{"api":"v1","generated_at":"2026-09-16T09:40:37.843Z","licence":{"name":"CC BY 4.0","url":"https://creativecommons.org/licenses/by/4.0/","attribution":"TOLL, with a link to the page cited"},"page":"https://tollindex.com/e/x402-hono-api-inraby-workers-dev-api-v1-repo-security-bundle-73a079","pinned_page":"https://tollindex.com/e/x402-hono-api-inraby-workers-dev-api-v1-repo-security-bundle-73a079/at/2026-09-16T04-48Z","pinned":false,"method":"https://tollindex.com/ledger/method","snapshot_at":"2026-09-16T04:48:25.992Z","snapshot_stamp":"2026-09-16T04-48Z","endpoint":{"slug":"x402-hono-api-inraby-workers-dev-api-v1-repo-security-bundle-73a079","canonical_url":"https://x402-hono-api.inraby.workers.dev/api/v1/repo-security-bundle","resource":"https://x402-hono-api.inraby.workers.dev/api/v1/repo-security-bundle","http_method":"POST","type":"http","x402_version":2,"registries":["cdp"],"primary_registry":"cdp","curated_by_coinbase":false,"description":"Combined repo security scan — secret scan, GitHub Actions workflow exposure check, and dependency manifest CVE review in one agent call for CI pre-commit and supply-chain triage.","service_name":"Repo Security Bundle Scan","declared_category":null,"declared_tags":["repo","repository","secret scan","github actions","dependency"],"route_template":null,"registry_updated":"2026-08-27T19:38:00.811Z"},"derived":{"note":"fields no registry supplies; TOLL derives them and marks them derived on the page","title":"repo security bundle","category":"market-data","first_observed_by_toll":"2026-09-10T19:08:24.178Z","last_observed_by_toll":"2026-09-16T04:48:25.991Z","observation_began":"2026-09-10"},"presence":{"listed_now":true,"first_absent_at":null,"delisting_confirmed_at":null,"events":[{"registry":"cdp","at":"2026-09-10T19:08:24.178Z","event":"listed"}]},"accepts":[{"registry":"cdp","ordinal":0,"network":"eip155:8453","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","asset_name":"USD Coin","symbol":"USDC","decimals":6,"amount_display":"0.04 USDC","amount_units":0.04,"decimals_known":true,"pay_to":"0xe2433f056f953b7d4c946cffb1201d2e9601eabf","scheme":"exact"}],"counters":{"observed_at":"2026-09-16T04:48:25.992Z","calls_30d":1,"unique_payers_30d":1,"last_called_at":"2026-08-27T19:38:00.684Z"},"validation":{"latest":{"observed_at":"2026-09-16T05:13:46.131Z","state":"pass","failed_checks":[],"endpoint_http_status":402,"run_id":"daily-2026-09-16"},"uptime":[{"days":7,"observed":6,"passed":6,"ratio":1},{"days":30,"observed":6,"passed":6,"ratio":1},{"days":90,"observed":6,"passed":6,"ratio":1}],"history_90d":[{"observed_at":"2026-09-16T05:13:46.131Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-16","state_changed":false},{"observed_at":"2026-09-15T05:30:52.674Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-15","state_changed":false},{"observed_at":"2026-09-14T05:04:30.154Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-14","state_changed":false},{"observed_at":"2026-09-13T05:01:00.160Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-13","state_changed":false},{"observed_at":"2026-09-12T07:17:09.927Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-12","state_changed":false},{"observed_at":"2026-09-11T10:58:03.381Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-11","state_changed":true}]},"seller":{"wallet":"0xe2433f056f953b7d4c946cffb1201d2e9601eabf","page":"https://tollindex.com/seller/0xe2433f056f953b7d4c946cffb1201d2e9601eabf","endpoints":5,"hosts":1},"reports":0,"registry_record":{"cdp":[{"tags":["repo","repository","secret scan","github actions","dependency"],"type":"http","accepts":[{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0xe2433f056f953b7d4c946cffb1201d2e9601eabf","amount":"40000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300}],"quality":{"lastCalledAt":"2026-08-27T19:38:00.684Z","l30DaysTotalCalls":1,"l30DaysUniquePayers":1},"resource":"https://x402-hono-api.inraby.workers.dev/api/v1/repo-security-bundle","extensions":{"bazaar":{"info":{"input":{"body":{"text":"api_token=not-a-real-secret","manifestText":"{\"dependencies\":{\"lodash\":\"4.17.15\"}}","workflowYaml":"name: CI\non: pull_request_target:\npermissions: write-all\n"},"type":"http","method":"POST","bodyType":"json"},"output":{"type":"json","example":{"status":"high_risk","findings":[{"id":"GHA_PULL_REQUEST_TARGET","title":"pull_request_target workflow trigger","source":"github-actions","severity":"critical"}],"scansRun":["secret-scan","github-actions-secret-exposure-scan","dependency-cve-scan"],"riskScore":85,"recommendations":["Avoid pull_request_target unless strictly required."]}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method","bodyType","body"],"properties":{"body":{"type":"object","properties":{"text":{"type":"string","description":"Optional text/config to scan for secrets"},"manifestText":{"type":"string","description":"Optional package.json, lockfile, or yarn.lock contents"},"workflowYaml":{"type":"string","description":"Optional GitHub Actions workflow YAML"}}},"type":{"type":"string","const":"http"},"method":{"enum":["POST"],"type":"string"},"bodyType":{"enum":["json","form-data","text"],"type":"string"}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object","properties":{"status":{"enum":["clean","needs_review","high_risk"]},"findings":{"type":"array"},"scansRun":{"type":"array","items":{"type":"string"}},"riskScore":{"type":"number"},"recommendations":{"type":"array","items":{"type":"string"}}}}}}}}}},"description":"Combined repo security scan — secret scan, GitHub Actions workflow exposure check, and dependency manifest CVE review in one agent call for CI pre-commit and supply-chain triage.","lastUpdated":"2026-08-27T19:38:00.811Z","serviceName":"Repo Security Bundle Scan","x402Version":2}]}}