addrbookFor publishers
← The evidence ledger

Evidence row 54817

Observed , by sync.x402_bazaar/1.

Kind
listing
About
source_record x402_bazaar:https://ciaudit.genexxis.com/dockerfile
Recorded
Previous row
None: the first of its kind about this subject
Body SHA-256
122e48fc6740a78e016ed8522138c4fb19a6aaa7bde6652b2c4ada6c403afc40
Leaf
0xed34c184ba3de2cc5c624365cec38ff17bc5e88ecc94009a7b0f352a010aca55

What was observed

{
  "endpoints": [
    [
      "x402",
      "https://ciaudit.genexxis.com/dockerfile"
    ]
  ],
  "name": "ciaudit.genexxis.com/dockerfile",
  "owner_address": "0x9287e3102d411029025c7617d75245bfc7920f17",
  "raw": {
    "accepts": [
      {
        "amount": "10000",
        "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
        "extra": {
          "name": "USD Coin",
          "version": "2"
        },
        "maxTimeoutSeconds": 300,
        "network": "eip155:8453",
        "payTo": "0x9287e3102D411029025C7617d75245BFc7920f17",
        "scheme": "exact"
      }
    ],
    "description": "Lint a Dockerfile: base image pinning, root user, curl|sh, remote ADD, secrets in ENV/ARG, apt/pip/npm hygiene, chmod 777, EXPOSE 22, HEALTHCHECK, layer cache order. Returns findings with line, why, fix and a score.",
    "extensions": {
      "bazaar": {
        "info": {
          "input": {
            "body": {
              "content": "FROM node:20\nWORKDIR /app\nCOPY . .\nRUN npm install\nENV NODE_ENV=production\nEXPOSE 3000\nCMD [\"node\", \"server.js\"]\n"
            },
            "bodyType": "json",
            "method": "POST",
            "type": "http"
          },
          "output": {
            "example": {
              "findings": [
                {
                  "fix": "Create an unprivileged user and add USER app (or USER 10001) before CMD",
                  "id": "no_user",
                  "line": null,
                  "severity": "medium",
                  "snippet": null,
                  "why": "no USER in the final stage: the container runs as root"
                },
                {
                  "fix": "Use npm ci (with package-lock.json) for reproducible installs",
                  "id": "npm_install",
                  "line": 4,
                  "severity": "low",
                  "snippet": "RUN npm install",
                  "why": "npm install can change the lockfile and resolve different versions"
                }
              ],
              "kind": "dockerfile",
              "score": 80,
              "summary": {
                "high": 0,
                "low": 4,
                "medium": 1,
                "total": 5
              }
            },
            "type": "json"
          }
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "properties": {
            "input": {
              "additionalProperties": false,
              "properties": {
                "body": {
                  "properties": {
                    "content": {
                      "description": "Full text of the file (max 100 KB)",
                      "type": "string"
                    }
                  },
                  "required": [
                    "content"
                  ]
                },
                "bodyType": {
                  "enum": [
                    "json",
                    "form-data",
                    "text"
                  ],
                  "type": "string"
                },
                "method": {
                  "enum": [
                    "POST"
                  ],
                  "type": "string"
                },
                "type": {
                  "const": "http",
                  "type": "string"
                }
              },
              "required": [
                "type",
                "method",
                "bodyType",
                "body"
              ],
              "type": "object"
            },
            "output": {
              "properties": {
                "example": {
                  "type": "object"
                },
                "type": {
                  "type": "string"
                }
              },
              "required": [
                "type"
              ],
              "type": "object"
            }
          },
          "required": [
            "input"
          ],
          "type": "object"
        }
      },
      "builder-code": {
        "info": {
          "s": [
            "cdp_sdk_server"
          ]
        },
        "schema": {
          "$schema": "https://json-schema.org/draft/2020-12/schema",
          "additionalProperties": false,
          "properties": {
            "a": {
              "description": "App builder code",
              "pattern": "^[a-z0-9_]{1,32}$",
              "type": "string"
            },
            "s": {
              "description": "Service builder codes",
              "items": {
                "pattern": "^[a-z0-9_]{1,32}$",
                "type": "string"
              },
              "maxItems": 11,
              "type": "array"
            },
            "w": {
              "description": "Wallet builder code",
              "pattern": "^[a-z0-9_]{1,32}$",
              "type": "string"
            }
          },
          "type": "object"
        }
      },
      "eip2612GasSponsoring": {},
      "erc20ApprovalGasSponsoring": {}
    },
    "lastUpdated": "2026-10-26T11:48:43.707Z",
    "quality": {
      "l30DaysTotalCalls": 4,
      "l30DaysUniquePayers": 2,
      "lastCalledAt": "2026-10-26T11:48:43.188Z"
    },
    "resource": "https://ciaudit.genexxis.com/dockerfile",
    "type": "http",
    "x402Version": 2
  },
  "source": "x402_bazaar",
  "summary": "Lint a Dockerfile: base image pinning, root user, curl|sh, remote ADD, secrets in ENV/ARG, apt/pip/npm hygiene, chmod 777, EXPOSE 22, HEALTHCHECK, layer cache order. Returns findings with line, why, fix and a score."
}

