while adding to the collection: %+vattempt to delete an entry (id=%d) that doesn't currently existtransport: received per-RPC creds error with illegal status: %vnet/trace: trace used after finish: Finished at: %s Used at: %schart illegally contains content outside the base directory: %qcannot load irregular file %s as it has file mode type bits set{ "access-key": "6da89121079f83b2eb6acccf8219ea982c3d79bccc", }the qualifier channel must be not empty if namespace is presenttags are not allowed with this operation (must use exact names)NegotiatedSerializer is required when initializing a RESTClientabcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ-0123456789type of condition in CamelCase or in foo.example.com/CamelCase.Manager is an identifier of the workflow managing these fields.proto: wrong wireType = %d for field ServerAddressByClientCIDRsproto: wrong wireType = %d for field DeletionGracePeriodSecondsproto: PartialObjectMetadataList: illegal tag %d (wire type %d)proto: ServerAddressByClientCIDR: illegal tag %d (wire type %d)AppArmorProfile defines a pod or container's AppArmor settings.The target object that you want to bind to the standard object.ContainerRestartRule describes how a container exit is handled.endpoints is the endpoint name that details Glusterfs topology.Limits is the list of LimitRangeItem objects that are enforced.ObjectFieldSelector selects an APIVersioned field of an object.Pod affinity is a group of inter pod affinity scheduling rules.A node selector term, associated with the corresponding weight.StopSignal reports the effective stop signal for this containerWhat action was taken/failed regarding to the Regarding object.selector is a label query over volumes to consider for binding.proto: CSIPersistentVolumeSource: illegal tag %d (wire type %d)proto: wrong wireType = %d for field ControllerPublishSecretRefproto: ConfigMapNodeConfigSource: illegal tag %d (wire type %d)proto: PersistentVolumeClaimList: illegal tag %d (wire type %d)proto: PersistentVolumeClaimSpec: illegal tag %d (wire type %d)proto: PersistentVolumeSource: wiretype end group for non-groupproto: PersistentVolumeStatus: wiretype end group for non-groupproto: PodResourceClaimStatus: wiretype end group for non-groupproto: wrong wireType = %d for field EphemeralContainerStatusesproto: RBDPersistentVolumeSource: illegal tag %d (wire type %d)proto: ReplicationControllerList: illegal tag %d (wire type %d)proto: ReplicationControllerSpec: illegal tag %d (wire type %d)proto: TypedLocalObjectReference: illegal tag %d (wire type %d)the server does not allow this method on the requested resourcecouldn't parse '%s' as bool for unstructured mismatch detection"did:example:123#zC1Rnuvw9rVa6E5TKF4uQVRuQuaCpVgB81Um2u17Fu7UK""access_token7": "xoxo-523423-234243-234233-e039d02840a0b9379c"ClaimsSet compressed, format XPress not currently supported: %scould not fill index %d of uni-dimensional conformant array: %vapplication/vnd.containerd.container.checkpoint.config.v1+protofailed to read header bytes from layer to detect media type: %w(?:.*/|^)libpython(?P[0-9]+(?:\.[0-9]+)+)[a-z]?\.so.*$(?m)HA-Proxy version (?P[0-9]+\.[0-9]+(\.|-dev)[0-9]+)could not fetch SBOM length pointer from exported functions: %wparsing dpkg status: extracting key-value from line: %s err: %vunable to parse listing of installed files for RPM DB entry: %sunable to parse listing of installed files for RPM DB entry: %wapi.AuthProviderConfig{Name: %q, Config: map[string]string{%s}}proto: JSONSchemaPropsOrArray: wiretype end group for non-groupexpected four hexadecimal digits after '\u', but got %q insteadproto: wrong wireType = %d for field SuccessfulJobsHistoryLimit%v accessor error: %v is of the type %T, expected []interface{}ReplicaSetStatus represents the current status of a ReplicaSet.proto: ControllerRevisionList: wiretype end group for non-groupproto: RollingUpdateDaemonSet: wiretype end group for non-groupproto: StatefulSetUpdateStrategy: illegal tag %d (wire type %d)proto: IngressLoadBalancerStatus: illegal tag %d (wire type %d)[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*got %d parameters but PostgreSQL only supports 65535 parametersproto: wrong wireType = %d for field UnhealthyPodEvictionPolicyproto: PodDisruptionBudgetStatus: illegal tag %d (wire type %d)currentValue is the current value of the metric (as a quantity)unsufficient information to create a parent pom project, id: %sClientConfig defines how to communicate with the hook. Requiredproto: ValidatingAdmissionPolicy: illegal tag %d (wire type %d)Resource is one of the existing resource types. "*" means all.proto: SelfSubjectRulesReview: wiretype end group for non-groupproto: SubjectAccessReviewStatus: illegal tag %d (wire type %d)proto: wrong wireType = %d for field StabilizationWindowSecondsk8s.io.api.autoscaling.v2beta1.HorizontalPodAutoscalerConditionk8s.io.api.autoscaling.v2beta2.HorizontalPodAutoscalerConditionlastUpdateTime is the time of the last update to this conditionCertificateSigningRequestSpec contains the certificate request.proto: CertificateSigningRequest: illegal tag %d (wire type %d)proto: ClusterTrustBundleList: wiretype end group for non-groupproto: ClusterTrustBundleSpec: wiretype end group for non-groupproto: PodCertificateRequestList: illegal tag %d (wire type %d)proto: PodCertificateRequestSpec: illegal tag %d (wire type %d)k8s.io.api.certificates.v1beta1.CertificateSigningRequestStatusGroupSubject holds detailed information for group-kind subject.proto: wrong wireType = %d for field PriorityLevelConfigurationk8s.io.api.flowcontrol.v1beta1.ExemptPriorityLevelConfigurationk8s.io.api.flowcontrol.v1beta1.PriorityLevelConfigurationStatusk8s.io.api.flowcontrol.v1beta2.ExemptPriorityLevelConfigurationk8s.io.api.flowcontrol.v1beta2.PriorityLevelConfigurationStatusk8s.io.api.flowcontrol.v1beta3.ExemptPriorityLevelConfigurationk8s.io.api.flowcontrol.v1beta3.PriorityLevelConfigurationStatusNetworkPolicySpec provides the specification of a NetworkPolicyRoleRef contains information that points to the role being usedproto: ClusterRoleBindingList: wiretype end group for non-groupStringValue is a string. Must not be longer than 64 characters.proto: DeviceAllocationResult: wiretype end group for non-groupproto: OpaqueDeviceConfiguration: illegal tag %d (wire type %d)proto: ResourceClaimTemplateList: illegal tag %d (wire type %d)proto: ResourceClaimTemplateSpec: illegal tag %d (wire type %d)proto: CSIStorageCapacityList: wiretype end group for non-groupproto: VolumeAttachmentSource: wiretype end group for non-groupproto: VolumeAttachmentStatus: wiretype end group for non-groupproto: VolumeAttributesClassList: illegal tag %d (wire type %d)cbor: data item of cbor type %s is not accepted by protocol: %sinvalid bytes.Buffer.Write call after calling bytes.Buffer.NextBUG: popObject should never fail immediately after pushObject: ^[0-9a-f]{8}-[0-9a-f]{4}-3[0-9a-f]{3}-[0-9a-f]{4}-[0-9a-f]{12}$wrong date "%s" must fit ISO-8601 format : 2006-01-02T15:04:05ZAdmissionReview describes an admission review request/response.k8s.io.api.admission.v1.AdmissionResponse.AuditAnnotationsEntryThis can be in the form image:tag or image@SHA:012345679abcdef.&([a-zA-Z]{2,31}[0-9]{0,2}|#([0-9]{1,7}|[xX][0-9a-fA-F]{1,6}));internal.config.kubernetes.io/annotations-migration-resource-idexpected underlying client transport to be of type: %s; got: %sApplies a lexicographic sort to the elements of the given list.invalid date format verb %q: year must either be "YY" or "YYYY"invalid date format verb %q: 24-hour must either be "h" or "hh"invalid date format verb %q: 12-hour must either be "H" or "HH"invalid date format verb %q: timezone must be Z, ZZZZ, or ZZZZZhttp.Hijacker not implemented by underlying http.ResponseWriternplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n != 0 ? 1 : 2);0000000000000000000000000000000000000000000000000000000000000000 | %-11s %4s %4s %6s %4s %4s %6s | Cleaning up .checkmarx/containers directory after container scanunauthorized: verify if the organization you provided is correctTimeout reached after %d attempts. Last response status code: %dreflect.StructOf: struct size would exceed virtual address spaceruntime.SetFinalizer: first argument was allocated into an arenaattempted to trace stack of a goroutine this thread does not ownjson: invalid number literal, trying to unmarshal %q into NumberFailed creating temporary directory for kics remediation commandABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_flate: invalid compression level %d: want value in range [-2, 9]5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c2964fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5grpc: Compressor is not installed for requested grpc-encoding %qgrpc: client streaming protocol violation: get , want KDC_ERR_BAD_PVNO Requested protocol version number not supportedKDC_ERR_C_OLD_MAST_KVNO Client's key encrypted in old master keyKDC_ERR_S_OLD_MAST_KVNO Server's key encrypted in old master keyKDC_ERR_SERVICE_REVOKED Credentials for server have been revokedKRB_AP_ERR_INAPP_CKSUM Inappropriate type of checksum in messageKRB_AP_ERR_USER_TO_USER_REQUIRED Ticket must be for USER-TO-USERmessage ID does not indicate an AS_REP. Expected: %v; Actual: %vdecoding array or slice: length exceeds input size (%d elements)Received %d labels in call to record metric %q, but expected %d.the stream is rejected because server is draining the connectiondelegating_resolver: resolver for proxy not found for scheme dnsheader key %q contains value with non-printable ASCII characterscorrupted release record. You must manually delete the resourcesfile '%s' does not appear to be a valid chart file (details: %s)strict validation requires the registry to be explicitly definedrequested minimum TLS version is too low. Should be at-least: %xdriver ColumnConverter error converted %T to unsupported type %Textension %v has mismatching containing message: got %v, want %vHappy Eyeballs timer expired while waiting for connection to %q.warning: skipping globals because destination %s is not a table.jsonschema validation failed with 'file:///values.schema.json#' Human readable message indicating details about last transition.k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta.AnnotationsEntryequals operator has exactly one value but it cannot be retrievedProtocol for port. Must be UDP, TCP, or SCTP. Defaults to "TCP".Last time the condition transitioned from one status to another.Human-readable message indicating details about last transition.pdID is the ID that identifies Photon Controller persistent diskRange is string that identifies the range represented by 'data'.A list of scope selector requirements by scope of the resources.PodExecOptions is the query options to a Pod's remote exec call.VolumeMount describes a mounting of a Volume within a container.proto: DownwardAPIVolumeSource: wiretype end group for non-groupproto: FlexPersistentVolumeSource: illegal tag %d (wire type %d)proto: NodeRuntimeHandlerFeatures: illegal tag %d (wire type %d)proto: NodeSelectorRequirement: wiretype end group for non-groupproto: wrong wireType = %d for field ExtendedResourceClaimStatusproto: PreferredSchedulingTerm: wiretype end group for non-groupproto: VolumeResourceRequirements: illegal tag %d (wire type %d)proto: WeightedPodAffinityTerm: wiretype end group for non-groupFromUnstructured requires a non-nil pointer to an object, got %v-H "Authorization: Bearer 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""token3": "xoxp-1234-1234-1234-4ddbc191d40ee098cbaae6f3523ada2d"could not fill dimension %v of multi-dimensional fixed array: %vempty digest algorithm, validate before calling Algorithm.Hash()unexpected media type for ImageIndex(): %s; call Image() insteadGET %s: Content-Length header %d does not match expected size %ddependency "%s" of package "%s" not found in map of all packagesone or more symbols are missing from the native image executablecould not find the exported 'address of functions' attribute: %wcataloger failed to extract poetry lock metadata for package %+vunable to determine package version in requirements.txt line: %qskipping empty package name from mix.lock file, for line: %d: %sproto: APISubresourceDiscovery: wiretype end group for non-groupproto: CustomResourceSubresources: illegal tag %d (wire type %d)toml: cannot decode to a map with non-string key type (%s in %q)expected eight hexadecimal digits after '\U', but got %q insteadSpecifies the job that will be created when executing a CronJob.proto: UncountedTerminatedPods: wiretype end group for non-groupDeployment enables declarative updates for Pods and ReplicaSets.StatefulSetStatus represents the current state of a StatefulSet.proto: DaemonSetUpdateStrategy: wiretype end group for non-groupproto: RollingUpdateDeployment: wiretype end group for non-groupproto: IngressLoadBalancerIngress: illegal tag %d (wire type %d)proto: NetworkPolicyEgressRule: wiretype end group for non-group./ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789crypto/bcrypt: cost %d is outside allowed inclusive range %d..%dPodDisruptionBudgetList is a collection of PodDisruptionBudgets.proto: PodDisruptionBudgetList: wiretype end group for non-groupproto: PodDisruptionBudgetSpec: wiretype end group for non-groupcurrentValue is the current value of the metric (as a quantity).proto: HorizontalPodAutoscaler: wiretype end group for non-groupproto: SelfSubjectReviewStatus: wiretype end group for non-groupkey %s may not be modified on struct: %T: struct is not settableinvalid reference format: repository name (%s) must be lowercaseencountered an outside read boundary when reading CHPE structureEB1DF448F44BF4B332F52813A3B450D441CC2485F001454E92101B1D2F1950C3EB1DF448F44BF4BAEE4DFA9851CA56A91145E83E99C59CF911CB8E80DAF12FC3EB1DF448F44BF4363CB9CE9D68047D31F28D325D5CA5873F5D80CAF6D6151BC3literal count is too big: total available %d, total requested %dexpected Items protobuf field tag to be "bytes,2,rep,name=items"k8s.io.api.admissionregistration.v1.MutatingWebhookConfigurationproto: NamedRuleWithOperations: wiretype end group for non-groupproto: MutatingAdmissionPolicy: wiretype end group for non-groupk8s.io.api.admissionregistration.v1beta1.MutatingAdmissionPolicyk8s.io.api.admissionregistration.v1beta1.NamedRuleWithOperationsThe latest available observations of the storageVersion's state.proto: StorageVersionCondition: wiretype end group for non-groupproto: FieldSelectorAttributes: wiretype end group for non-groupproto: LabelSelectorAttributes: wiretype end group for non-groupproto: SelfSubjectAccessReview: wiretype end group for non-groupproto: SelfSubjectRulesReviewSpec: illegal tag %d (wire type %d)proto: SubjectAccessReviewSpec: wiretype end group for non-groupspec contains the details about the certificate being requested.proto: FlowDistinguisherMethod: wiretype end group for non-groupproto: PolicyRulesWithSubjects: wiretype end group for non-groupproto: PriorityLevelConfiguration: illegal tag %d (wire type %d)k8s.io.api.flowcontrol.v1beta1.LimitedPriorityLevelConfigurationk8s.io.api.flowcontrol.v1beta2.LimitedPriorityLevelConfigurationk8s.io.api.flowcontrol.v1beta3.LimitedPriorityLevelConfigurationValue defines how much of a certain device counter is available.DeviceClaim defines how to request devices with a ResourceClaim.proto: CapacityRequestPolicyRange: illegal tag %d (wire type %d)k8s.io.api.storage.v1beta1.VolumeAttributesClass.ParametersEntryk8s.io.api.storagemigration.v1alpha1.StorageVersionMigrationListk8s.io.api.storagemigration.v1alpha1.StorageVersionMigrationSpecproto: StorageVersionMigration: wiretype end group for non-groupmin %d items required to match contains schema, but none matchedcannot read random SCRAM-SHA-256 nonce from operating system: %v"@" statement is not valid, could be : @{push}, @{push}Argument definitions must be separated by newlines, not commas. Expected an attribute value, introduced by an equals sign ("=").For expression requires a colon after the collection expression.Namespace is the namespace associated with the request (if any).k8s.io.api.imagepolicy.v1alpha1.ImageReviewSpec.AnnotationsEntrya bool is required; to convert from string, use lowercase "true"Returns a list of numbers spread evenly over a particular range.not a valid RFC3339 timestamp: hour must have exactly two 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 for Checkmarx One user that privileges to create clientsPassword for Checkmarx One user that privileges to create clientsShow all custom states, including the ones that have been deleted $ cx results bfl --scan-id --query-id | %-20s %4v %4s %6s %4s %4s %5s | Scan only the specified SBOM file (supported formats xml or json)Authentication failed, not able to retrieve codebashing base linkreflect: StructOf does not support methods of embedded interfacesuser arena chunk size is not a multiple of the physical page sizeruntime.SetFinalizer: pointer not at beginning of allocated block Use "%s [command] --help" for more information about a command.To remediate vulnerabilities for results from a specific engine xml: name %q in tag of %s.