{"version": "2.1.0", "$schema": "https://schemastore.azurewebsites.net/schemas/json/sarif-2.1.0.json", "runs": [{"tool": {"driver": {"name": "STACS", "rules": [{"id": "CredentialNixShadowBlank", "shortDescription": {"text": "User in /etc/shadow has been configured to not require a password."}}], "version": "0.5.1", "downloadUri": "https://www.github.com/stacscan/stacs/", "informationUri": "https://www.github.com/stacscan/stacs/"}}, "results": [{"message": {"text": "User in /etc/shadow has been configured to not require a password."}, "level": "error", "ruleId": "CredentialNixShadowBlank", "locations": [{"physicalLocation": {"region": {"byteOffset": 0, "snippet": {"text": "root::10933:0:99999:7:::\n"}, "startLine": 1}, "contextRegion": {"snippet": {"text": "root::10933:0:99999:7:::\n"}}, "artifactLocation": {"uri": "unblob_extracted/firmware_extract/11108416-13869836.lzma_extract/lzma.uncompressed_extract/3761304-11775640.cpio_portable_ascii_extract/etc/shadow", "index": 0, "uriBaseId": "STACSROOT"}}}], "suppressions": []}, {"message": {"text": "User in /etc/shadow has been configured to not require a password."}, "level": "error", "ruleId": "CredentialNixShadowBlank", "locations": [{"physicalLocation": {"region": {"byteOffset": 0, "snippet": {"text": "root::10933:0:99999:7:::\n"}, "startLine": 1}, "contextRegion": {"snippet": {"text": "root::10933:0:99999:7:::\n"}}, "artifactLocation": {"uri": "etc/shadow", "index": 2, "uriBaseId": "STACSROOT"}}}], "suppressions": []}], "artifacts": [{"location": {"uri": "unblob_extracted/firmware_extract/11108416-13869836.lzma_extract/lzma.uncompressed_extract/3761304-11775640.cpio_portable_ascii_extract/etc/shadow", "uriBaseId": "STACSROOT"}, "hashes": {"md5": "4cc7c86dfd8fc51cf2e765da0ed01a8a"}}, {"location": {"uri": "unblob_extracted/firmware_extract/11108416-13869836.lzma_extract/lzma.uncompressed_extract/3761304-11775640.cpio_portable_ascii", "uriBaseId": "STACSROOT"}}, {"location": {"uri": "etc/shadow", "uriBaseId": "STACSROOT"}, "parentIndex": 1, "hashes": {"md5": "4cc7c86dfd8fc51cf2e765da0ed01a8a"}}], "originalUriBaseIds": {"STACSROOT": {"uri": "file:///logs/firmware/"}}}]}