What the leaf hashes

{"body":"122e48fc6740a78e016ed8522138c4fb19a6aaa7bde6652b2c4ada6c403afc40","id":54817,"kind":"listing","method":"sync.x402_bazaar/1","observed_us":1793025434024730,"prev":null,"subject":"x402_bazaar:https://ciaudit.genexxis.com/dockerfile","subject_kind":"source_record"}

Proof

Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (296695 rows).

  1. 0xed34c4421d24e46510afa25100b97dcebe6caafd2bb2f4cdb8c1d3607287c138
  2. 0x7bdf9be5a4c14743ed6c69b91eb5c7437f999bcdbd34fb6894a9e5d4d79636ab
  3. 0xf00e65cf16118032cd72351b1d1d17cace31cae60376cbda9d407e0f9f1c83e1
  4. 0xb3f46e58545139d04dfe0b9055cf6dae8e7cf98e143077f695e45fa4f64f4c0e
  5. 0xda492dfdc277526dc990b8c1866d1eaeeeab2ba293c7e93045ca02c19e849db4
  6. 0xb950bf9163579f51e8ffe8e1b592523486f8bdaf3586efb181bb02f721c0b9d6
  7. 0x7f569d6e01705efedc922ad06ed5298d88aabfa46e66297c9251b1f32d9fb5d7
  8. 0x0047c598fe474f999abb7758a961de615a6fac18514463b3fcd8ceaf56349236
  9. 0x3e7454bbcb68b3bb36b1b68423bfef297cf86ab769286341444c6f2ea3d72f4e
  10. 0xf333b1fb4291fc66aba3c2430863d37b43610cc7bcfcad50c56770f5a796facc
  11. 0x3f07a2115848067024e2992cb2c05a86eb8d02df5abfcead8bc47854e501603e
  12. 0xe158f09cdbfb4f7be1bfd45fce3afcad32c2b3bb2fc2e181dadc193bbf194bfc
  13. 0x746e9e5b6765727b6b96f41204cc115b0302259f6c67be0cf0efbf245601d500
  14. 0x614d844c9e0509d9f9e63697aa2935555bce5f13695a8dc0047aa9e9898d70b3
  15. 0x95657a7d540ed6cac0bde9995782333b2562a9a6641853269ac95148827410f0
  16. 0x5fb5dda563336cd1bc1b9f44c52b76237ae72ed2145cb9290f39f304ca7dd678
  17. 0x74a0a08e4e7ab9aa5bfbead33dec7e1c7e8e364cff69a63720d764bbe987aadc
Day root
0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8
Chained
0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a
Published
On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae

How to check it · This row as JSON