%s conflicts with name %q in %s.XMLNamenet/http: Transport.DialTLS or DialTLSContext returned (nil, nil)tls: internal error: attempted to read record with QUIC transporttls: server selected an invalid version after a HelloRetryRequestABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=x509: policy constraints inhibitPolicyMapping field overflows intx509: inner and outer signature algorithm identifiers don't matchx509: issuer name does not match subject from issuing certificatecrypto/des: use of TripleDES is not allowed in FIPS 140-only modecryptobyte: pending child length %d exceeds %d-byte length prefixImage %s has 0 packages, skipping from containers-resolution.jsonAuthentication token. Will search public projects if not providednistec: internal error: p224Table called with out-of-bounds valuenistec: internal error: p384Table called with out-of-bounds valuenistec: internal error: p521Table called with out-of-bounds valueKDC_ERR_C_PRINCIPAL_UNKNOWN Client not found in Kerberos databaseKDC_ERR_S_PRINCIPAL_UNKNOWN Server not found in Kerberos databaseKDC_ERR_PREAUTH_FAILED Pre-authentication information was invalidKRB_ERR_RESPONSE_TOO_BIG Response too big for UDP; retry with TCPmessage ID does not indicate an TGS_REP. Expected: %v; Actual: %vbinarylogging: message to log is neither proto.message nor []byte^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$--- # Source: %s # HIDDEN: The Secret output has been suppressed file '%s' seems to be a YAML file, but expected a gzipped archiveunable to build link resolution index for filetree search contextabcdefghijklmnopqrstuvwxyz0123456789_-.ABCDEFGHIJKLMNOPQRSTUVWXYZ'%s' expected type '%s', got unconvertible type '%s', value: '%v'findFieldInfo: error building index when looking for field %d: %vWarning: Condition path '%s' for chart %s returned non-bool valueproto: FieldSelectorRequirement: wiretype end group for non-groupproto: GroupVersionForDiscovery: wiretype end group for non-groupproto: LabelSelectorRequirement: wiretype end group for non-groupEnvVar represents an environment variable present in a Container.Path is the URL path to use for the current proxy request to pod.PodSchedulingGate is associated to a Pod to guard its scheduling.A human readable message indicating details about the transition.ResourceRequirements describes the compute resource requirements.name is unique within a namespace to reference a secret resource.A single application container that you want to run within a pod.csi represents storage that is handled by an external CSI driver.PersistentVolumeSpec is the specification of a persistent volume.configMap represents a configMap that should populate this volumeproto: ContainerStateTerminated: wiretype end group for non-groupproto: EphemeralContainerCommon: wiretype end group for non-groupproto: ISCSIPersistentVolumeSource: illegal tag %d (wire type %d)proto: PersistentVolumeClaimStatus: illegal tag %d (wire type %d)proto: PodCertificateProjection: wiretype end group for non-groupproto: wrong wireType = %d for field InsecureSkipTLSVerifyBackendproto: wrong wireType = %d for field AutomountServiceAccountTokenproto: ReplicationControllerStatus: illegal tag %d (wire type %d)proto: TopologySpreadConstraint: wiretype end group for non-groupapplication/vnd.openxmlformats-officedocument.spreadsheetml.sheet(?m)\x00*(?P[0-9]+\.[0-9]+\.[0-9]+(-[0-9]+)?)\s\[linux\]\x00ProFTPD Version (?P[0-9]+\.[0-9]+\.[0-9]+[a-z]?)\x00^\s*(?P[^<(]*)(\s+<(?P.*)>)?(\s\((?P.*)\))?\s*$line %q: parsed field %q appears to have an empty value, skippinginvalid transport.Config.DialHolder: wrapped Dial function is nilproto: CustomResourceConversion: wiretype end group for non-groupproto: CustomResourceDefinition: wiretype end group for non-groupproto: CustomResourceValidation: wiretype end group for non-groupunable to retrieve managedFields for object, item %v is not a mapRevision indicates the revision of the state represented by Data.The most recent generation observed by the daemon set controller.revision indicates the revision of the state represented by Data.ScaleStatus represents the current status of a scale subresource.proto: NetworkPolicyIngressRule: wiretype end group for non-groupFiller.Funcs: all customFuncs must have 2 arguments and 0 returnsSpecification of the desired behavior of the PodDisruptionBudget.k8s.io.api.policy.v1.PodDisruptionBudgetStatus.DisruptedPodsEntryproto: CrossVersionObjectReference: illegal tag %d (wire type %d)proto: HorizontalPodAutoscalerList: illegal tag %d (wire type %d)proto: HorizontalPodAutoscalerSpec: illegal tag %d (wire type %d)acquired package info from installed python package manifest filexmlns="http://schemas.microsoft.com/3dmanufacturing/core/2015/02"ssh: no common algorithm for %s; we offered: %v, peer offered: %vcurve25519: internal error: X25519 returned %d bytes, expected 32ssh: DH GEX request out of range, min: %d, max: %d, preferred: %dlength of dynamic section is not a multiple of dynamic entry sizeInvalid SizeOfImage value, should be multiple of SectionAlignmentError parsing a resource directory data entry, the RVA is invalidthe calculated length (%d) is different from the data length (%d)unexpected literal count, want %d bytes, but only %d is availablelink %s points to unresolved path %s, ignoring target as new rootk8s.io.api.admissionregistration.v1.ValidatingAdmissionPolicyListk8s.io.api.admissionregistration.v1.ValidatingAdmissionPolicySpecMutatingAdmissionPolicyList is a list of MutatingAdmissionPolicy.k8s.io.api.admissionregistration.v1alpha1.MutatingAdmissionPolicyk8s.io.api.admissionregistration.v1alpha1.NamedRuleWithOperationsproto: MutatingAdmissionPolicyList: illegal tag %d (wire type %d)proto: MutatingAdmissionPolicySpec: illegal tag %d (wire type %d)proto: LocalSubjectAccessReview: wiretype end group for non-groupproto: SelfSubjectAccessReviewSpec: illegal tag %d (wire type %d)proto: SubjectRulesReviewStatus: wiretype end group for non-groupproto: PodCertificateRequestStatus: illegal tag %d (wire type %d)ServiceCIDRStatus describes the current state of the ServiceCIDR.Name defines the name of the counter set. It must be a DNS label.Allocation is set once the claim has been allocated successfully.proto: DeviceClaimConfiguration: wiretype end group for non-groupproto: DeviceClassConfiguration: wiretype end group for non-groupproto: DeviceCounterConsumption: wiretype end group for non-groupVolumeAttachmentList is a collection of VolumeAttachment objects.k8s.io.api.storage.v1alpha1.VolumeAttributesClass.ParametersEntryproto: StorageVersionMigrationList: illegal tag %d (wire type %d)proto: StorageVersionMigrationSpec: illegal tag %d (wire type %d)cbor: cannot encode "break" code outside indefinite length valuesKey expression in 'for' expression must not produce a null value.Unable to find the closing quote mark before the end of the file.A JSON object attribute must have a value, introduced by a colon.proto: ImageReviewContainerSpec: wiretype end group for non-groupTree isn't a leaf but also had no children. How does that happen?a bool is required; to convert from string, use lowercase "false"Removes all empty string elements from the given list of strings.not a valid RFC3339 timestamp: end of string where %q is expectedgssapi-with-mic,hostbased,publickey,keyboard-interactive,password^(?P.*?)@(?P.*?):(?:(?P.*?)/)?(?P.*?/.*?)$Risk management results are currently unavailable for your tenant.Cancel the policy evaluation and fail after the timeout in minutes | %-10s %5s %6s %6s %5s %4s %5s | The list command provides a list of all the scans in Checkmarx OneResolve SCA project dependencies (path to SCA Resolver executable)Specify which scs engines will run (default: all licensed engines)Error: Proxy string is required for Kerberos proxy authentication.Error: Kerberos SPN is required for Kerberos proxy authentication.Configured part size '%s' is invalid or empty. Defaulting to 2 GB.reflect: indirection through nil pointer to embedded struct field runtime: unexpected error while checking standard file descriptor casGToWaitingForSuspendG with non-isWaitingForSuspendG wait reasontls: certificate private key (%T) does not implement crypto.Signerclient doesn't support ECDHE, can only use legacy RSA key exchangetls: server sent an unexpected quic_transport_parameters extensioninternal error: attempted to parse unknown event (please report): cx hooks pre-commit secrets-ignore --resultIds=id1,id2 - Encrypt files containing secrets (least secure method) a single organization should be provided for specific repositoriesx509: policy constraints requireExplicitPolicy field overflows intx509: certificate is not valid for any names, but wanted to match x509: requested SignatureAlgorithm does not match private key typecryptobyte: high-tag number identifier octects not supported: 0x%xInvalid credential cache data. Keytab version is not within 1 to 4Credentials cache version is not 4 so there is no header to parse.grpc: credentials.Bundle must return non-nil transport credentialsKDC_ERR_KEY_EXPIRED Password has expired; change password to resetKRB_AP_ERR_BAD_INTEGRITY Integrity check on decrypted field failedclient address not within the list contained in the service ticketmessage ID does not indicate a KRB_ERROR. Expected: %v; Actual: %vtoml: key %s already exists as a %s, but should be an array tablemetadata: Pairs got the odd number of input pairs for metadata: %ddecompressed chart file %q is larger than the maximum file size %dhttps://youtube.googleapis.com/youtube/v3/search?part=snippet&key=websocket: internal error, unexpected bytes at end of flate streamunable to fetch file reference from parent path %q for path=%q: %wDescriptor.Options called without importing the descriptor packagean empty namespace may not be set when a resource name is provided[ERROR] unable to get apiresource from unstructured: %s , error %sgroupVersion is the group and version this APIResourceList is for.proto: PartialObjectMetadataList: wiretype end group for non-groupproto: ServerAddressByClientCIDR: wiretype end group for non-groupoperator %q cannot be converted into the old label selector formatoptional specify whether the ConfigMap or its keys must be definedNumber of occurrences in this series up to the last heartbeat timePath is the URL path to use for the current proxy request to node.The key of the secret to select from. Must be a valid secret key.cachingMode is the Host Caching mode: None, Read Only, Read Write.driver is the name of the driver to use for this volume. Required.PersistentVolumeClaimCondition contains details about state of pvccapacity represents the actual resources of the underlying volume.system is the name of the storage system as configured in ScaleIO.k8s.io.api.core.v1.CSIPersistentVolumeSource.VolumeAttributesEntryproto: CSIPersistentVolumeSource: wiretype end group for non-groupproto: CephFSPersistentVolumeSource: illegal tag %d (wire type %d)proto: CinderPersistentVolumeSource: illegal tag %d (wire type %d)proto: ClusterTrustBundleProjection: illegal tag %d (wire type %d)proto: ConfigMapNodeConfigSource: wiretype end group for non-groupproto: PersistentVolumeClaimList: wiretype end group for non-groupproto: PersistentVolumeClaimSpec: wiretype end group for non-groupproto: wrong wireType = %d for field PersistentVolumeReclaimPolicyproto: wrong wireType = %d for field TerminationGracePeriodSecondsproto: RBDPersistentVolumeSource: wiretype end group for non-groupproto: ReplicationControllerList: wiretype end group for non-groupproto: ReplicationControllerSpec: wiretype end group for non-groupproto: wrong wireType = %d for field AllocateLoadBalancerNodePortsproto: TypedLocalObjectReference: wiretype end group for non-grouppublic static final String API_ORG_EXIST = "APIOrganizationExist";const MessageBirdClientID = "12345678-ABCD-ABCD-ABCD-1234567890AB"^urn:uuid:[\da-f]{8}-[\da-f]{4}-[\da-f]{4}-[\da-f]{4}-[\da-f]{12}$%s: indicates the package's existence is evident by the given filecannot convert SPDX document to Syft model because document is nil(?m)\/usr\/local\/lib\/perl\d\/(?P[0-9]+\.[0-9]+\.[0-9]+)(?m)\.[a-zA-Z0-9]*([tT]ag)=(\S+/)*(?Pv?\d+.\d+.\d+[-\w]*)(\x00|\x{FFFD})(.L)?(?Pv?(\d+\.\d+\.\d+[-\w]*[+\w]*))\x00Unable to parse the following `license` value in package-lock.jsonfailed to decode poetry lock package dependencies for %s; skipping(?m)^https://.*\.alpinelinux\.org/alpine/v([^/]+)/([a-zA-Z0-9_]+)$the type %T must be a pointer to register as an untyped conversionIf non-empty, use this log file (no effect when -logtostderr=true)If true, adds the file directory to the header of the log messagescommand must be specified for %v to use exec authentication pluginmove operation does not apply: doc is missing destination path: %scopy operation does not apply: doc is missing destination path: %sproto: CustomResourceDefinitionList: illegal tag %d (wire type %d)proto: CustomResourceDefinitionSpec: illegal tag %d (wire type %d)proto: JSONSchemaPropsOrStringArray: illegal tag %d (wire type %d)k8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1beta1.JSONexpected end of table array name delimiter ']', but got %q insteadInformation when was the last time the job successfully completed.Spec to control the desired behavior of daemon set rolling update.k8s.io.api.apps.v1.StatefulSetPersistentVolumeClaimRetentionPolicyproto: StatefulSetUpdateStrategy: wiretype end group for non-groupreplicas is the number of observed instances of the scaled object.k8s.io.api.apps.v1beta1.DeploymentRollback.UpdatedAnnotationsEntryIngress is a list containing ingress points for the load-balancer.IngressPortStatus represents the error condition of a service portproto: IngressLoadBalancerStatus: wiretype end group for non-grouppermissions for root owned files should be u=rw,g=r (0640) or lessPodDisruptionBudgetSpec is a description of a PodDisruptionBudget.proto: PodDisruptionBudgetStatus: wiretype end group for non-groupreplicas is the desired number of instances for the scaled object.acquired package info from found wordpress plugin PHP source filesxmlns="http://www.garmin.com/xmlschemas/TrainingCenterDatabase/v2"ssh: certificates cannot be used as authority (public key type %q)last data directory entry is a reserved field, must be set to zeromaximum parent recursive depth (%v) reached resolving property: %vinternal error: expected cumul[s.symbolLen] (%d) == tableSize (%d)k8s.io.api.admissionregistration.v1.ValidatingWebhookConfigurationproto: MutatingWebhookConfiguration: illegal tag %d (wire type %d)proto: ValidatingAdmissionPolicy: wiretype end group for non-groupk8s.io.api.admissionregistration.v1beta1.ValidatingAdmissionPolicySubresource is one of the existing resource types. "" means none.proto: SubjectAccessReviewStatus: wiretype end group for non-groupproto: CertificateSigningRequest: wiretype end group for non-groupproto: PodCertificateRequestList: wiretype end group for non-groupproto: PodCertificateRequestSpec: wiretype end group for non-groupk8s.io.api.certificates.v1beta1.CertificateSigningRequestConditionk8s.io.api.flowcontrol.v1beta1.PriorityLevelConfigurationConditionk8s.io.api.flowcontrol.v1beta1.PriorityLevelConfigurationReferencek8s.io.api.flowcontrol.v1beta2.PriorityLevelConfigurationConditionk8s.io.api.flowcontrol.v1beta2.PriorityLevelConfigurationReferencek8s.io.api.flowcontrol.v1beta3.PriorityLevelConfigurationConditionk8s.io.api.flowcontrol.v1beta3.PriorityLevelConfigurationReferenceingress is a list containing ingress points for the load-balancer.DeviceConstraint must have exactly one field set besides Requests.ExactDeviceRequest is a request for one or more identical devices.proto: OpaqueDeviceConfiguration: wiretype end group for non-groupproto: ResourceClaimTemplateList: wiretype end group for non-groupproto: ResourceClaimTemplateSpec: wiretype end group for non-groupk8s.io.api.resource.v1beta1.DeviceCounterConsumption.CountersEntryk8s.io.api.resource.v1beta2.DeviceCounterConsumption.CountersEntryproto: VolumeAttributesClassList: wiretype end group for non-groupk8s.io.api.storagemigration.v1alpha1.StorageVersionMigrationStatusGo struct field %s has malformed value for `format` tag option: %vpkcs7: signing time %q is outside of certificate validity %q to %qJSON uses a colon as its name/value delimiter, not an equals sign.A comma must appear between each property definition in an object.not a valid RFC3339 timestamp: minute must have exactly two digitsnot enough arguments for %q at %d: need index %d but have %d total $ cx hooks pre-commit secrets-update-git-hook The show command provides a list of all the predicates in the issueHelp provides help for any command in the application. Simply type tls: server sent certificate containing RSA key larger than %d bitsFailed to generate SPNEGO token. Please check if the SPN is correctResolution Path is not valid or could not create .checkmarx folder. SKIP=cx-secret-detection git commit -m "" x509: internal error: supported public key does not implement Equalcrypto/cipher: invalid buffer overlap of output and additional datasuccessfully analyzed image: %s, found %d packages. image paths: %sServer retry pushback specified multiple values (%q); not retrying.Could not calculate indices for image %s at line %d, using fallbackKDC_ERR_PRINCIPAL_NOT_UNIQUE Multiple principal entries in databasemessage ID does not indicate a KRB_AP_REP. Expected: %v; Actual: %vtransport: cannot send secure credentials on an insecure connectiondelegating_resolver: unable to build the resolver for target %s: %vrelease %s failed, and has been uninstalled due to atomic being set^([1-9][0-9]*)\.(0|[1-9][0-9]*)(\.(0|[1-9][0-9]*))?([a-z]+[0-9]+)?