{
"crypto_spec_version": <float>,
"file_collection_verification_code": <string>,
"package_name": <string>,
"crypto_evidence": {
<file sha1>: {
"file_paths": [<array of strings>],
"is_source_code": <boolean>,
"hits": [
{
"evidence_type": <string>,
"detection_method": <string>,
"encryption_api_usage": <string>,
"encryption_library": <string>,
"matched_text": <string>,
"line_number": <integer>,
"line_index_begin": <integer>,
"line_index_end": <integer>,
"file_index_begin": <integer>,
"file_index_end": <integer>,
"line_text": <string>,
"line_text_after_1": <string>,
"line_text_after_2": <string>,
"line_text_after_3": <string>,
"line_text_before_1": <string>,
"line_text_before_2": <string>,
"line_text_before_3": <string>,
"comments": <string>,
"human_reviewed": <string>
},
...
]
},
...
}
}
The version of the crypto specification.
The name of the package that was scanned.
A SHA1 signature to uniquely identify the set of files in this package. To compute it, we collect the SHA1 of every file in the leaves of the directory tree, skipping symbolic links, sort this list in ascending alphabetical order, concatenate them into single string, and take SHA1 of the resulting string.
The report of evidence found in the package.
Array of file paths that all have this file SHA1. Note that multiple files in the same package can have identical content, so they are grouped in this way.
Boolean indicating whether this file is source code.
Array of dictionary objects for each hit.
Categorization of the type of evidence found.
Type of the encryption API usage: one of "call", "data_type", or "include". "call" is call to an exported function, "data_type" is instantiating a data structure that belongs to a cryptography library, and "include" is including header files or otherwise importing files that faciliate encryption.
The library or service that provided the API.
The exact text of the match.
The line number of the matching line.
The index within the line where the match begins.
The index within the line where the match ends.
The index within the whole file starting from its beginning where the match begins.
The index within the whole file starting from its beginning where the match ends.
The line of code that was matched.
The surrounding lines of code before the matching line.
The surrounding lines of code after the matching line.
Field for adding comments.
Reserved for communicating the result of a human review of this hit.