{"build_date_unix":"unknown","canonical_issues_count":1,"commit":"1ceff03391daf74a961c180fc64cc1cc2d35dc9b","context_reasoning_axes":[{"line":"Takes into account whether attached network access controls block database traffic.","name":"network_acl_path"},{"line":"Takes into account whether a database's subnets have a route to the internet.","name":"subnet_route_path"},{"line":"Takes into account where a database's provisioned performance settings come from.","name":"rds_iops_authorship"},{"line":"Takes into account how a regional cache relates to its global datastore.","name":"elasticache_global_datastore"},{"line":"Takes into account where interactive container shell sessions are logged.","name":"ecs_exec_log_route"},{"line":"Takes into account how a function's code is packaged for deployment.","name":"lambda_package_type"},{"line":"Takes into account how the registry scans repository images.","name":"ecr_registry_scanning"},{"line":"Takes into account how a Lambda function is invoked.","name":"lambda_invocation_graph"},{"line":"Takes into account where a function sends the record of a failed asynchronous event.","name":"lambda_failure_destination"},{"line":"Takes into account the role a queue plays.","name":"sqs_dlq_identity"},{"line":"Takes into account how a resource is encrypted at rest.","name":"encryption_variants"},{"line":"Takes into account what access an IAM role or user actually holds.","name":"iam_policy_risk"},{"line":"Takes into account who can actually assume an IAM role.","name":"iam_trust_graph"},{"line":"Takes into account whether a resource is protected against deletion.","name":"deletion_guard"},{"line":"Takes into account whether the code creates a resource at all.","name":"disabled_resource_count"},{"line":"Takes into account where the settings of a module call come from.","name":"module_synthesized_input"},{"line":"Takes into account the environment a resource belongs to.","name":"tag_environment"},{"line":"Takes into account where instance metadata settings come from.","name":"imdsv2_enforcement"},{"line":"Takes into account whether a container task is a reusable module template.","name":"ecs_module_template"},{"line":"Takes into account whether a Lambda function is a reusable module template.","name":"lambda_module_template"},{"line":"Takes into account whether a queue is a reusable module template.","name":"sqs_module_template"},{"line":"Takes into account where the function an event rule triggers is defined.","name":"eventbridge_external_lambda"},{"line":"Takes into account whether a secret is rotated automatically.","name":"secret_rotation"},{"line":"Takes into account organization policies that limit who can access a resource.","name":"rcp_data_perimeter"},{"line":"Takes into account organization-wide settings that apply to new instances.","name":"ec2_declarative_policy"},{"line":"Takes into account organization policies that limit what an identity can do.","name":"scp_deny_guardrail"},{"line":"Takes into account where a credential value comes from.","name":"dynamic_reference"},{"line":"Takes into account whether a resource belongs to the tooling CDK itself uses.","name":"cdk_bootstrap"},{"line":"Takes into account where restored database encryption comes from.","name":"restore_inheritance"},{"line":"Takes into account how a database instance relates to its cluster or source.","name":"rds_instance_relationship"},{"line":"Takes into account where a delivery stream gets its data from.","name":"firehose_source_encrypted"},{"line":"Takes into account how values are passed between modules.","name":"module_output_wiring"},{"line":"Takes into account whether a CDN sits in front of a resource.","name":"upstream_cdn_edge"}],"engine_version":"1.19.874","mcp":{"endpoint":"/mcp","prompts":["secure-review","pre-commit-gate","secure-review-cloudformation"],"resources":["audytx://rules-catalog"],"tools":["scan_terraform","scan_cloudformation","scan_workspace","autofix_terraform","autofix_cloudformation","dry_run_autofix","dry_run_autofix_cloudformation","explain_finding","get_context_graph","cost_sampler"],"transport":"streamable-http (stateless JSON-RPC over POST)"},"module_models":11,"output_formats":["pr_comment","sarif_v2.1.0"],"rules_count":301,"service":"audytx-backend","supported_cloud":"aws","supported_event_types":["pull_request","ping"],"supported_iac":["terraform","cloudformation"]}