$invalid field: %v: unsupported type for opaque repeated message: %vfield %v with invalid Mutable call on field with non-composite typeList holds a list of objects, which may not be known by the server.Status is a return value for calls that don't return other objects.k8s.io.apimachinery.pkg.apis.meta.v1.LabelSelector.MatchLabelsEntryConfigMapList is a resource containing a list of ConfigMap objects.DaemonEndpoint contains information about a single Daemon endpoint.options is Optional: this field holds extra command options if any.Custom headers to set in the request. HTTP allows repeated headers.PersistentVolumeClaimList is a list of PersistentVolumeClaim items.ServiceProxyOptions is the query options to a Service's proxy call.Represents storage that is managed by an external CSI volume driverNodeSystemInfo is a set of ids/uuids to uniquely identify the node.proto: FlexPersistentVolumeSource: wiretype end group for non-groupproto: GCEPersistentDiskVolumeSource: illegal tag %d (wire type %d)proto: NodeRuntimeHandlerFeatures: wiretype end group for non-groupproto: PersistentVolumeClaimTemplate: illegal tag %d (wire type %d)proto: ScaleIOPersistentVolumeSource: illegal tag %d (wire type %d)proto: ServiceAccountTokenProjection: illegal tag %d (wire type %d)proto: VolumeResourceRequirements: wiretype end group for non-groupproto: WindowsSecurityContextOptions: illegal tag %d (wire type %d)huggingface-cli login --token hf_jCBaQngSHiHDRYOcsMcifUcysGyaiybUWzhuggingface-cli login --token hf_KjHtiLyXDyXamXujmipxOfhajAhRQCYngehuggingface-cli login --token hf_HFSdHWnCsgDeFZNvexOHLySoJgJGmXRbTDhuggingface-cli login --token hf_QJPYADbNZNWUpZuQJgcVJxsXPBEFmgWkQKhuggingface-cli login --token hf_JVLnWsLuipZsuUNkPnMRtXfFZSscORRUHchuggingface-cli login --token hf_xfXcJrqTuKxvvlQEjPHFBxKKJiFHJmBVkchuggingface-cli login --token hf_xnnhBfiSzMCACKWZfqsyNWunwUrTGpgIgAhuggingface-cli login --token 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"access_token1": "xoxs-3206092076-3204538285-3743137121-836b042620""access_token4": "xoxs-4829527689-4829527691-4814341714-d0346ec616"could not find a method called %s on the implementation of RawBytes%q requires API version %s, but the Docker daemon API version is %sunix://%s/Library/Containers/com.docker.docker/Data/docker.raw.sockjava manifest %q: unable to split java manifest key-value pairs: %qrust cataloger: unable to read dependency information (file=%q): %vproto: CustomResourceDefinitionNames: illegal tag %d (wire type %d)proto: CustomResourceSubresources: wiretype end group for non-groupincompatible types: TOML value has type %s; destination has type %sk8s.io.apimachinery.pkg.apis.meta.v1beta1.PartialObjectMetadataListproto: IngressLoadBalancerIngress: wiretype end group for non-groupproto: ContainerResourceMetricSource: illegal tag %d (wire type %d)proto: ContainerResourceMetricStatus: illegal tag %d (wire type %d)proto: wrong wireType = %d for field TargetCPUUtilizationPercentageproto: HorizontalPodAutoscalerStatus: illegal tag %d (wire type %d)The name that uniquely identifies this user among all active users.unable to get fingerprint of source directory metadata path=%s: %+verror verifying %s checksum after reading %d bytes; got %q, want %qk8s.io.api.admissionregistration.v1.ValidatingAdmissionPolicyStatusproto: ValidatingAdmissionPolicyList: illegal tag %d (wire type %d)proto: ValidatingAdmissionPolicySpec: illegal tag %d (wire type %d)k8s.io.api.admissionregistration.v1alpha1.ValidatingAdmissionPolicyproto: SelfSubjectRulesReviewSpec: wiretype end group for non-groupk8s.io.api.authorization.v1beta1.SubjectAccessReviewSpec.ExtraEntryk8s.io.api.certificates.v1.CertificateSigningRequestSpec.ExtraEntryproto: CertificateSigningRequestList: illegal tag %d (wire type %d)proto: CertificateSigningRequestSpec: illegal tag %d (wire type %d)EndpointConditions represents the current condition of an endpoint.QueuingConfiguration holds the configuration parameters for queuingproto: PriorityLevelConfiguration: wiretype end group for non-groupIngressLoadBalancerStatus represents the status of a load-balancer.IngressServiceBackend references a Kubernetes Service as a Backend.CELDeviceSelector contains a CEL expression for selecting a device.DeviceAllocationConfiguration gets embedded in an AllocationResult.proto: CapacityRequestPolicyRange: wiretype end group for non-groupproto: DeviceAllocationConfiguration: illegal tag %d (wire type %d)proto: DeviceRequestAllocationResult: illegal tag %d (wire type %d)nodeName represents the node that the volume should be attached to.VolumeAttachmentStatus is the status of a VolumeAttachment request.The latest available observations of the migration's current state.proto: StorageVersionMigrationStatus: illegal tag %d (wire type %d)expected 3 fields in first SCRAM-SHA-256 server message, got %d: %qBUG: consumeArray must be called with a buffer that starts with '['unexported Go struct field %s cannot have non-ignored `json:%q` tag"~" or "^" statement must have a reference defined at the beginningThe 'true' tuple has length %d, but the 'false' tuple has length %dExpected the start of an expression, but found the end of the file.The \u escape sequence must be followed by four hexadecimal digits.returned value %#v does not conform to expected return type %#v: %sReturns true if the two given values are equal, or false otherwise.Returns false if the two given values are equal, or true otherwise.not a valid RFC3339 timestamp: missing required time introducer 'T'no Route in WebService with path %s was found to match URL path:%s $ cx hooks pre-commit secrets-install-git-hook Install the pre-commit hook for secret detection in your repository.reflect: reflect.Value.UnsafePointer on an invalid notinheap pointerAllThreadsSyscall6 results differ between threads; runtime corruptedFailed to find flag %q and mark it as being required in a flag groupcode-repository-url must be set when code-repository-username is setpadding bytes must all be zeros unless AllowIllegalWrites is enabledhttp2: Transport conn %p received error from processing frame %v: %vhttp2: Transport received unsolicited DATA frame; closing connectionhttp: message cannot contain multiple Content-Length headers; got %qtls: internal error: sending non-handshake message to QUIC transportcrypto/hmac: hash generation function does not produce unique valuesFailed to generate SPNEGO token. Please check Kerberos configurationexpected SCALAR, SEQUENCE-START, MAPPING-START, or ALIAS, but got %vcan not look up shorthand which is more than one ASCII character: %qCould not extract images with line info from docker compose file: %shttps://download.checkmarx.com/vorpal-binary/vorpal_linux_x64.tar.gzembedded IPv4 address must replace the final 2 fields of the address2695994666715063979466701508701963067355791626002630814351006629888126959946667150639794667015087019625940457807714424391721682722368061crypto/rsa: only crypto/rand.Reader is allowed in FIPS 140-only modebig: invalid 2nd argument to Int.Jacobi: need odd integer but got %scould not get PAData from KRBError to generate key from password: %vno user credentials available and error getting any existing sessionstrict mode: fields in the document are missing in the target structinvalid retry throttling config: tokenRatio (%v) may not be negativedecoding int array or slice: length exceeds input size (%d elements)expected a JSON struct with one entry; received entry %v at index %ddelegating_resolver: failed to determine proxy URL for target %s: %vCLOJARS_34bf0e88955ff5a1c328d6a7491acc4f48e865a7b8dd4d70a70749037443invalid descriptor: using edition features in a proto with syntax %sextension %v does not implement protoreflect.ExtensionTypeDescriptor%s - retry-reason: due to server-side throttling, FlowSchema UID: %q(brief) machine readable reason for the condition's last transition.PersistentVolumeStatus is the current status of a persistent volume.PodAttachOptions is the query options to a Pod's remote attach call.The last time the condition transitioned from one status to another.optional field specify whether the Secret or its key must be definedPodCondition contains details for the current condition of this pod.ScaleIOPersistentVolumeSource represents a persistent ScaleIO volumeproto: ISCSIPersistentVolumeSource: wiretype end group for non-groupproto: wrong wireType = %d for field TargetVolumeAttributesClassNameproto: PersistentVolumeClaimCondition: illegal tag %d (wire type %d)proto: PersistentVolumeClaimStatus: wiretype end group for non-groupproto: PodExtendedResourceClaimStatus: illegal tag %d (wire type %d)proto: ReplicationControllerCondition: illegal tag %d (wire type %d)proto: ReplicationControllerStatus: wiretype end group for non-groupproto: VsphereVirtualDiskVolumeSource: illegal tag %d (wire type %d)https://github.com/xoxa-nyc/xoxa-nyc.github.io/blob/master/README.md"access_token2": "xoxs-416843729158-132049654-5609968301-e708ba56e1"byte stream does not indicate a RPC Type serialization of version %vunable to resolve rootfs mounts without snapshotter on container: %w%v. * Are you trying to connect to a TLS-enabled daemon without TLS?cataloger failed to extract rust Cargo.lock metadata for package %+vformat specified by archive filename is not a walker format: %s (%T)comma-separated list of pattern=N settings for file-filtered loggingLog line format: [IWEF]mmdd hh:mm:ss.uuuuuu threadid file:line] msg Illegal HTTP2_PING_TIMEOUT_SECONDS(%q): %v. Default value %d is usedinvalid warning header: code segment is not 3 digits between 100-299proto: CustomResourceColumnDefinition: illegal tag %d (wire type %d)proto: CustomResourceDefinitionStatus: illegal tag %d (wire type %d)proto: CustomResourceSubresourceScale: illegal tag %d (wire type %d)The schedule in Cron format, see https://en.wikipedia.org/wiki/Cron.An update strategy to replace existing DaemonSet pods with new pods.IngressBackend describes all endpoints for a given service and port.Hostname is set for load-balancer ingress points that are DNS based.pq: Could not detect default username. Please provide one explicitlycustom type: type: %v, does not implement the proto.custom interfaceproto: CrossVersionObjectReference: wiretype end group for non-groupproto: HorizontalPodAutoscalerList: wiretype end group for non-groupproto: HorizontalPodAutoscalerSpec: wiretype end group for non-groupproto: wrong wireType = %d for field CurrentCPUUtilizationPercentageExpirationTimestamp is the time of expiration of the returned token.TokenReviewStatus is the result of the token authentication request.Signature: need to call Sign, SignUserId or SignKey before Serializeunable to convert relationship type to CycloneDX JSON, dropping: %#vgithub.com/containerd/containerd/api/services/events/v1/events.protoFileAlignment lesser than 0x200 and different from section alignmentdamaged Import Table information. ILT and/or IAT appear to be brokenno project variable resolution context provided for expression: '%s'z.currentBuffer too large (most likely due to concurrent Write race)k8s.io.api.admissionregistration.v1.MutatingWebhookConfigurationListk8s.io.api.admissionregistration.v1.ValidatingAdmissionPolicyBindingproto: ValidatingWebhookConfiguration: illegal tag %d (wire type %d)proto: MutatingAdmissionPolicyBinding: illegal tag %d (wire type %d)proto: MutatingAdmissionPolicyList: wiretype end group for non-groupproto: MutatingAdmissionPolicySpec: wiretype end group for non-groupk8s.io.api.admissionregistration.v1beta1.MutatingAdmissionPolicyListk8s.io.api.admissionregistration.v1beta1.MutatingAdmissionPolicySpecproto: SelfSubjectAccessReviewSpec: wiretype end group for non-groupClusterTrustBundleList is a collection of ClusterTrustBundle objectsproto: PodCertificateRequestStatus: wiretype end group for non-groupproto: PriorityLevelConfigurationList: illegal tag %d (wire type %d)proto: PriorityLevelConfigurationSpec: illegal tag %d (wire type %d)IngressClassSpec provides information about the class of an Ingress.hostname is set for load-balancer ingress points that are DNS based.proto: ResourceClaimConsumerReference: illegal tag %d (wire type %d)VolumeError captures an error encountered during a volume operation.k8s.io.api.storage.v1.VolumeAttachmentStatus.AttachmentMetadataEntryproto: StorageVersionMigrationList: wiretype end group for non-groupproto: StorageVersionMigrationSpec: wiretype end group for non-groupcbor: cannot create DecMode with TagSet when TagsMd is TagsForbiddencannot decode CBOR array to struct with different number of elementscbor: cannot create EncMode with TagSet when TagsMd is TagsForbiddenunsupported replacement type encountered within replacement path: %vBUG: consumeObject must be called with a buffer that starts with '{'BUG: reformatArray must be called with a buffer that starts with '['Go struct field %s cannot have both `inline` and `unknown` specifiedThe given key does not identify an element in this collection value.A null value cannot be used as the collection in a 'for' expression.Backslash must be followed by an escape sequence selector character.The \U escape sequence must be followed by eight hexadecimal digits.The if directive at %s is missing its corresponding endif directive.A colon must appear between an object property's name and its value.A JSON object is required here, to specify %s labels for this block.k8s.io.api.admission.v1beta1.AdmissionResponse.AuditAnnotationsEntryReturns the given number raised to the given power (exponentiation).invalid date format verb %q: day of month must either be "D" or "DD"The scan command enables the ability to manage scans in Checkmarx OneCollects telemetry data for user interactions related to AI features.Error: --proxy-auth-type kerberos-native is only supported on Windowsreflect: embedded interface with unexported method(s) not implementedruntime.Pinner: found leaking pinned pointer; forgot to call Unpin()?application association polling - waiting for associating to completeRealTime installation exists. Checking if it is the latest version...http2: Transport closing idle conn %p (forSingleUse=%v, maxStream=%v)%s matches more methods than %s, but has a more specific path pattern%s matches fewer methods than %s, but has a more general path patterntls: peer doesn't support the certificate custom signature algorithmstls: handshake message of length %d bytes exceeds maximum of %d byteskey exchange requested but not supported (NTLMSSP_NEGOTIATE_KEY_EXCH)too many hex fields to fit an embedded IPv4 at the end of the addresscrypto/ecdh: only crypto/rand.Reader is allowed in FIPS 140-only modePodman configuration not found, continuing without Podman credentialsExtracted image name: %s, tag: %s from Docker/Podman archive manifestFound same package id with different types: %v. Selecting first type.KDC_ERR_MUST_USE_USER2USER Server principal valid for user2user onlydecoding bool array or slice: length exceeds input size (%d elements)decoding int8 array or slice: length exceeds input size (%d elements)decoding uint array or slice: length exceeds input size (%d elements)invalid toolchain version '%s': must match format go1.23.0 or default"{ \"access-key\": \"6da89121079f83b2eb6acccf8219ea982c3d79bccc\", }"edwards25519: internal error: setShortBytes called with a long stringmax allowable directory traversal depth reached (maybe a link cycle?)no registry credentials configured for %q, using the default keychain'%s': expected source data to have length less or equal to %d, got %dwarning: destination for %s is a table. Ignoring non-table value (%v)EnvFromSource represents the source of a set of ConfigMaps or SecretsReplicationControllerList is a collection of replication controllers.Specifies the output format of the exposed resources, defaults to "1"optional field specify whether the Secret or its keys must be definedproto: AzureFilePersistentVolumeSource: illegal tag %d (wire type %d)proto: CephFSPersistentVolumeSource: wiretype end group for non-groupproto: CinderPersistentVolumeSource: wiretype end group for non-groupproto: ClusterTrustBundleProjection: wiretype end group for non-groupproto: ContainerRestartRuleOnExitCodes: illegal tag %d (wire type %d)proto: GlusterfsPersistentVolumeSource: illegal tag %d (wire type %d)proto: wrong wireType = %d for field CurrentVolumeAttributesClassNameproto: StorageOSPersistentVolumeSource: illegal tag %d (wire type %d)an error on the server (%q) has prevented the request from succeeding " hf_token = \"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\"\n",could not establish actual count of uni-dimensional varying array: %vcould not read offset of uni-dimensional conformant varying array: %vjson format is not supported for specification versions lower than %sReturned when a client attempts to contact a service too many timescould not find the number of exported 'number of names' attribute: %wapiVersion must be specified for %v to use exec authentication pluginproto: CustomResourceDefinitionList: wiretype end group for non-groupproto: CustomResourceDefinitionSpec: wiretype end group for non-groupproto: CustomResourceDefinitionVersion: illegal tag %d (wire type %d)proto: CustomResourceSubresourceStatus: illegal tag %d (wire type %d)proto: JSONSchemaPropsOrStringArray: wiretype end group for non-groupRolling update config params. Present only if type = "RollingUpdate".replicas is the number of Pods created by the StatefulSet controller.permissions for files not owned by root should be u=rw (0600) or lessrandomstringutils illegal argument: The chars array must not be emptyTokenReviewSpec is a description of the token authentication request.unable to convert relationship toPkg to CycloneDX JSON, dropping: %#vinvalid relocation information. Base Relocation SizeOfBlock too largemaximum depth reached attempting to resolve version for: %s:%s at: %v^(?:https|http|git)://(?:github|gitlab)\.com/(?P[\w\-]*?)