/security_demo/database.py,74,FALSE_POSITIVE
src/security_demo/database.py,84,FALSE_POSITIVE
src/security_demo/database.py,89,FALSE_POSITIVE
src/security_demo/network_client.py,24,TRUE_POSITIVE
src/security_demo/network_client.py,30,FALSE_POSITIVE
src/security_demo/network_client.py,36,TRUE_POSITIVE
src/security_demo/network_client.py,42,FALSE_POSITIVE
src/security_demo/network_client.py,52,TRUE_POSITIVE
src/security_demo/network_client.py,57,FALSE_POSITIVE
src/security_demo/network_client.py,65,FALSE_POSITIVE
src/security_demo/network_client.py,74,TRUE_POSITIVE
src/security_demo/secrets.py,7,TRUE_POSITIVE
src/security_demo/secrets.py,8,TRUE_POSITIVE
src/security_demo/secrets.py,11,TRUE_POSITIVE
src/security_demo/secrets.py,14,TRUE_POSITIVE
src/security_demo/secrets.py,17,TRUE_POSITIVE
src/security_demo/utils.py,15,TRUE_POSITIVE
src/security_demo/utils.py,18,FALSE_POSITIVE
src/security_demo/utils.py,26,TRUE_POSITIVE
src/security_demo/utils.py,31,FALSE_POSITIVE
src/security_demo/utils.py,36,TRUE_POSITIVE
src/security_demo/utils.py,42,FALSE_POSITIVE
src/security_demo/utils.py,54,TRUE_POSITIVE
src/security_demo/utils.py,59,FALSE_POSITIVE
src/security_demo/utils.py,68,TRUE_POSITIVE
src/security_demo/utils.py,74,FALSE_POSITIVE
src/security_demo/utils.py,87,TRUE_POSITIVE
src/security_demo/utils.py,90,TRUE_POSITIVE
src/security_demo/utils.py,95,FALSE_POSITIVE
src/security_demo/utils.py,107,TRUE_POSITIVE
src/security_demo/utils.py,112,FALSE_POSITIVE
src/security_demo/utils.py,122,TRUE_POSITIVE
src/security_demo/utils.py,129,FALSE_POSITIVE
src/security_demo/utils.py,141,TRUE_POSITIVE
src/security_demo/utils.py,149,FALSE_POSITIVE
src/security_demo/utils.py,159,TRUE_POSITIVE
src/security_demo/utils.py,163,FALSE_POSITIVE
src/security_demo/utils.py,168,TRUE_POSITIVE
src/security_demo/utils.py,172,FALSE_POSITIVE
src/security_demo/services/auth.py,13,TRUE_POSITIVE
src/security_demo/services/auth.py,16,FALSE_POSITIVE
src/security_demo/services/auth.py,19,TRUE_POSITIVE
src/security_demo/services/auth.py,23,FALSE_POSITIVE
src/security_demo/services/auth.py,28,FALSE_POSITIVE
src/security_demo/services/auth.py,35,TRUE_POSITIVE
src/security_demo/services/files.py,14,TRUE_POSITIVE
src/security_demo/services/files.py,19,FALSE_POSITIVE
src/security_demo/services/files.py,24,TRUE_POSITIVE
src/security_demo/services/files.py,31,FALSE_POSITIVE
src/security_demo/services/files.py,37,TRUE_POSITIVE
src/security_demo/services/files.py,41,FALSE_POSITIVE
tests/fixtures.py,7,FALSE_POSITIVE
tests/fixtures.py,8,FALSE_POSITIVE
tests/fixtures.py,11,FALSE_POSITIVE
tests/fixtures.py,14,FALSE_POSITIVE
tests/fixtures.py,17,FALSE_POSITIVE
1 file_path line_number classification
2 src/security_demo/web_app.py 22 TRUE_POSITIVE
3 src/security_demo/web_app.py 25 FALSE_POSITIVE
4 src/security_demo/web_app.py 35 TRUE_POSITIVE
5 src/security_demo/web_app.py 43 FALSE_POSITIVE
