← The evidence ledger
Evidence row 54818
Observed , by sync.x402_bazaar/1.
- Kind
- listing
- About
- source_record x402_bazaar:https://ciaudit.genexxis.com/compose
- Recorded
- Previous row
- None: the first of its kind about this subject
- Body SHA-256
- 8d0d1e35918eb9674408a3c34e3c82aa7a0ca509c52135b0ab80400715923cd7
- Leaf
- 0x7abdc118b8ec9d5bd5abadfd80161f958eb0ea4d0656a46bb6370777cfc668f1
What was observed
{
"endpoints": [
[
"x402",
"https://ciaudit.genexxis.com/compose"
]
],
"name": "ciaudit.genexxis.com/compose",
"owner_address": "0x9287e3102d411029025c7617d75245bfc7920f17",
"raw": {
"accepts": [
{
"amount": "10000",
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"maxTimeoutSeconds": 300,
"network": "eip155:8453",
"payTo": "0x9287e3102D411029025C7617d75245BFc7920f17",
"scheme": "exact"
}
],
"description": "Lint a docker-compose file: privileged, host network/pid/ipc, Docker socket mounts, SYS_ADMIN/ALL capabilities, unpinned images, database ports published on all interfaces, literal secrets, restart policy, memory limits.",
"extensions": {
"bazaar": {
"info": {
"input": {
"body": {
"content": "services:\n web:\n build: .\n ports:\n - \"8080:3000\"\n environment:\n DATABASE_URL: ${DATABASE_URL}\n depends_on:\n - db\n db:\n image: postgres:16\n ports:\n - \"5432:5432\"\n volumes:\n - db-data:/var/lib/postgresql/data\nvolumes:\n db-data:\n"
},
"bodyType": "json",
"method": "POST",
"type": "http"
},
"output": {
"example": {
"findings": [
{
"fix": "Bind to localhost (\"127.0.0.1:5432:5432\") or drop the ports entry and use the internal network",
"id": "db_port_public",
"line": 13,
"severity": "high",
"snippet": "- \"5432:5432\"",
"why": "service db publishes PostgreSQL port 5432 on all host interfaces"
}
],
"kind": "compose",
"score": 68,
"services": [
"web",
"db"
],
"summary": {
"high": 1,
"low": 4,
"medium": 0,
"total": 5
}
},
"type": "json"
}
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"properties": {
"input": {
"additionalProperties": false,
"properties": {
"body": {
"properties": {
"content": {
"description": "Full text of the file (max 100 KB)",
"type": "string"
}
},
"required": [
"content"
]
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
},
"method": {
"enum": [
"POST"
],
"type": "string"
},
"type": {
"const": "http",
"type": "string"
}
},
"required": [
"type",
"method",
"bodyType",
"body"
],
"type": "object"
},
"output": {
"properties": {
"example": {
"type": "object"
},
"type": {
"type": "string"
}
},
"required": [
"type"
],
"type": "object"
}
},
"required": [
"input"
],
"type": "object"
}
},
"builder-code": {
"info": {
"s": [
"cdp_sdk_server"
]
},
"schema": {
"$schema": "https://json-schema.org/draft/2020-12/schema",
"additionalProperties": false,
"properties": {
"a": {
"description": "App builder code",
"pattern": "^[a-z0-9_]{1,32}$",
"type": "string"
},
"s": {
"description": "Service builder codes",
"items": {
"pattern": "^[a-z0-9_]{1,32}$",
"type": "string"
},
"maxItems": 11,
"type": "array"
},
"w": {
"description": "Wallet builder code",
"pattern": "^[a-z0-9_]{1,32}$",
"type": "string"
}
},
"type": "object"
}
},
"eip2612GasSponsoring": {},
"erc20ApprovalGasSponsoring": {}
},
"lastUpdated": "2026-10-26T11:48:42.232Z",
"quality": {
"l30DaysTotalCalls": 4,
"l30DaysUniquePayers": 2,
"lastCalledAt": "2026-10-26T11:48:41.682Z"
},
"resource": "https://ciaudit.genexxis.com/compose",
"type": "http",
"x402Version": 2
},
"source": "x402_bazaar",
"summary": "Lint a docker-compose file: privileged, host network/pid/ipc, Docker socket mounts, SYS_ADMIN/ALL capabilities, unpinned images, database ports published on all interfaces, literal secrets, restart policy, memory limits."
}What the leaf hashes
{"body":"8d0d1e35918eb9674408a3c34e3c82aa7a0ca509c52135b0ab80400715923cd7","id":54818,"kind":"listing","method":"sync.x402_bazaar/1","observed_us":1793025434029819,"prev":null,"subject":"x402_bazaar:https://ciaudit.genexxis.com/compose","subject_kind":"source_record"}Proof
Fold these into the leaf in order, hashing each sorted pair with keccak256, to reach the root of (296695 rows).
- 0x7abdb702b4773757df24684e5af5f1fdf1d140884926f1fe4b0e9a538a191b2f
- 0x6db85ea4ea6470dfcaa8753e65f13f6610917f1de74ee9b7d2dca2609cfde819
- 0xa5371ec4929d4f8b3c75c5746fcd7088cd91fa0b027e2f573287c5631df06b10
- 0x8091c3b829ca372bb56a3bb89772ab525b8530df9a1c1e35b0d5bab655f20dfe
- 0xd2663efc33fbdc31eb6007269af37658811871da9365ca8a65963db6d7f8785a
- 0x9bdd3f8fffb947c42c05fe9980f4fd874a3cc52893df689722aad6e260f27ab6
- 0xe5c9001f1a135d9a4e0cc35380ead2d8686839120e9bda260f832224bde809b2
- 0x6ec04a1c8048ee2b8456ca7387f24f07a339bc7923afdf2fd1e6caaf4af68aac
- 0x34ef0eafe8a19be079847713fba11d65e6ba0dd49a522368ade2cd52bd35f7bc
- 0x72004cfd0b5574eac5ee651ce41187d0c3a331b4bdf0bdb385f7d93decec1860
- 0x1474b20023ac420a3be8200f14f9ac14f1ee93ff05411fa3760c28b2e50fb3dd
- 0xa6406b1a5540d26e0cbd03bb274a01c10968fadb17913a6043bb9427ddfb71ba
- 0x01c95624b1f2385ef774ee258a9ae58a4df07a1bdaa829de84e1d5201f3f39c2
- 0x7721d38652b6444b18e1193824e50490ade04851ce6221771f6e374c4527d80f
- 0x15039087bf60ae9b06b756ec3cbc299760e59923a438bbd91e34d105186db0ed
- 0x2b6e23e3624a1b66e1d2298cfbce99a93ce6b13d24a58112a71802d79c5f7a76
- 0xd21942ae3214eff88e08ab04884fd4b11958b51af9a0741b7668e2d07a2c56c9
- 0x9a9024edb5069d88a324facb310a5ce8e495214bbaa968f077bede437390194f
- 0x9b9ce5b74b9bab5121612ef6b64920a8d453cbf311096a423eef9702747e868a
- Day root
- 0xf43e8dcc3d451a4788b26be904c55e8c4c0fa75c9666796c51db38d37e2c0df8
- Chained
- 0x702d5ac508f08b0d1accf36af25822d8e5660367494edd17a642fb61e158a57a
- Published
- On Arc Testnet, block 69251483: 0x495162f8936e19f0039918feebe6c307f327cd6bf8c37219620b1970041fa9ae