/.*$internal error: %d > %d, maxheader: %d, sl: %d, tl: %d, normcount: %vValidatingAdmissionPolicyList is a list of ValidatingAdmissionPolicy.proto: MutatingWebhookConfiguration: wiretype end group for non-groupproto: ValidatingAdmissionPolicyStatus: illegal tag %d (wire type %d)Specification of the desired behavior of the MutatingAdmissionPolicy.k8s.io.api.admissionregistration.v1alpha1.MutatingAdmissionPolicyListk8s.io.api.admissionregistration.v1alpha1.MutatingAdmissionPolicySpeck8s.io.api.admissionregistration.v1beta1.MutatingWebhookConfigurationproto: HorizontalPodAutoscalerBehavior: illegal tag %d (wire type %d)proto: CertificateSigningRequestStatus: illegal tag %d (wire type %d)FlowDistinguisherMethod specifies the method of a flow distinguisher.`kind` indicates which one of the other fields is non-empty. Requiredproto: IngressClassParametersReference: illegal tag %d (wire type %d)CSIStorageCapacityList is a collection of CSIStorageCapacity objects.BUG: reformatObject must be called with a buffer that starts with '{'^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$^[0-9a-f]{8}-[0-9a-f]{4}-5[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$The true and false result expressions must have consistent types. %s.The condition value is null. Conditions must either be true or false.A comma is required to separate each function argument from the next.For expression requires the 'in' keyword after its name declarations.A JSON object is required here, setting the arguments for this block.A JSON object is required here, to define arguments and child blocks.Allowed indicates whether or not the admission request was permitted.heap profile: *(\d+): *(\d+) *\[ *(\d+): *(\d+) *\] @ fragmentationz?Returns a list of the keys of the given map in lexicographical order.Returns a string containing a JSON representation of the given value.Returns true if and only if the second number is less than the first. $ cx hooks pre-commit secrets-uninstall-git-hook Update the pre-commit hook for secret detection to the latest version.Run a real-time scan to detect secrets in your code before committing.the specified directory path does not exist. Please check the path: %sName of the container engine to run IaC-Realtime. (ex. docker, podman)sync/atomic: compare and swap of inconsistently typed value into Valuebytes.Buffer: UnreadByte: previous operation was not a successful readpolling application until project association done or timeout of 2 minhttps://checkmarx.com/resource/documents/en/34965-68653-utils.html Absolute path to the folder that contains the file(s) to be remediatedgot %s for stream %d; expected CONTINUATION following %s for stream %dUser does not have the required license for AI-assisted functionality.crypto/ecdsa: only crypto/rand.Reader is allowed in FIPS 140-only modecrypto/ed25519: use of Ed25519ctx is not allowed in FIPS 140-only modex509: PKCS#8 wrapping contained private key with unknown algorithm: %vx509: certificate relies on legacy Common Name field, use SANs insteadToNearestEvenToNearestAwayToZeroAwayFromZeroToNegativeInfToPositiveInfblockingPicker: the picked transport is not ready, loop back to repickinvalid retry throttling config: maxTokens (%v) out of range (0, 1000]decoding int16 array or slice: length exceeds input size (%d elements)decoding int32 array or slice: length exceeds input size (%d elements)decoding int64 array or slice: length exceeds input size (%d elements)error comparing document schema version with parser schema version: %wtarball must contain only a single image to be used with tarball.Imageconsider using cmpopts.EquateComparable to compare comparable Go typesWARNING: unresolved URN reference ignored; using permissive schema: %sNodeDaemonEndpoints lists ports opened by daemons running on the Node.ResourceQuota sets aggregate quota restrictions enforced per namespaceResourceQuotaStatus defines the enforced hard limits and observed use.GMSACredentialSpecName is the name of the GMSA credential spec to use.ServiceSpec describes the attributes that a user creates on a service.sessionAffinityConfig contains the configurations of session affinity.k8s.io.api.core.v1.PersistentVolumeClaimStatus.AllocatedResourcesEntryproto: AWSElasticBlockStoreVolumeSource: illegal tag %d (wire type %d)proto: ContainerExtendedResourceRequest: illegal tag %d (wire type %d)proto: GCEPersistentDiskVolumeSource: wiretype end group for non-groupproto: PersistentVolumeClaimTemplate: wiretype end group for non-groupproto: PhotonPersistentDiskVolumeSource: illegal tag %d (wire type %d)proto: ScaleIOPersistentVolumeSource: wiretype end group for non-groupproto: ServiceAccountTokenProjection: wiretype end group for non-groupproto: TopologySelectorLabelRequirement: illegal tag %d (wire type %d)proto: WindowsSecurityContextOptions: wiretype end group for non-group(?i)(?:^|[^0-9])([0-9]{5,16}:A[a-zA-Z0-9_\-]{34})(?:$|[^a-zA-Z0-9_\-])current process state: %s, process must be stopped before deletion: %wunable to fetch descriptor (%s) which reports content size of zero: %wThe access controller denied access for the operation on a resource.proto: CustomResourceDefinitionNames: wiretype end group for non-groupexpected a comma or an inline table terminator '}', but got %s insteadInformation when was the last time the job was successfully scheduled.PodFailurePolicy describes how failed pods influence the backoffLimit.The deployment strategy to use to replace existing pods with new ones.proto: RollingUpdateStatefulSetStrategy: illegal tag %d (wire type %d)Filler.Funcs: customFuncs' second argument must be a randfill.Continuek8s.io.api.policy.v1beta1.PodDisruptionBudgetStatus.DisruptedPodsEntryproto: ContainerResourceMetricSource: wiretype end group for non-groupproto: ContainerResourceMetricStatus: wiretype end group for non-groupproto: HorizontalPodAutoscalerCondition: illegal tag %d (wire type %d)proto: HorizontalPodAutoscalerStatus: wiretype end group for non-group^(?P[^<>()]*)( <(?P[^@]+@\w+\.\w+)>)?( \((?P.*)\))?$github.com/containerd/containerd/api/services/content/v1/content.protoPseudo Language Pseudo Locale Used For Localization Testing (qps-ploc)expected ListMeta protobuf field tag to be "bytes,1,opt,name=metadata"k8s.io.api.admissionregistration.v1.ValidatingWebhookConfigurationListproto: MutatingWebhookConfigurationList: illegal tag %d (wire type %d)proto: ValidatingAdmissionPolicyBinding: illegal tag %d (wire type %d)proto: ValidatingAdmissionPolicyList: wiretype end group for non-groupproto: ValidatingAdmissionPolicySpec: wiretype end group for non-groupVariable is the definition of a variable that is used for composition.k8s.io.api.admissionregistration.v1beta1.ValidatingAdmissionPolicyListk8s.io.api.admissionregistration.v1beta1.ValidatingAdmissionPolicySpecSpec is an empty spec. It is here to comply with Kubernetes API style.Reason is optional. It indicates why a request was allowed or denied.MetricIdentifier defines the name and optionally selector for a metricproto: CertificateSigningRequestList: wiretype end group for non-groupproto: CertificateSigningRequestSpec: wiretype end group for non-groupEndpoint represents a single logical "backend" implementing a service.proto: ExemptPriorityLevelConfiguration: illegal tag %d (wire type %d)proto: PriorityLevelConfigurationStatus: illegal tag %d (wire type %d)The taint value corresponding to the taint key. Must be a label value.Resource is the type of resource being referenced, for example "pods".proto: DeviceAllocationConfiguration: wiretype end group for non-groupproto: DeviceRequestAllocationResult: wiretype end group for non-groupproto: StorageVersionMigrationStatus: wiretype end group for non-groupGo struct field %s has `format` tag option that was not specified lastcreateDir func cannot be nil if file needs to be opened in create modemalformed shallow hash: wrong length, expected 40 bytes, read %d bytesThe given key does not identify an element in this collection value.%shcl 'block' tag kind cannot be applied to %s field %s: struct requiredThe for directive at %s is missing its corresponding endfor directive.Single quotes are not valid. Use double quotes (") to enclose strings.length of keys must equal length of values when MatchAnyValue is falsecannot call Value.Mark with a ValueMarks value (use WithMarks instead)invalid date format verb %q: month must be "M", "MM", "MMM", or "MMMM"not a valid RFC3339 timestamp: hour must be between 0 and 23 inclusiveexec: command with a non-nil Cancel was not created with CommandContext$ cx auth register -u -p -r ast-admin,ast-scannerDisplay detailed information about the pre-commit commands and options.Skip policy evaluation. Requires override-policy-management permission.unable to generate %s report - SCA engine did not complete successfullyName in the $PATH for the container engine to run kics. Example:podman.range function recovered a loop body panic and did not resume panickingtoo many concurrent operations on a single file or socket (max 1048575)if any flags in the group [%v] are set they must all be set; missing %vjson: invalid use of ,string struct tag, trying to unmarshal %q into %vA PR couldn't be created for this scan because it is still in progress.To remediate package files vulnerabilities detected by the sca engine tls: peer doesn't support any of the certificate's signature algorithmsdynamic table size update MUST occur at the beginning of a header blockcrypto/ecdsa: use of custom curves is not allowed in FIPS 140-only modex509: issuer has name constraints but leaf doesn't have a SAN extensionclient krb5 config does not have any defined KDCs for the default realmtransport: set send compressor called after headers sent or stream donegrpc: error unmarshalling service config %s due to methodConfig[%d]: %vdecoding string array or slice: length exceeds input size (%d elements)decoding uint16 array or slice: length exceeds input size (%d elements)decoding uint32 array or slice: length exceeds input size (%d elements)decoding uint64 array or slice: length exceeds input size (%d elements)toml: cannot redefine table %s that has already been explicitly definedchart requires kubeVersion: %s which is incompatible with Kubernetes %sreplacement module must match format 'path version', not 'path@version'unknown color model: 4-component JPEG doesn't have Adobe APP14 metadatastrict validation requires the full repository path (missing 'library')image has unexpected OS %q, which differs from the user specified PS %qGetOptions is the standard query options to the standard REST get call.Unique, one-word, CamelCase reason for the condition's last transition.NamespaceStatus is information about the current status of a Namespace.Human readable message indicating why this entry was added to the list.ResourceQuotaSpec defines the desired hard limits to enforce for Quota.volumeDevices is the list of block devices to be used by the container.proto: PersistentVolumeClaimCondition: wiretype end group for non-groupproto: PersistentVolumeClaimVolumeSource: illegal tag %d (wire type %d)proto: PodExtendedResourceClaimStatus: wiretype end group for non-groupproto: ReplicationControllerCondition: wiretype end group for non-groupproto: ScopedResourceSelectorRequirement: illegal tag %d (wire type %d)proto: VsphereVirtualDiskVolumeSource: wiretype end group for non-group"project_path:my-group/my-project:ref_type:branch:ref:feature-branch-1"could not fill index %d of uni-dimensional conformant varying array: %vapplication/vnd.openxmlformats-officedocument.wordprocessingml.document(?m)\x00(?P[0-9]+\.[0-9]+\.[0-9]+(-[0-9]+(\.[0-9]+)?\.beta)?) (?:[._-](?P(\d.*|(build\d+.*)|(rc?\d+(?:^[[:alpha:]].*)?))))?$k8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1.ValidationRuleproto: CustomResourceColumnDefinition: wiretype end group for non-groupproto: CustomResourceDefinitionCondition: illegal tag %d (wire type %d)proto: CustomResourceDefinitionStatus: wiretype end group for non-groupproto: CustomResourceSubresourceScale: wiretype end group for non-groupk8s.io.api.apps.v1beta1.StatefulSetPersistentVolumeClaimRetentionPolicyk8s.io.api.apps.v1beta2.StatefulSetPersistentVolumeClaimRetentionPolicy^_?[a-z0-9]([-_a-z0-9]*[a-z0-9])?(\._?[a-z0-9]([-_a-z0-9]*[a-z0-9])?)*$insert statements must have at least one set of values or select clause%v.%s cannot be a pointer to a interface or a slice of interface values%T.%s cannot be a pointer to a interface or a slice of interface valuesFiller.Funcs: customFuncs' first argument must be a pointer or map typecontainer is the name of the container in the pods of the scaling tagetunable to convert relationship fromPkg to CycloneDX JSON, dropping: %#v[A-Za-z][A-Za-z0-9]*(?:[-_+.][A-Za-z][A-Za-z0-9]*)*[:][[:xdigit:]]{32,}unmarshal: TOML array length (%v) exceeds destination array length (%v)RVA of IMAGE_BOUND_IMPORT_DESCRIPTOR points to an invalid address: 0x%xSpecification of the desired behavior of the ValidatingAdmissionPolicy.proto: ValidatingWebhookConfiguration: wiretype end group for non-groupk8s.io.api.admissionregistration.v1alpha1.ValidatingAdmissionPolicyListk8s.io.api.admissionregistration.v1alpha1.ValidatingAdmissionPolicySpecproto: MutatingAdmissionPolicyBinding: wiretype end group for non-groupk8s.io.api.admissionregistration.v1beta1.MutatingAdmissionPolicyBindingk8s.io.api.admissionregistration.v1beta1.ValidatingWebhookConfigurationHorizontalPodAutoscaler is a list of horizontal pod autoscaler objects.FlowSchemaSpec describes how the FlowSchema's specification looks like.proto: LimitedPriorityLevelConfiguration: illegal tag %d (wire type %d)proto: PriorityLevelConfigurationList: wiretype end group for non-groupproto: PriorityLevelConfigurationSpec: wiretype end group for non-groupproto: ResourceClaimConsumerReference: wiretype end group for non-groupproto: wrong wireType = %d for field NodeAllocatableUpdatePeriodSecondscbor: cannot set TagsMd to TagsForbidden when TimeTag is EncTagRequiredresource with name %s does not match a config with the following GVK %vINVALIDBOOLINT64FLOAT64STRINGBOOLSLICEINT64SLICEFLOAT64SLICESTRINGSLICEfinishParsingForExpr called without peeker pointing to 'for' identifierExpecting an endfor directive corresponding to the for directive at %s.k8s.io.api.imagepolicy.v1alpha1.ImageReviewStatus.AuditAnnotationsEntryinvalid date format verb %q: day of week must either be "EEE" or "EEEE"catalog: message argument %d is complete and blocks subsequent messagesLicense for pre-receive secret detection has been validated successfullyUninstall the pre-commit hook for secret detection from your repository.Specify the ID of the states that you would like to apply to this resultList of container images to scan, ex: manuelbcd/vulnapp:latest,debian:10Enable or disable project private package. Available options: true,falseThe URL of the repo that you are scanning with scs (for scorecard scans)reflect: embedded type with methods not implemented for non-pointer typeruntime.Goexit called in a thread that was not created by the Go runtimeFailed to find flag %q and mark it as being in a one-required flag groupTo remediate package files vulnerabilities detected by the kics engine client doesn't support any cipher suites compatible with the certificatetls: server's certificate contains an unsupported type of public key: %Tcrypto/rsa: use of multi-prime keys is not allowed in FIPS 140-only modegrpc: Server.RegisterService found duplicate service registration for %qerrgroup: modify limit while %v goroutines in the group are still activepossible replay attack, nonce in response does not match that in requestaddresses listed in the AS_REP does not match those listed in the AS_REQdecoding float32 array or slice: length exceeds input size (%d elements)decoding float64 array or slice: length exceeds input size (%d elements)decoding uintptr array or slice: length exceeds input size (%d elements) can only be decoded from remote interface type; received concrete type document has schema version %s, but parser has older schema version (%s)https://situmops:$(github_token)@github.com/$(Build.Repository.Name).gitkey provided is not the correct type. Type needed: %d, type provided: %dresources contains the name of the resources and if they are namespaced.TableRowCondition allows a row to be marked with additional information.AEIOUaeiouBCDFGHJKLMNPQRSTVWXYZbcdfghjklmnpqrstvwxyz0123456789!@#$%^&*()Port number of the gRPC service. Number must be in the range 1 to 65535.readOnly Will force the ReadOnly setting in VolumeMounts. Default false.namespace defines the space within which the secret name must be unique.SessionAffinityConfig represents the configurations of session affinity.Required. A pod affinity term, associated with the corresponding weight.Pod volumes to mount into the container's filesystem. Cannot be updated.The time at which the most recent occurrence of this event was recorded.proto: AzureFilePersistentVolumeSource: wiretype end group for non-groupproto: ContainerRestartRuleOnExitCodes: wiretype end group for non-groupproto: GlusterfsPersistentVolumeSource: wiretype end group for non-groupproto: StorageOSPersistentVolumeSource: wiretype end group for non-group"bot_token1": "xoxb-781236542736-2364535789652-GkwFDQoHqzXDVsC6GzqYUypD"Cannot connect to the Docker daemon at %s. Is the docker daemon running?oci layout must contain only a single image to be used with layout.Image(?m)ruby (?P[0-9]+\.[0-9]+\.