6 src/security_demo/web_app.py 50 FALSE_POSITIVE
7 src/security_demo/web_app.py 62 TRUE_POSITIVE
8 src/security_demo/web_app.py 69 FALSE_POSITIVE
9 src/security_demo/web_app.py 82 TRUE_POSITIVE
10 src/security_demo/web_app.py 91 FALSE_POSITIVE
11 src/security_demo/web_app.py 104 TRUE_POSITIVE
12 src/security_demo/web_app.py 112 FALSE_POSITIVE
13 src/security_demo/web_app.py 125 TRUE_POSITIVE
14 src/security_demo/web_app.py 135 FALSE_POSITIVE
15 src/security_demo/web_app.py 147 TRUE_POSITIVE
16 src/security_demo/web_app.py 152 FALSE_POSITIVE
17 src/security_demo/web_app.py 164 TRUE_POSITIVE
18 src/security_demo/web_app.py 169 FALSE_POSITIVE
19 src/security_demo/semgrep_patterns.py 31 TRUE_POSITIVE
20 src/security_demo/semgrep_patterns.py 38 FALSE_POSITIVE
21 src/security_demo/semgrep_patterns.py 48 UNCERTAIN
22 src/security_demo/semgrep_patterns.py 62 TRUE_POSITIVE
23 src/security_demo/semgrep_patterns.py 70 FALSE_POSITIVE
24 src/security_demo/semgrep_patterns.py 85 TRUE_POSITIVE
25 src/security_demo/semgrep_patterns.py 89 TRUE_POSITIVE
26 src/security_demo/semgrep_patterns.py 94 FALSE_POSITIVE
27 src/security_demo/semgrep_patterns.py 105 TRUE_POSITIVE
28 src/security_demo/semgrep_patterns.py 113 FALSE_POSITIVE
29 src/security_demo/semgrep_patterns.py 129 TRUE_POSITIVE
30 src/security_demo/semgrep_patterns.py 130 TRUE_POSITIVE
31 src/security_demo/semgrep_patterns.py 133 FALSE_POSITIVE
32 src/security_demo/semgrep_patterns.py 134 FALSE_POSITIVE
33 src/security_demo/semgrep_patterns.py 137 UNCERTAIN
34 src/security_demo/semgrep_patterns.py 146 TRUE_POSITIVE
35 src/security_demo/semgrep_patterns.py 151 FALSE_POSITIVE
36 src/security_demo/semgrep_patterns.py 163 TRUE_POSITIVE
37 src/security_demo/semgrep_patterns.py 168 FALSE_POSITIVE
38 src/security_demo/semgrep_patterns.py 179 TRUE_POSITIVE
39 src/security_demo/semgrep_patterns.py 184 TRUE_POSITIVE
40 src/security_demo/semgrep_patterns.py 192 TRUE_POSITIVE
41 src/security_demo/crypto_utils.py 26 TRUE_POSITIVE
42 src/security_demo/crypto_utils.py 29 FALSE_POSITIVE
43 src/security_demo/crypto_utils.py 32 FALSE_POSITIVE
44 src/security_demo/crypto_utils.py 35 UNCERTAIN
45 src/security_demo/crypto_utils.py 44 TRUE_POSITIVE
46 src/security_demo/crypto_utils.py 50 TRUE_POSITIVE
47 src/security_demo/crypto_utils.py 55 FALSE_POSITIVE
48 src/security_demo/crypto_utils.py 60 FALSE_POSITIVE
49 src/security_demo/crypto_utils.py 67 FALSE_POSITIVE
50 src/security_demo/crypto_utils.py 77 TRUE_POSITIVE
51 src/security_demo/crypto_utils.py 84 FALSE_POSITIVE
52 src/security_demo/crypto_utils.py 97 TRUE_POSITIVE
53 src/security_demo/crypto_utils.py 105 FALSE_POSITIVE
54 src/security_demo/database.py 30 TRUE_POSITIVE
55 src/security_demo/database.py 37 TRUE_POSITIVE
56 src/security_demo/database.py 44 FALSE_POSITIVE
57 src/security_demo/database.py 52 UNCERTAIN
58 src/security_demo/database.py 66 TRUE_POSITIVE