[0-9]+((p|preview|rc|dev)[0-9]*)?) www.gnu.org/prep/maintain/html_node/license-notices-for-other-files.htmlrequesting uid, groups or user-extra for %v without impersonating a userelements of the items field of UnstructuredList must be encoded as a mapk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1.JSONSchemaPropsk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1.SelectableFieldk8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1/generated.protoproto: CustomResourceDefinitionVersion: wiretype end group for non-groupproto: CustomResourceSubresourceStatus: wiretype end group for non-group%v accessor error: %v is of the type %T, expected map[string]interface{}DeploymentStrategy describes how to replace existing pods with new ones.DeploymentStatus is the most recently observed status of the Deployment.The revision to rollback to. If set to 0, rollback to the last revision.replias is the actual number of observed instances of the scaled object.Ports provides information about the ports exposed by this LoadBalancer.k8s.io.api.extensions.v1beta1.DeploymentRollback.UpdatedAnnotationsEntryinvalid json.Token; it has been voided by a subsequent json.Decoder callTokenRequestSpec contains client provided parameters of a token request.Authenticated indicates that the token was associated with a known user.invalid repository name (%s), cannot specify 64-byte hexadecimal stringsMongolian (Traditional Mongolian) People's Republic Of China (mn-MongCN)k8s.io.api.admissionregistration.v1.ValidatingAdmissionPolicyBindingListk8s.io.api.admissionregistration.v1.ValidatingAdmissionPolicyBindingSpecproto: ValidatingAdmissionPolicyStatus: wiretype end group for non-groupproto: ValidatingWebhookConfigurationList: illegal tag %d (wire type %d)k8s.io.api.admissionregistration.v1alpha1.MutatingAdmissionPolicyBindingproto: MutatingAdmissionPolicyBindingList: illegal tag %d (wire type %d)proto: MutatingAdmissionPolicyBindingSpec: illegal tag %d (wire type %d)k8s.io.api.admissionregistration.v1beta1.ValidatingAdmissionPolicyStatuscontainer is the name of the container in the pods of the scaling targetproto: HorizontalPodAutoscalerBehavior: wiretype end group for non-groupproto: CertificateSigningRequestCondition: illegal tag %d (wire type %d)proto: CertificateSigningRequestStatus: wiretype end group for non-grouppodUID is the UID of the pod into which the certificate will be mounted.k8s.io.api.certificates.v1beta1.CertificateSigningRequestSpec.ExtraEntryports provides information about the ports exposed by this LoadBalancer.proto: IngressClassParametersReference: wiretype end group for non-groupNetworkData contains network-related information specific to the device.VolumeAttachmentSpec is the specification of a VolumeAttachment request.allowVolumeExpansion shows whether the storage class allow volume expandcbor: invalid DefaultByteStringType: %s is not of kind string or []uint8invalid value %q for setRoleBindingSubjects: must be one of %q, %q or %qBUG: flattened list of fields mismatches fields mapped by name: %d != %d%s: %s, error found in #%v byte of ...|%s|..., bigger context ...|%s|...crypto/fips140: FIPS 140-3 mode enabled, but integrity check didn't passThe given key does not identify an element in this collection value: %s.Expected a newline or comma to mark the beginning of the next attribute.Index brackets must contain either a literal number or a literal string.JSON does not permit a trailing comma after the final value in an array.list path element must contain fieldName=fieldValue for element to matchonly structs, pointers, maps and slices are supported for setting valuesReturns true if and only if the second number is greater than the first.Removes one or more newline characters from the end of the given string.Removes the given prefix from the start of the given string, if present.Removes the given suffix from the start of the given string, if present.invalid regexp pattern: cannot mix both named and unnamed capture groupsSending message to ChatGPT model for %s guided remediation. RequestID: %sFailed showing the predicate. Vulnerabilities are required for SCA triageunable to generate %s report - SCA engine must be enabled on scan summarySwagger folder/file filter for API-Security scan. Example: ./swagger.jsonEnable or disable exploitable path in scan. Available options: true,falseDirectory is empty or all files are filtered out, adding placeholder fileThe SARIF results were successfully imported into project %s importID: %stls: received unexpected handshake message of type %T when waiting for %Ttls: internal error: handshake returned an error but is marked successfultls: found a certificate rather than a key in the PEM for the private keygo package net: GODEBUG=netdns contains an invalid dns mode, ignoring it Proxy authentication failed. Check SPN and proxy keytab/KDC configurationhttps://schemastore.azurewebsites.net/schemas/json/sarif-2.1.0-rtm.5.jsoncannot login, no user credentials available and no valid existing sessionReceived a RST_STREAM frame with code %q, but found no mapped gRPC statusinvalid token given: only alphanumeric characters and hyphens are allowedIgnoring resolver error because balancer is using a previous good update.object does not implement the common interface for accessing the SelfLinkThe IP protocol for this port. Must be UDP, TCP, or SCTP. Default is TCP.Pod anti affinity is a group of inter pod anti affinity scheduling rules.PodTemplate describes a template for creating copies of a predefined pod.clientIP contains the configurations of Client IP based session affinity.List of environment variables to set in the container. Cannot be updated.chapAuthSession defines whether support iSCSI Session CHAP authenticationproto: AWSElasticBlockStoreVolumeSource: wiretype end group for non-groupproto: ContainerExtendedResourceRequest: wiretype end group for non-groupproto: PhotonPersistentDiskVolumeSource: wiretype end group for non-groupproto: TopologySelectorLabelRequirement: wiretype end group for non-groupthe Size() value of %T was %d, but NestedMarshalTo wrote %d bytes to data"bot_token3": "xoxb-4614724432022-5152386766518-O5WzjWGLG0wcCm2WPrjEmnys""access_token5": "xoxs-155191149137-155868813314-338998331396-9f6d235915"application/vnd.openxmlformats-officedocument.presentationml.presentationcould not find the number of exported 'number of functions' attribute: %wlog to standard error as well as files (no effect when -logtostderr=true)authProvider cannot be provided in combination with an exec plugin for %sspecifying a root certificates file with the insecure flag is not allowedIllegal HTTP2_READ_IDLE_TIMEOUT_SECONDS(%q): %v. Default value %d is usedk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1.ConversionReviewk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1.ServiceReferenceDaemonSetCondition describes the state of a DaemonSet at a certain point.proto: RollingUpdateStatefulSetStrategy: wiretype end group for non-groupproto: wrong wireType = %d for field PersistentVolumeClaimRetentionPolicystringutils illegal argument: Minimum abbreviation width with offset is 7container is the name of the container in the pods of the scaling target.metricName is the name of a metric used for autoscaling in metric system.replicas is the actual number of observed instances of the scaled object.proto: HorizontalPodAutoscalerCondition: wiretype end group for non-groupWebhooks is a list of webhooks and the affected resources and operations.proto: MutatingWebhookConfigurationList: wiretype end group for non-groupproto: ValidatingAdmissionPolicyBinding: wiretype end group for non-groupApplyConfiguration defines the desired configuration values of an object.k8s.io.api.admissionregistration.v1alpha1.ValidatingAdmissionPolicyStatusk8s.io.api.admissionregistration.v1beta1.MutatingWebhookConfigurationListk8s.io.api.admissionregistration.v1beta1.ValidatingAdmissionPolicyBindingstatus contains the issued certificate, and a standard set of conditions.leaseTransitions is the number of transitions of a lease between holders.conditions contains information about the current status of the endpoint.eventTime is the time when this Event was first observed. It is required.proto: ExemptPriorityLevelConfiguration: wiretype end group for non-groupproto: PriorityLevelConfigurationCondition: illegal tag %d (wire type %d)proto: PriorityLevelConfigurationReference: illegal tag %d (wire type %d)proto: PriorityLevelConfigurationStatus: wiretype end group for non-groupNetworkPolicy describes what network traffic is allowed for a set of PodsShareID uniquely identifies an individual allocation share of the device.allowVolumeExpansion shows whether the storage class allow volume expand.k8s.io.api.storage.v1beta1.VolumeAttachmentStatus.AttachmentMetadataEntryNoneMapMapKeyMapValueSliceSliceElemArrayArrayElemStructStructFieldWalkLocExpected a closing brace to end the sequence, but found extra characters.%w %q: kernel version has dot(s) followed by non-digit in version section https://checkmarx.com/resource/documents/en/34965-68627-auth.html Sending message to Azure AI model for %s guided remediation. RequestID: %sThe user question is: '<|IAC_QUESTION_START|>' "%s" '<|IAC_QUESTION_END|>' https://checkmarx.com/resource/documents/en/34965-68643-scan.html https://checkmarx.com/resource/documents/en/34965-67042-checkmarx-one.htmlERROR: Kerberos SPN is required for windows native kerberos authenticationError: Kerberos SPN is required for windows native kerberos authentication| Policy | Rule | Break Build | |:----------:|:------------:|:---------:| bytes.Buffer: UnreadRune: previous operation was not a successful ReadRune if [[ -z "${BASH_VERSION:-}" || "${BASH_VERSINFO[0]:-}" -gt 3 ]]; thenPath to the import file (sarif file or zip archive containing sarif files)RealTime installation already exists and is up to date. Skipping download.malformed response from server: malformed non-numeric status pseudo headernet/http: server replied with more than declared Content-Length; truncatedtls: certificate RSA key size too small for supported signature algorithmsAddAttrs unsafely called on copy of Record made without using Record.Clonecrypto/rand: failed to read random data (see https://go.dev/issue/66821): set SKIP=cx-secret-detection && git commit -m "" crypto/rsa: use of keys with odd size is not allowed in FIPS 140-only modegcm: internal error: using generic implementation despite hardware supportAS Exchange Error: AS_REP is not valid or client password/keytab incorrectstate not instantiated, please use discordgo.New() or assign Session.StateKDC FAST negotiation response error, could not unmarshal PA_REQ_ENC_PA_REPaddresses listed in the TGS_REP does not match those listed in the TGS_REQdecoding complex64 array or slice: length exceeds input size (%d elements)unable to merge location metadata: conflicting values for key=%q: %q != %qreplacement directory appears to be Windows path (on a non-windows system)-----BEGIN PRIVATE KEY BLOCK----- anything -----END PRIVATE KEY BLOCK-----permessage-deflate; server_no_context_takeover; client_no_context_takeoverSubConn %p reported connectivity state READY. Registering health listener.APIResource specifies the name of a resource and whether it is namespaced.DevicePath represents the device path where the volume should be availableContainerResizePolicy represents resource resize policy for the container.Represents an ephemeral volume that is handled by a normal storage driver.Used is the current observed total usage of the resource in the namespace.volumeDevice describes a mapping of a raw block device within a container.ContainerStatus contains details for the current status of this container.secretRef is the CHAP Secret for iSCSI target and initiator authenticationproto: PersistentVolumeClaimVolumeSource: wiretype end group for non-groupproto: ScopedResourceSelectorRequirement: wiretype end group for non-groupno kind %q is registered for the internal version of group %q in scheme %qcannot convert RawExtension with unrecognized content type to unstructuredunable to convert object type %T to Unstructured, must be a runtime.Object(https?:\/\/)?hooks.slack.com\/(services|workflows)\/[A-Za-z0-9+\/]{43,46}(?m)c (?P[0-9]+(\.[0-9]+)?(\.[0-9]+)) \(\w+ \d{4}\-\d{2}\-\d{2}\)Unable to create semantic version from portable executable file version %ssqlite driver is not available, newer RPM databases might not be catalogedSBOM cataloger reader is not a ReadSeeker, reading entire SBOM into memoryinteractiveMode must be specified for %v to use exec authentication plugink8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1.ConversionRequestk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1.WebhookConversionproto: CustomResourceDefinitionCondition: wiretype end group for non-group with an optional DNS subdomain prefix and '/' (e.g. 'example.com/MyName')BoundObjectReference is a reference to an object that a token is bound to.github.com/containerd/containerd/api/services/snapshots/v1/snapshots.protogithub.com/containerd/containerd/api/services/streaming/v1/streaming.protounknown number base: %s. possible options are x (hex) o (octal) b (binary)could not add key or sub-table to exist inline table or its sub-table : %soptional header size(%d) is less minimum size (%d) of PE32 optional headerPE image got a PointerToSymbolTable but no string in the COFF string tableRich header found: 3 leading padding DWORDs not found after DanS signatureprovided data does not appear to be a protobuf message, expected prefix %vproto: ValidatingAdmissionPolicyBindingList: illegal tag %d (wire type %d)proto: ValidatingAdmissionPolicyBindingSpec: illegal tag %d (wire type %d)Mutation specifies the CEL expression which is used to apply the Mutation.k8s.io.api.admissionregistration.v1alpha1.ValidatingAdmissionPolicyBindingAllowed is required. True if the action would be allowed, false otherwise.PodCertificateRequestList is a collection of PodCertificateRequest objectspodName is the name of the pod into which the certificate will be mounted.serviceAccountUID is the UID of the service account the pod is running as.`namespace` is the namespace of matching ServiceAccount objects. Required.proto: LimitedPriorityLevelConfiguration: wiretype end group for non-groupk8s.io.api.resource.v1.DeviceRequestAllocationResult.ConsumedCapacityEntryVolumeNodeResources is a set of resource limits for scheduling of volumes.k8s.io.api.storage.v1alpha1.VolumeAttachmentStatus.AttachmentMetadataEntryStorageVersionMigrationList is a collection of storage version migrations.min %d items required to match contains schema, but matched %d items at %vmax %d items required to match contains schema, but matched %d items at %vinvalid command and capabilities line length: expected at least %d, got %dinvalid session key length for cipher: got %d bytes, but expected %d bytesA value of type %s cannot be used as the collection in a 'for' expression.Splat expressions (with the * symbol) cannot be applied to null sequences.The argument %q was already set at %s. Each argument may be set only once.number value contains big.Float value %s, rather than pointer to big.Floatnplurals=3; plural=n==1 ? 0 : (n==0 || (n%100 > 0 && n%100 < 20)) ? 1 : 2; See 'cx utils env' for the list of supported environment variables The 'triage' command enables the ability to manage results in Checkmarx OneThe project command enables the ability to manage projects in Checkmarx One $ cx scan logs --scan-id --scan-type %[2]s is a special command that is used by the shell completion logic %[1]s https://checkmarx.com/resource/documents/en/34965-68653-utils.html Unsolicited response received on idle HTTP channel starting with %q; err=%vtls: internal error: attempted to read record with pending application dataTGS Exchange Error: kerberos error response from KDC when requesting for %sFailed to cast syft package type: %s into SupportedPackageManagerPrefixTypefailed to open tar file %s: %w. Make sure the file exists and is accessiblePAData does not contain PA EType Info data. TypeID Expected: %v; Actual: %vdecoding complex128 array or slice: length exceeds input size (%d elements)header list size to send violates the maximum size (%d bytes) set by serverHeader list size to send violates the maximum size (%d bytes) set by clientmongodb+srv://radar:mytoken@io.dbb.mongodb.net/?retryWrites=true&w=majoritypassword bW9jLmxpYW1nQGhjaW5pbW1pay5ucmVvamI=access_key_FOR_X_SERVICES kgfur834kmjfdoi34i9client_vpn_endpoint_id = aws_ec2_client_vpn_endpoint.client-vpn-endpoint.id)(?:[0-9a-z\-_\t .]{0,20})(?:<\/key>\s{0,10}[0-9]+\.[0-9]+\.[0-9]+(\+[0-9]+)?([-._a-zA-Z0-9]+)?)\x00(?m)go(?P[0-9]+\.[0-9]+(\.[0-9]+|beta[0-9]+|alpha[0-9]+|rc[0-9]+)?)(?m)/src/otp_src_(?P[0-9]+\.[0-9]+(\.[0-9]+){0,2}(-rc[0-9])?)/erts/env variable name must be specified for %v to use exec authentication plugincan't add TLS certificate callback: transport.Config.TLS.GetCert already setk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1.WebhookClientConfigk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1beta1.ValidationRuleproto: PodFailurePolicyOnExitCodesRequirement: illegal tag %d (wire type %d)proto: PodFailurePolicyOnPodConditionsPattern: illegal tag %d (wire type %d)ReplicaSetCondition describes the state of a replica set at a certain point.Represents the latest available observations of a DaemonSet's current state.github.com/containerd/containerd/api/services/containers/v1/containers.protooptional header size(%d) is less minimum size (%d) for PE32+ optional headerSpecification of the desired behavior of the MutatingAdmissionPolicyBinding.k8s.io.api.admissionregistration.v1alpha1.MutatingAdmissionPolicyBindingListk8s.io.api.admissionregistration.v1alpha1.MutatingAdmissionPolicyBindingSpecNonResourceRule holds information that describes a rule for the non-resourceserviceAccountName is the name of the service account the pod is running as.ForNode provides information about which nodes should consume this endpoint.ForZone provides information about which zones should consume this endpoint.PriorityLevelConfiguration represents the configuration of a priority level.PriorityLevelConfigurationCondition defines the condition of priority level.proto: PriorityLevelConfigurationCondition: wiretype end group for non-groupproto: PriorityLevelConfigurationReference: wiretype end group for non-groupEach selector must be satisfied by a device which is claimed via this class.persistentVolumeName represents the name of the persistent volume to attach.support for parsing v5 entities is disabled; build with `-tags v5` if needednon-empty IncludeNewlinesStack after parse with %d calls unaccounted for: %sJSON does not permit a trailing comma after the final property in an object.Divides the first given number by the second and then returns the remainder.The update command enables the ability to triage the results in Checkmarx One https://checkmarx.com/resource/documents/en/34965-68634-project.html https://checkmarx.com/resource/documents/en/34965-68640-results.html %s

Value: %s
Excepted value: %sSpecify files and folders to be included or excluded from scans, ex: "!*.log"Exclude packages by package name or file path using regex, ex: "^internal-.*"invalid value for --branch-primary flag. This flag is sent without any valuesMapIter.Next called on an iterator that does not have an associated map Valueinvalid function signature for %s: second return value should be error; is %scrypto/tls: ExportKeyingMaterial is unavailable when renegotiation is enabledonly NTLM v2 is supported, but server requested v1 (NTLMSSP_NEGOTIATE_LM_KEY)failed to communicate with KDC. Attempts made with UDP (%v) and then TCP (%v)failed to communicate with KDC. Attempts made with TCP (%v) and then UDP (%v)failed to read index.json from OCI archive: %w. The tar file may be corruptedgrpc: credentials.Bundle may not be used with individual TransportCredentialsClientConn's authority from transport creds %q and dial option %q don't matchSName in response does not match what was requested. Requested: %v; Reply: %vPAData does not contain PA EType Info 2 data. TypeID Expected: %v; Actual: %vmatching key not found in keytab. Looking for %q realm: %v kvno: %v etype: %vrelationship mapping to key %s is not a valid artifact.Identifiable type: %+vAPI Version list given outside of client only mode, this list will be ignoredGOOGLE_APP_ID 1:407966239993:ios:0d7534f14f8cfe19zip read limit hit (potential decompression bomb attack): copied %v, limit %vunexpected error when reading response body. Please retry. Original error: %wCondition error code for a component. For example, a health check error code.The name of the extended resource in that container which gets backed by DRA.Namespace provides a scope for Names. Use of multiple namespaces is optional.Version of the schema the FieldPath is written in terms of, defaults to "v1".ResourceStatus represents the status of a single resource allocated to a Pod.storagePolicyName is the storage Policy Based Management (SPBM) profile name.Name of the controller that emitted this Event, e.g. `kubernetes.io/kubelet`.chapAuthDiscovery defines whether support iSCSI Discovery CHAP authenticationFeatures describes the set of features implemented by the CRI implementation.volume is a string that references an already created Quobyte volume by name.k8s.io.api.core.v1.PersistentVolumeClaimStatus.AllocatedResourceStatusesEntrythe server was unable to respond with a content type that the client supportsthe server has received too many requests and has asked us to try again laterDEV=1 HF_TOKEN=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 poetry run python app.pyhttps://hooks.slack.com/services/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cannot connect to the Docker daemon. Is 'docker daemon' running on this host?must not specify both a container spec and a plugin spec in the task templateUnable to create semantic version from portable executable product version %sk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaPropsk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1beta1.SelectableFieldk8s.io/apiextensions-apiserver/pkg/apis/apiextensions/v1beta1/generated.protoStatefulSetCondition describes the state of a statefulset at a certain point.Represents the latest available observations of a deployment's current state.IngressTLS describes the transport layer security associated with an Ingress.observedGeneration is the most recent generation observed by this autoscaler.local maven repository is not a readable directory, stopping local resolutionlen(z.currentBuffer) > z.blockSize (most likely due to concurrent Write race)proto: ValidatingAdmissionPolicyBindingList: wiretype end group for non-groupproto: ValidatingAdmissionPolicyBindingSpec: wiretype end group for non-groupk8s.io.api.admissionregistration.v1beta1.ValidatingAdmissionPolicyBindingListk8s.io.api.admissionregistration.v1beta1.ValidatingAdmissionPolicyBindingSpecNonResourceAttributes describes information for a non-resource access requestcurrentMetrics is the last read state of the metrics used by this autoscaler.`name` is the username that matches, or "*" to match all usernames. Required.IngressTLS describes the transport layer security associated with an ingress.DeviceClaimConfiguration is used for configuration parameters in DeviceClaim.DeviceRequestAllocationResult contains the allocation result for one request.PluginRestrictionsUnknownPluginRestrictionsBuiltinsOnlyPluginRestrictionsNoneassociative list key type path elements must have at least one key (got zero) An object only supports looking up attributes by name, not by numeric index.Cannot include one of the interpolation results into the string template: %s.Returns the first of the given sequences that has a length greater than zero.Returns true if the given set contains the given element, or false otherwise.Returns the given string with all of its Unicode characters in reverse order.Sending message to Checkmarx AI model for %s guided remediation. RequestID: %sPolicy violations aren't returned in the pipeline for scans run in async mode.reflect: embedded type with methods not implemented if type is not first fieldrange function continued iteration after function for loop body returned falseFailed to find flag %q and mark it as being in a mutually exclusive flag groupContainers Realtime scan is not available (feature flag disabled or error: %v)pattern %q (registered at %s) conflicts with pattern %q (registered at %s): %s 1. Remove detected secrets from files and store them securely. Options: 115792089210356248762697446949407573530086143415290314195533631308867097853951115792089210356248762697446949407573529996955224135760342422259061068512044369crypto/rsa: use of PKCS#1 v1.5 encryption is not allowed in FIPS 140-only modex509: signature check attempts limit reached while verifying certificate chainCRealm in response does not match what was requested. Requested: %s; Reply: %sSRealm in response does not match what was requested. Requested: %s; Reply: %shttps://raw.githubusercontent.com/anchore/syft/main/schema/json/schema-%s.jsontransport: http2Server.HandleStreams failed to read initial settings frame: %vWARNING: The Kubernetes server has an orphaned API service. Server reports: %sfiletree Merge failed to remove children for non-directory upper node (%s): %wconsider using filters to ensure at most one Comparer or Transformer may applyRootPaths lists the paths available at root. For example: "/healthz", "/apis".LimitRangeSpec defines a min/max usage limit for resources that match on kind.PersistentVolumeClaim is a user's request for and claim to a persistent volumestoragePool is the ScaleIO Storage Pool associated with the protection domain.projected items for all in one resources secrets, configmaps, and downward API{"crv":"X25519","kty":"OKP","x":"Tx9qG69ZfodhRos-8qfhTPc6ZFnNUcgNDVdHqX1UR3s"}{"kty":"OKP","crv":"X25519","x":"RfXdxTfIzilWBzWWX3ovHBDzgDcLNy0BFJWSxa0dqnw"}magic incorrect. probably not reading squashfs archive or archive is corruptedpush access denied, repository does not exist or may require authorization: %wpull access denied, repository does not exist or may require authorization: %w(?m)(?P[0-9]+\.[0-9]+(\.|-dev)[0-9]+)-[0-9a-zA-Z]{7}.+HAProxy version\x00(?P[0-9]+\.[0-9]+\.[0-9]+)\x00(\x1b\[1m\x00|\x00\x00)?(%s)?Fluentitems field of UnstructuredList must be encoded as an array or null if presentk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1.ExternalDocumentationk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1.JSONSchemaPropsOrBoolk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1beta1.ConversionReviewk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1beta1.ServiceReferenceCould not parse '%s' as a hexadecimal number, but the lexer claims it's OK: %sDeploymentSpec is the specification of the desired behavior of the Deployment.Represents the latest available observations of a replica set's current state.Represents the latest available observations of a statefulset's current state.ssh: principal %q not in the set of valid principals for given certificate: %qssh: unable to authenticate, attempted methods %v, no supported methods remainssh: internal error: algorithmSignerWrapper invoked with non-default algorithmRVA AddressOfNames in the export directory points to an invalid address: 0x%x ExpressionWarning is a warning information that targets a specific expression.Specification of the desired behavior of the ValidatingAdmissionPolicyBinding.Validation specifies the CEL expression which is used to apply the validation.k8s.io.api.admissionregistration.v1alpha1.ValidatingAdmissionPolicyBindingListk8s.io.api.admissionregistration.v1alpha1.ValidatingAdmissionPolicyBindingSpectype represents whether the metric type is Utilization, Value, or AverageValuemessage contains a human readable message with details about the request statetargetRef is a reference to a Kubernetes object that represents this endpoint.hints contains information associated with how an endpoint should be consumed.podFixed represents the fixed resource overhead associated with running a pod.An iteration result is null. Cannot include a null value in a string template.Either a quoted string block label or an opening brace ("{") is expected here.AdmissionRequest describes the admission.Attributes for the admission request.unequal references - self: %sreferenced by: %s --- other: %sreferenced by: %s can't take hash of value that has marks or has embedded values that have marksargument %d has length %d, which is inconsistent with argument %d of length %dError: License validation failed. Please verify your CxOne license includes %s.an error occurred while accessing the directory path. Please check the path: %sSingle container scan triggered: compressing only the container resolution fileInvalid value for --sca-exploitable-path flag. The value must be true or false.When using client-id and client-secret please provide base-uri or base-auth-uricannot convert slice with length %y to array or pointer to array with length %x{{with .DisplayName}}{{printf "%s " .}}{{end}}{{printf "version %s" .Version}} https://checkmarx.com/resource/documents/en/34965-68630-configure.html tls: client certificate private key of type %T does not implement crypto.SignerFailed to load Kerberos configuration. Please check the krb5 configuration filecannot manually encode TypeXHeader, TypeGNULongName, or TypeGNULongLink headersAS Exchange Error: failed setting AS_REQ PAData for pre-authentication requiredSPNEGO cannot be marshalled. It contains neither a NegTokenInit or NegTokenResplocal datetimes are expected to have the format YYYY-MM-DDTHH:MM:SS[.NNNNNNNNN]toml: type %s implementing the TextMarshaler interface cannot be a root elementCName in response does not match what was requested. Requested: %+v; Reply: %+vrelationship mapping from key %s is not a valid artifact.Identifiable type: %+vmetadata: FromOutgoingContext got an odd number of input pairs for metadata: %duninstall: given cascade value: %s, defaulting to delete propagation backgroundunable to create any package-file relationships for package name=%q type=%q: %vkind is the kind for the resource (e.g. 'Foo' is the kind for a resource 'foo')LimitRange sets resource usage limits for each kind of resource in a Namespace.UID is the primary uid initially attached to the first process in the containerGID is the primary gid initially attached to the first process in the containerNodeList is the whole list of all Nodes which have been registered with master.Data is a bit array containing all allocated addresses in the previous segment.ReplicationController represents the configuration of a replication controller.WindowsSecurityContextOptions contain Windows-specific options and credentials.message is the human-readable message indicating details about last transition.volumeName is the binding reference to the PersistentVolume backing this claim.PersistentVolumeClaimStatus is the current status of a persistent volume claim.Redirect the standard input stream of the pod for this call. Defaults to false.ey[a-zA-Z0-9]{17,}\.ey[a-zA-Z0-9\/\\_-]{17,}\.(?:[a-zA-Z0-9\/\\_-]{10,}={0,2})?https://docs.google.com/document/d/1W7KCxOxP-1Fy5EyF2lbJGE2WuKmu5v0suYqoHas1jRM"access_token": "xoxa-2-511111111-31111111111-3111111111111-e039d02840a0b9379c"Cannot connect to the Docker daemon. Is the docker daemon running on this host?**/{var/lib,usr/share,usr/lib/sysimage}/rpm/{Packages,Packages.db,rpmdb.sqlite}more than one authentication method found for %v; found %v, only one is allowedk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1.JSONSchemaPropsOrArrayk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1beta1.ConversionRequestproto: PodFailurePolicyOnExitCodesRequirement: wiretype end group for non-groupproto: PodFailurePolicyOnPodConditionsPattern: wiretype end group for non-group^[A-Za-z0-9][A-Za-z0-9!#$&^_.+-]{0,126}/[A-Za-z0-9][A-Za-z0-9!#$&^_.+-]{0,126}$message is a human-readable explanation containing details about the transitionunexpected status code %d %s (HEAD responses have no body, use GET for details)ValidatingWebhookConfigurationList is a list of ValidatingWebhookConfiguration.MutatingAdmissionPolicyBindingList is a list of MutatingAdmissionPolicyBinding.If request was approved, the controller will place the issued certificate here.UID information about the requesting user. See user.Info interface for details.`status` is the status of the condition. Can be True, False, Unknown. Required.`message` is a human-readable message indicating details about last transition.PriorityLevelConfigurationList is a list of PriorityLevelConfiguration objects.PriorityLevelConfigurationSpec specifies the configuration of a priority level.Status describes whether the claim is ready to use and what has been allocated.ResourceClaimTemplateSpec contains the metadata and fields for a ResourceClaim.k8s.io.api.resource.v1beta1.DeviceRequestAllocationResult.ConsumedCapacityEntryk8s.io.api.resource.v1beta2.DeviceRequestAllocationResult.ConsumedCapacityEntrylzma: header dictionary size %[2]d exceeds configured dictionary capacity %[1]dResource is the fully-qualified resource being requested (for example, v1.pods)heap profile: *(\d+): *(\d+) *\[ *(\d+): *(\d+) *\] *@ *(heap[_a-z0-9]*)/?(\d*)Adds a given number of spaces after each newline character in the given string.provided application does not exist or user has no permission to the applicationThe utils command enables the ability to perform Checkmarx One utility functionsxml: end tag in namespace %s does not match start tag <%s> in namespace %shttp: RoundTripper implementation (%T) returned a nil *Response with a nil errorbug: unexpected way for two patterns %s and %s to conflict: methods %s, paths %stls: either ServerName or InsecureSkipVerify must be specified in the tls.Configx509: invalid signature: parent certificate cannot sign this kind of certificatecrypto/ecdh: internal error: nistec ScalarBaseMult failed for a fixed-size inputcrypto/rand: blocked for 60 seconds waiting to read random data from the kernel %q is an invalid component of %q: platform specifier component must match %q: %w"client_id" : "0afae57f3ccfd9d7f5767067bc48b30f719e271ba470488056e37ab35d4b6506"filetree Merge failed to find original upperPath for whiteout (upperPath=%s): %wTableColumnDefinition contains information about a column returned in the Table.Name of the scheduling gate. Each scheduling gate must have a unique name field.Kernel Version reported by the node from 'uname -r' (e.g. 3.16.0-0.bpo.4-amd64).serviceAccountToken is information about the serviceAccountToken data to projectthe server responded with the status code %d but did not return more informationDouble registration of different types for %v: old=%v.%v, new=%v.%v in scheme %qconst api_org_controller = require('../../controllers/api/index').organizations;could not establish actual count of uni-dimensional conformant varying array: %verror removing temporary file after encountering an error while writing blob: %v(?m)go(?P[0-9]+\.