59 src/security_demo/database.py 70 TRUE_POSITIVE
60 src/security_demo/database.py 74 FALSE_POSITIVE
61 src/security_demo/database.py 84 FALSE_POSITIVE
62 src/security_demo/database.py 89 FALSE_POSITIVE
63 src/security_demo/network_client.py 24 TRUE_POSITIVE
64 src/security_demo/network_client.py 30 FALSE_POSITIVE
65 src/security_demo/network_client.py 36 TRUE_POSITIVE
66 src/security_demo/network_client.py 42 FALSE_POSITIVE
67 src/security_demo/network_client.py 52 TRUE_POSITIVE
68 src/security_demo/network_client.py 57 FALSE_POSITIVE
69 src/security_demo/network_client.py 65 FALSE_POSITIVE
70 src/security_demo/network_client.py 74 TRUE_POSITIVE
71 src/security_demo/secrets.py 7 TRUE_POSITIVE
72 src/security_demo/secrets.py 8 TRUE_POSITIVE
73 src/security_demo/secrets.py 11 TRUE_POSITIVE
74 src/security_demo/secrets.py 14 TRUE_POSITIVE
75 src/security_demo/secrets.py 17 TRUE_POSITIVE
76 src/security_demo/utils.py 15 TRUE_POSITIVE
77 src/security_demo/utils.py 18 FALSE_POSITIVE
78 src/security_demo/utils.py 26 TRUE_POSITIVE
79 src/security_demo/utils.py 31 FALSE_POSITIVE
80 src/security_demo/utils.py 36 TRUE_POSITIVE
81 src/security_demo/utils.py 42 FALSE_POSITIVE
82 src/security_demo/utils.py 54 TRUE_POSITIVE
83 src/security_demo/utils.py 59 FALSE_POSITIVE
84 src/security_demo/utils.py 68 TRUE_POSITIVE
85 src/security_demo/utils.py 74 FALSE_POSITIVE
86 src/security_demo/utils.py 87 TRUE_POSITIVE
87 src/security_demo/utils.py 90 TRUE_POSITIVE
88 src/security_demo/utils.py 95 FALSE_POSITIVE
89 src/security_demo/utils.py 107 TRUE_POSITIVE
90 src/security_demo/utils.py 112 FALSE_POSITIVE
91 src/security_demo/utils.py 122 TRUE_POSITIVE
92 src/security_demo/utils.py 129 FALSE_POSITIVE
93 src/security_demo/utils.py 141 TRUE_POSITIVE
94 src/security_demo/utils.py 149 FALSE_POSITIVE
95 src/security_demo/utils.py 159 TRUE_POSITIVE
96 src/security_demo/utils.py 163 FALSE_POSITIVE
97 src/security_demo/utils.py 168 TRUE_POSITIVE
98 src/security_demo/utils.py 172 FALSE_POSITIVE
99 src/security_demo/services/auth.py 13 TRUE_POSITIVE
100 src/security_demo/services/auth.py 16 FALSE_POSITIVE
101 src/security_demo/services/auth.py 19 TRUE_POSITIVE
102 src/security_demo/services/auth.py 23 FALSE_POSITIVE
103 src/security_demo/services/auth.py 28 FALSE_POSITIVE
104 src/security_demo/services/auth.py 35 TRUE_POSITIVE
105 src/security_demo/services/files.py 14 TRUE_POSITIVE
106 src/security_demo/services/files.py 19 FALSE_POSITIVE
107 src/security_demo/services/files.py 24 TRUE_POSITIVE
108 src/security_demo/services/files.py 31 FALSE_POSITIVE
109 src/security_demo/services/files.py 37 TRUE_POSITIVE
110 src/security_demo/services/files.py 41 FALSE_POSITIVE
111 tests/fixtures.py 7 FALSE_POSITIVE
112 tests/fixtures.py 8 FALSE_POSITIVE
113 tests/fixtures.py 11 FALSE_POSITIVE
114 tests/fixtures.py 14 FALSE_POSITIVE
115 tests/fixtures.py 17 FALSE_POSITIVE