[0-9]+(\.[0-9]+|beta[0-9]+|alpha[0-9]+|rc[0-9]+)?)\x00encountered pack.pl file without a name and/or version field, ignoring (path=%q)If true, avoid headers when opening log files (no effect when -logtostderr=true)k8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1beta1.ConversionResponsefiles cannot contain NULL bytes; probably using UTF-16; TOML files must be UTF-8metricSelector is used to identify a specific time series within a given metric.SelfSubjectReviewStatus is filled by the kube-apiserver and sent back to a user.acquired package info from GitHub Actions workflow file or composite action filesize of data directories(%d) is inconsistent with number of data directories(%d)AuditAnnotation describes how to produce an audit annotation for an API request.SelfSubjectRulesReviewSpec defines the specification for SelfSubjectRulesReview.SubjectAccessReview checks whether or not a user or group can perform an action.count is the number of occurrences in this series up to the last heartbeat time.LimitResponse defines how to handle requests that can not be executed right now.The expanding argument (indicated by ...) must be of a tuple, list, or set type.The expression result is null. Cannot include a null value in a string template.An expression was successfully parsed, but extra characters were found after it.OldObject is the existing object. Only populated for DELETE and UPDATE requests.The patch body. Currently we only support "JSONPatch" which implements RFC 6902.Returns the greatest whole number that is less than or equal to the given value.nplurals=4; plural=(n%100==1 ? 0 : n%100==2 ? 1 : n%100==3 || n%100==4 ? 2 : 3);Add detected secrets to the ignore list so they won't be flagged in future scans. $ cx scan create --project-name -s Create a scan with the configurations used in the most recent scan in the projectInvalid value for threshold limit %s. Threshold should be greater or equal to 1. Please to use --sca-exploitable-path flag in SCA, you must enable SAST scan type. (bad use of unsafe.Pointer or having race conditions? try -d=checkptr or -race) if any flags in the group [%v] are set none of the others can be; %v were all setFailed to create Kerberos client. Please check your Kerberos tickets with 'klist'Proxy returned 407 after sending Negotiate token. Check SPN and proxy keytab/KDC.crypto/rsa: use of public exponent <= 2¹⁶ is not allowed in FIPS 140-only modecrypto/rsa: use of primes of different sizes is not allowed in FIPS 140-only modecrypto/aes: internal error: using generic implementation despite hardware supportFound image %s at line %d (will assign to ImageLocation.Line/StartIndex/EndIndex)no secret available in credentials to perform decryption of AS_REP encrypted partNote: this number might be smaller than expected due to commits with no additionsFieldsV1 holds the first JSON version format as described in the "FieldsV1" type.secretName is the name of secret that contains Azure Storage Account Name and KeyClientIPConfig represents the configurations of Client IP based session affinity.PodTemplateSpec describes the data a pod should have when created from a templateLoadBalancer contains the current status of the load-balancer, if one is present.devicePath is the path inside of the container that the device will be mapped to.readOnly here will force the ReadOnly setting in VolumeMounts. Defaults to false.Status of the config assigned to the node via the dynamic Kubelet config feature.The IP protocol for this port. Supports "TCP", "UDP", and "SCTP". Default is TCP.export BUNDLE_ENTERPRISE__CONTRIBSYS__COM=cafebabe:deadbeef && echo 'hello world'SUMO_ACCESS_KEY: gxq3rJQkS6qovOg9UY2Q70iH1jFZx0WBrrsiAYv4XHodogAwTKyLzvFK4neRN8Dkcould not determine selected union value field for %s with discriminat tag %s: %vcould not find a selection function called %s in the unions struct representation(?m)\x00(?P[0-9]+[.0-9]+[.0-9]+\+[0-9]+-jvmci-[0-9]+[.0-9]+-b[0-9]+)\x00(?m)@\(#\)Bash version (?P[0-9]+\.[0-9]+\.[0-9]+)\([0-9]\) [a-z0-9]+ GNUinvalid exclusion pattern(s): '%s' (must start with one of: './', '*/', or '**/')k8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1.CustomResourceConversionk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1.CustomResourceValidationk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1beta1.WebhookClientConfigJobTemplateSpec describes the data a Job should have when created from a templateThe number of pods which reached phase Failed. The value increases monotonically.currentAverageValue is the current value of metric averaged over autoscaled pods.The PE Optional Header size can not accommodate for the NumberOfRvaAndSizes fieldErrors when parsing: %+v for field %s by vendor extension handler %s. Details %+v`path` is an optional URL path which will be sent in any request to this service.Group information about the requesting user. See user.Info interface for details.Extra information about the requesting user. See user.Info interface for details.`name` is the name of the priority level configuration being referenced Required.spec represents the specification of the desired behavior for this NetworkPolicy.server SCRAM-SHA-256 nonce is not prefixed by client nonce: got %q, want %q+"...""**" is not a supported operator. Exponentiation is not supported as an operator.cannot store marked value directly in a set (make the set itself unknown instead)Returns true if and only if the second number is less than or equal to the first.CxOne API key is not available, ChatGPT model will be used for guided remediation.Scan executed in asynchronous mode or still running. Hence, no results generated. https://docs.checkmarx.com/en/34965-68625-checkmarx-one-cli-commands.html Invalid value for --project-private-package flag. The value must be true or false.refusing to use HTTP_PROXY value in CGI environment; see golang.org/s/cgihttpproxyx509: a root or intermediate certificate is not authorized to sign for this name: grpc: Server.RegisterService found the handler of type %v that does not satisfy %v(.*?)(jpg|gif|doc|docx|zip|xls|pdf|bin|svg|socket|vsidx|v2|suo|wsuo|.dll|pdb|exe)$received goaway with stream id: %v, which exceeds stream id of previous goaway: %vtransport: http2Server.HandleStreams failed to receive the preface from client: %v%s is a prerelease version and the constraint is only looking for release versionsAPIGroupList is a list of APIGroup, to allow clients to discover the API at /apis.secretName is the name of secret that contains Azure Storage Account Name and KeySource for the environment variable's value. Cannot be used if value is not empty.Command is the remote command to execute. argv array. Not executed within a shell.downwardAPI represents downward API about the pod that should populate this volume(?m)/usr/local/src/otp-(?P[0-9]+\.[0-9]+(\.[0-9]+){0,2}(-rc[0-9])?)/erts/could not retrieve symbols from binary: SHT_SYMTAB error: %v, SHT_DYNSYM error: %vIf non-empty, write log files in this directory (no effect when -logtostderr=true)IngressLoadBalancerIngress represents the status of a load-balancer ingress point.pq: Could not get owner information for private key, may not be properly protectedgithub.com/containerd/containerd/api/services/introspection/v1/introspection.protolink resolution resulted in multiple results while resolving content location: %+vNamedRuleWithOperations is a tuple of Operations and Resources with ResourceNames.CertificateSigningRequestList is a collection of CertificateSigningRequest objectsrenewTime is a time when the current holder of a lease has last updated the lease.ServiceAccountSubject holds detailed information for service-account-kind subject.Overhead structure represents the resource overhead associated with running a pod.Go struct field %s has invalid appearance of `%s` tag option; specify `%s` insteadinvalid character %q at start of option (expecting Unicode letter or single quote)A JSON value must start with a brace, a bracket, a number, a string, or a keyword.At least one object property is required, whose name represents the %s block's %s. https://docs.checkmarx.com/en/34965-68625-checkmarx-one-cli-commands.html reflect: embedded type with methods not implemented if there is more than one fieldexpected all size classes up to min size for malloc header to fit in one-page spansjson: invalid use of ,string struct tag, trying to unmarshal unquoted value into %vNote: dependabot is not counted but other bots might be considered as contributors.crypto/rsa: use of keys smaller than 2048 bits is not allowed in FIPS 140-only modex509: issuer has name constraints but leaf contains unknown or unconstrained name: (possibly because of %q while trying to verify candidate authority certificate %q)crypto/cipher: use of CBC with non-AES ciphers is not allowed in FIPS 140-only modecrypto/cipher: use of CTR with non-AES ciphers is not allowed in FIPS 140-only modecrypto/cipher: use of GCM with non-AES ciphers is not allowed in FIPS 140-only modecrypto/hmac: use of keys shorter than 112 bits is not allowed in FIPS 140-only modemethod configs in service config will be ignored due to presence of config selectorunable to parse metadata.namespace from kubernetes manifest for output logs hook %sglob provided is an expensive search, consider using a more specific indexed searchunable to fetch image size from containerd, progress will not be tracked accuratelyinvalid release name, must match regex %s and the length must not be longer than 53values don't meet the specifications of the schema(s) in the following chart(s): %sPartialObjectMetadataList contains a list of objects containing only their metadatacategories is a list of the grouped resources this resource belongs to (e.g. 'all')EndpointsList is a list of endpoints. Deprecated: This API is deprecated in v1.33+.ModifyVolumeStatus represents the status object of ControllerModifyVolume operationNodeRuntimeHandlerFeatures is a set of features implemented by the runtime handler.ConditionType refers to a condition in the pod's condition list with matching type.path is the path relative to the mount point of the file to project the token into.Data about the Event series this event represents or nil if it's a singleton Event.LimitRangeItem defines a min/max usage limit for any resource that matches on kind.A human readable message indicating details about why the pod is in this condition.proto: wrong wireType = %d for field RequiredDuringSchedulingIgnoredDuringExecution os.environ.get("HF_AUTH_TOKEN", "hf_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"),"token2": "xoxp-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXXX-XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX"the union select function did not return a string for the name of the field to fillk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1.CustomResourceSubresourcesk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1beta1.ExternalDocumentationk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaPropsOrBoolType of deployment. Can be "Recreate" or "RollingUpdate". Default is RollingUpdate.Type indicates the type of the StatefulSetUpdateStrategy. Default is RollingUpdate.ValidatingAdmissionPolicyBindingList is a list of ValidatingAdmissionPolicyBinding.ResourceAuthorizationAttributes describes information for a resource access requestdescribedObject specifies the descriptions of a object,such as kind,name apiVersionDescribedObject specifies the descriptions of a object,such as kind,name apiVersiontype of the condition. Known conditions include "Approved", "Denied", and "Failed".CounterSet is the name of the set from which the counters defined will be consumed.The 'true' value includes object attribute %q, which is absent in the 'false' valueThe 'false' value includes object attribute %q, which is absent in the 'true' valueStatus is filled in by the backend and indicates whether the pod should be allowed.Returns the smallest whole number that is greater than or equal to the given value. Policy Management Violation - Break Build Enabled: The create command enables the ability to create and run a new scan in Checkmarx Onetls: downgrade attempt detected, possibly due to a MitM attack or a broken middleboxResolve func parameters: scanPath=%s, resolutionFolderPath=%s, images=%s, isDebug=%t^Binary files (/dev/null|a/(.+)|"a/(.+)") and (/dev/null|b/(.+)|"b/(.+)") differ\s*$x509: signature algorithm specifies an %s public key, but have public key of type %Trealm in response ticket does not match what was requested. Requested: %s; Reply: %sCondition contains details for one aspect of the current state of this API Resource.Represents a source location of a volume to mount, managed by an external CSI driverVolumeResourceRequirements describes the storage resource requirements for a volume.AzureDisk represents an Azure Data Disk mount on the host and bind mount to the pod.The component reporting this event. Should be a short machine understandable string.proto: wrong wireType = %d for field PreferredDuringSchedulingIgnoredDuringExecution _kHMSymptomhf_generatedByHomeAppForDebuggingPurposesKey,sumo_access_key = "3Kof2VffNQ0QgYIhXUPJosVlCaQKm2hfpWE6F1fT9YGY74blQBIPsrkCcf1TwKE5"# SUMO_ACCESS_KEY=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxunable to find valid relationship mapping from SPDX, ignoring: (from: %+v) (to: %+v)(?m)(?P[0-9]+(\.[0-9]+)?(\.[0-9]+)?(alpha[0-9]|beta[0-9]|rc[0-9])?)-MariaDBk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaPropsOrArrayexpected a top-level item to end with a newline, comment, or EOF, but got %q insteadPartialObjectMetadataList contains a list of objects containing only their metadata.ObservedGeneration reflects the generation of the most recently observed ReplicaSet.Scheduling specifies the scheduling constraints for nodes supporting a RuntimeClass.Resources is a list of resources this rule applies to. '*' represents all resources.^(?:[A-Za-z0-9+\/]{4})*(?:[A-Za-z0-9+\/]{2}==|[A-Za-z0-9+\/]{3}=|[A-Za-z0-9+\/]{4})$^(?:(?P[^@]+)@)?(?P[^:\s]+):(?:(?P[0-9]{1,5}):)?(?P[^\\].*)$Returns the given value varbatim if it is non-null, or raises an error if it's null.Returns true if and only if the second number is greater than or equal to the first. $ cx triage get-states $ cx triage get-states --all Proxy authentication type (supported types: basic, ntlm, kerberos or kerberos-native)This flag sets the branch specified in --branch as the PRIMARY branch for the projectreflect.Value.Interface: cannot return value obtained from unexported field or methodcrypto/rsa: use of PSS salt longer than the hash is not allowed in FIPS 140-only modex509: failed to parse private key (use ParseECPrivateKey instead for this key format)attempt to delete child with id %d from a parent (id=%d) that doesn't currently exist"client_secret" : "6da89121079f83b2eb6acccf8219ea982c3d79bccc3e9c6a85856480661f8fde",invalid metadata name, must match regex %s and the length must not be longer than 253proto: wrong wireType = %d for field IgnoreStoreReadErrorWithClusterBreakingPotentiallastTransitionTime is the time the condition transitioned from one status to another.Represents the source of a volume to mount. Only one of its members may be specified.apiKey := "AGE-SECRET-KEY-1QQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQos.environ['HUGGINGFACEHUB_API_TOKEN'] = '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'Failed to validate. For rule ID [%s], false positive [%s] was detected by regexp [%s]SUMOLOGIC_ACCESSKEY: 9RITWb3I3kAnSyUolcVJq4gwM17JRnQK8ugRaixFfxkdSl8ys17ZtEL3LotESKB7(?m).*/mysql-(?P[0-9]+(\.[0-9]+)?(\.[0-9]+)?(alpha[0-9]|beta[0-9]|rc[0-9])?)k8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionListk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionSpeck8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1.JSONSchemaPropsOrStringArrayControllerRevisionList is a resource containing a list of ControllerRevision objects.Rolling update config params. Present only if DeploymentStrategyType = RollingUpdate.proto: StatefulSetPersistentVolumeClaimRetentionPolicy: illegal tag %d (wire type %d)Type of daemon set update. Can be "RollingUpdate" or "OnDelete". Default is OnDelete.randomstringutils illegal argument: Requested random string length %v is less than 0.currentReplicas is the current number of replicas of pods managed by this autoscaler.invalid relocation information. Base Relocation VirtualAddress is outside of PE ImageValidatingAdmissionPolicyStatus represents the status of a ValidatingAdmissionPolicy.Status is filled in by the server and indicates whether the request is allowed or not`reason` is a unique, one-word, CamelCase reason for the condition's last transition.`limitResponse` indicates what to do with requests that can not be executed right nowCapacityRequirements defines the capacity requirements for a specific device request.Go struct field %s cannot have any options other than `inline` or `unknown` specifiedA splat expression (*) cannot be used inside another attribute-only splat expression.Function selector must be followed by an open parenthesis to begin the function call. Did you mean to define argument %q? If so, use the equals sign to assign it a value.scope=openid&grant_type=password&username=%s&password=%s&client_id=%s&client_secret=%sScan creation failed due to queue capacity (attempt %d/%d). Waiting %v before retry...reflect: New of type that may not be allocated in heap (possibly undefined cgo C type) $ cx utils import --project-name --import-file-path tls: MinVersion must be >= VersionTLS13 if EncryptedClientHelloConfigList is populatedtls: MaxVersion must be >= VersionTLS13 if EncryptedClientHelloConfigList is populatedhttps://sca-downloads.s3.amazonaws.com/cli/latest/ScaResolver-linux64.tar.gz.sha256sumx509: a root or intermediate certificate is not authorized for an extended key usage: failed to parse index.json from OCI archive: %w. Make sure this is a valid OCI archiveSubchannel health check is unimplemented at server side, thus health check is disabledmatchExpressions is a list of label selector requirements. The requirements are ANDed.datasetUUID is the UUID of the dataset. This is unique identifier of a Flocker datasetName uniquely identifies this resource claim inside the pod. This must be a DNS_LABEL.sources is the list of volume projections. Each entry in this list handles one source.weight associated with matching the corresponding podAffinityTerm, in the range 1-100.Container image name. More info: https://kubernetes.io/docs/concepts/containers/imagesOS Image reported by the node from /etc/os-release (e.g. Debian GNU/Linux 7 (wheezy)).ReplicationControllerStatus represents the current status of a replication controller.sslEnabled is the flag to enable/disable SSL communication with Gateway, default false(?m)\x00(?P[0-9]+[.0-9]*)\x00+(?P[0-9]+[^\x00]+)\x00+openjdk\x00java(?m)version (?P[0-9]+\.[0-9]+(\.|-dev|-rc)[0-9]+)(-[a-z0-9]{7})?, released 20\x00(?P[0-9]+(\.[0-9]+)?(\.[0-9]+)?(alpha[0-9]|beta[0-9]|rc[0-9])?)\x00+mysqlunable to extract java metadata to check for matching package identity for package: %sno configuration has been provided, try setting KUBERNETES_MASTER environment variablek8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionNamesk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceConversionk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceValidationThe number of non-terminating pods targeted by this ReplicaSet with a Ready Condition.^[a-z0-9]+(?:(?:[._]|__|[-]*)[a-z0-9]+)*(?:/[a-z0-9]+(?:(?:[._]|__|[-]*)[a-z0-9]+)*)*$randomstringutils illegal argument: Parameter end (%v) must be greater than start (%v)desiredReplicas is the desired number of replicas of pods managed by this autoscaler.%w (Hint: try increasing the number of subordinate IDs in /etc/subuid and /etc/subgid)WebhookClientConfig contains the information to make a TLS connection with the webhookStatus is filled in by the server and indicates the set of actions a user can perform.PriorityLevelConfigurationStatus represents the current state of a "request-priority".AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRoleSpec describes what is being requested and how to configure it. The spec is immutable.^([a-zA-Z0-9_]{1}[a-zA-Z0-9_-]{0,62}){1}(\.[a-zA-Z0-9_]{1}[a-zA-Z0-9_-]{0,62})*[\._]?$"@" statement is not valid, could be : @{}, @{}Function scope resolution symbol :: must be followed by a function name in this scope.ParseStringLiteralToken can only be used with TokenStringLit and TokenQuotedLit tokensnplurals=3; plural=(n==1 ? 0 : n%10>=2 && n%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);Failed to authenticate - please provide client-id, client-secret and base-uri or apikeyThe pre-receive command is used for managing Git pre-receive hooks for secret detectionThe project create command enables the ability to create a new project in Checkmarx OnePath to Kerberos credential cache (optional, default uses KRB5CCNAME env or OS default)Accepts a scan-id and scan type (sast, iac-security) and downloads the related scan logInvalid value for --sca-last-sast-scan-time flag. The value must be a positive integer.--container-images flag error: file '%s' is compressed, use non-compressed format (tar)failed to open OCI archive tar file %s: %w. Make sure the file exists and is accessibleThe image is incompatible with the scanning tool. A Linux/AMD64 version is required. %s\bFROM\s+(?:--platform=[^\s]+\s+)?([^\s:@]+)(?::([^\s@]+))?(@sha256:[a-fA-F0-9]{64})?\b(?i)-----BEGIN[ A-Z0-9_-]{0,100}PRIVATE KEY(?: BLOCK)?-----[\s\S-]*?KEY(?: BLOCK)?-----AzureFile represents an Azure File Service mount on the host and bind mount to the pod.NodeConfigStatus describes the status of the config assigned by Node.Spec.ConfigSource.Weight associated with matching the corresponding nodeSelectorTerm, in the range 1-100.Default resource requirement limit value by resource name if resource limit is omitted.How often (in seconds) to perform the probe. Default to 10 seconds. Minimum value is 1.Path within the container at which the volume should be mounted. Must not contain ':'.%q is an invalid OS component of %q: OSAndVersion specifier component must match %q: %w(?m)\x00java\x00(?P[0-9]+[.0-9]+)\x00{4}(?P[0-9]+[-._a-zA-Z0-9]+)\x00\x00OpenSSL (?P[0-9]+\.[0-9]+\.[0-9]+([a-z]|-alpha[0-9]|-beta[0-9]|-rc[0-9])?)client-key-data and client-key are both specified for %v; client-key-data will overridek8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1.CustomResourceColumnDefinitionk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionStatusk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1.CustomResourceSubresourceScaleStatus is filled in by the server and indicates whether the token can be authenticated.label key and value length (%d bytes) greater than maximum size (%d bytes), key: %s: %wThe conditions represent the latest available observations of a policy's current state.If set, this represents the .metadata.generation that the condition was set based upon.HPAScalingPolicy is a single policy which must hold true for a specified past interval.Filter the list of scans. Use ';' as the delimeter for arrays. Available filters are: %sSections to generate SBOM report. Available options: CycloneDxJson,CycloneDxXml,SpdxJson | Critical High Medium Low Info Status | --------------------------------------------------------------------- Invalid file extension. Supported extensions are .sarif and .zip containing sarif files.Azure DevOps personal access token. Requires “Connected server” and “Code“ scopex509: failed to parse private key (use ParsePKCS8PrivateKey instead for this key format)x509: failed to parse private key (use ParsePKCS1PrivateKey instead for this key format)Access to the image is restricted. Verify the repository permissions and credentials. %sno cataloger tasks selected found for given selection (this might be a misconfiguration)Patch is provided to give a concrete name and type to the Kubernetes PATCH request body.DownwardAPIVolumeFile represents information to create the file containing the pod fieldpath is Optional: Used as the mounted root, rather than the full Ceph tree, default is /The time at which the event was first recorded. (Time of server receipt is in TypeMeta.)TTY if true indicates that a tty will be allocated for the exec call. Defaults to false.TopologySpreadConstraint specifies how to spread matching pods among the given topology.Failed to validate. For rule ID [%s], true positive [%s] was not detected by regexp [%s](?m)\x00openjdk\x00java\x00(?P[0-9]+[.0-9]*)\x00(?P[0-9]+[^\x00]+)\x00k8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1.CustomResourceDefinitionVersionk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1.CustomResourceSubresourceStatusk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1.JSONSchemaProps.PropertiesEntryk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceSubresources^(?:-([0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?(?:\+([0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?\s*$DaemonSetUpdateStrategy is a struct used to control the update strategy for a DaemonSet.Total number of non-terminating pods targeted by this Deployment with a Ready Condition.readyReplicas is the number of pods created for this StatefulSet with a Ready Condition.proto: StatefulSetPersistentVolumeClaimRetentionPolicy: wiretype end group for non-groupDEPRECATED. DeploymentRollback stores the information required to rollback a deployment.conditions represent the latest available observations of a statefulset's current state.ValidatingAdmissionPolicyStatus represents the status of an admission validation policy.Spec holds information about the request being evaluated. user and groups must be emptyResourceSliceSpec contains the information published by the driver in one ResourceSlice.allocatable represents the volume resources of a node that are available for scheduling.cbor: decoded time cannot be represented in RFC3339 format with sub-second precision: %v --------------------------------------------------------------------- The file source should be the path to a single file or multiple files separated by commas--container-images flag error: image does not have a tag. Did you try to scan a tar file?There was a problem importing the SARIF file. Please contact support for further details.Configured part size %d GB is outside the allowed range (1 – 5 GB). Defaulting to 2 GB.Failed to extract image name and tag from OCI archive %s. Skipping analysis of this file.-----BEGIN RSA PRIVATE KEY----- abcdefghijklmnopqrstuvwxyz -----END RSA PRIVATE KEY----- a digest must contain exactly one '@' separator (e.g. registry/repository@digest) saw: %sAPIGroup contains the name, the supported versions, and the preferred version of a group.operator %q without a single value cannot be converted into the old label selector formatBinding ties one object to another; for example, a pod is bound to a node by a scheduler.Describes the class of pods that should avoid this node. Exactly one field should be set.PodStatusResult is a wrapper for PodStatus returned by kubelet that can be encode/decodedreadOnly value to pass to ControllerPublishVolumeRequest. Defaults to false (read/write).Represents the latest available observations of a replication controller's current state.protectionDomain is the name of the ScaleIO Protection Domain for the configured storage.found symbolic link in path: %s resolves to %s. Contents of linked file included and used"user_token1": "xoxp-41684372915-1320496754-45609968301-e708ba56e1517a99f6b5fb07349476ef"using a custom transport with TLS certificate options or the insecure flag is not allowedk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1.JSONSchemaProps.DefinitionsEntryCronJobSpec describes how the job execution will look like and when it will actually run.ReplicaSet ensures that a specified number of pod replicas are running at any given time.lastTransitionTime is the last time the condition transitioned from one status to anotherStatus is filled in by the server and indicates whether the request can be authenticated.The conditional operator (...?...:...) requires a false expression, delimited by a colon.SubResource is the subresource being requested, if any (for example, "status" or "scale")ImageReviewContainerSpec is a description of a container within the pod creation request.Filter the list of results. Use ';' as the delimiter for arrays. Available filters are: %s --------------------------------------------------------------------- Populate SAST results 'data.redundancy' with values '%s' (to fix) or '%s' (no need to fix) $ cx utils remediation kics --results-file --kics-files http2: server sent GOAWAY and closed the connection; LastStreamID=%v, ErrCode=%v, debug=%q =2 && (n%100<10 || n%100>=20) ? 1 : 2);Register new OAuth2 client and outputs its generated credentials in the format =The show command enables the ability to show results about a requested scan in Checkmarx One https://checkmarx.com/resource/documents/en/34965-68620-checkmarx-one-cli-tool.html tls: server sent encrypted client hello retry configs after accepting encrypted client hellotls: handshake hash for a client certificate requested after discarding the handshake bufferFailed to extract image name and tag from OCI directory %s. Skipping analysis of this image.A selector to restrict the list of returned objects by their labels. Defaults to everything.A selector to restrict the list of returned objects by their fields. Defaults to everything.readOnly specifies a read-only configuration for the volume. Defaults to false (read/write).PodCertificateProjection provides a private key and X.509 certificate in the pod filesystem.Found an Etsy Access Token, potentially compromising Etsy shop management and customer data.http://cafeb4b3:d3adb33f@enterprise.contribsys.com:80/path?param1=true¶m2=false#heading1"user_token3": "xoxp-11873098179-111402824422-234336993777-b96c9fb3b69f82ebb79d12f280779de1"(?m)X-Powered-By: PHP\/(?P[0-9]+\.[0-9]+\.[0-9]+(beta[0-9]+|alpha[0-9]+|RC[0-9]+)?)k8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceColumnDefinitionk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionStatusk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceSubresourceScaleProtocol is the protocol of the ingress port. The supported values are: "TCP", "UDP", "SCTP"Pseudo Language Pseudo Locale For East Asian/Complex Script Localization Testing (qps-ploca)lastObservedTime is the time when last Event from the series was seen before last heartbeat.`lastTransitionTime` is the last time the condition transitioned from one status to another.protocol is the protocol of the ingress port. The supported values are: "TCP", "UDP", "SCTP"Devices lists some or all of the devices in this pool. Must not have more than 128 entries.CSINodeSpec holds information about the specification of all CSI drivers installed on a nodeStorageVersionMigration represents a migration of stored data to the latest storage version.Returns the given string with all Unicode letters translated to their uppercase equivalents.Returns the given string with all Unicode letters translated to their lowercase equivalents.%w: subpath %s/%s has an overmount obscuring the real path (mount ids do not match %d != %d)Provide a token with read permission for the repo that you are scanning (for scorecard scans)tls: unsupported certificate: private key is *ed25519.PrivateKey, expected ed25519.PrivateKeyFailed to load Kerberos credential cache. Please run 'kinit' to obtain valid Kerberos ticketscrypto/rsa: %d-bit keys are insecure (see https://go.dev/pkg/crypto/rsa#hdr-Minimum_key_size)The image format is outdated and unsupported. You may need to update or rebuild the image. %sAD_UNIT_ID_FOR_BANNER_TEST ca-app-pub-3940256099942544/2934735716message is a human-readable message indicating details about why the volume is in this state.ObjectReference contains enough information to let you inspect or modify the referred object.Discovered a Doppler API token, posing a risk to environment and secrets management security."user_token2": "xoxp-283316862324-298911817009-298923149681-44f585044dace54f5701618e97cd1c0b""user_token4": "xoxp-254112160503-252950188691-252375361712-6cbf56aada30951a9d310a5f23d032a0"export SUMOLOGIC_ACCESSKEY="3HSa1hQfz6BYzlxf7Yb1WKG3Hyovm56LMFChV2y9LgkRipsXCujcLb5ej3oQUJlx"The operation was unsupported due to a missing implementation or invalid set of parameters.^\s+resolved\s+"https://registry\.(?:yarnpkg\.com|npmjs\.org)/(.+?)/-/(?:.+?)-(\d+\..+?)\.tgzk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionVersionk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceSubresourceStatusk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaProps.PropertiesEntryrandomstringutils illegal argument: Parameter end (%v) cannot be greater than len(chars) (%v)Error parsing the import table. AddressOfData overlaps with THUNK_DATA for THUNK at: RVA 0x%xprotocol represents the IP protocol for this port. Must be UDP, TCP, or SCTP. Default is TCP.series is data about the Event series this event represents or nil if it's a singleton Event.ResourceClaimSpec defines what is being requested in a ResourceClaim and how to configure it.CSINodeDriver holds information about the specification of one CSI driver installed on a node"@" statement is not valid, could be : @{upstream}, @{upstream}, @{u}, @{u}An expanded function argument (with ...) must be immediately followed by closing parentheses.All input files must be UTF-8 encoded. Ensure that UTF-8 encoding is selected in your editor.Splits a single list into multiple lists where each has at most the given number of elements.Removes any duplicate values from the given list, preserving the order of remaining elements. -------------------------------------------------------------------------- https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.jsonRunning a ASCA scan is a fast and efficient way to identify vulnerabilities in a specific fileInvalid value for --container-images flag. Prefix '%s' expects format :%s API rate limit exceeded (status %d). Waiting %v until %v before retrying... (attempt %d/%d)Unable to upload the file to the pre-signed URL. Try adding the domain: %s to your allow list.2ms Secrets Detection: A tool to detect secrets in public websites and communication services.no file catalogers selected but file selection is configured as %q (this may be unintentional)grpc-status-details-bin mismatch: grpc-status=%v, grpc-message=%q, grpc-status-details-bin=%+vOptional: Node hosting this endpoint. This can be used to determine endpoints local to a node.TypedObjectReference contains enough information to let you locate the typed referenced objectVolumeNodeAffinity defines constraints that limit what nodes this volume can be accessed from.size mismatch (see https://github.com/golang/protobuf/issues/1609): calculated=%d, measured=%dUncovered a Postman API token, potentially compromising API testing and development workflows.either a list of tools, or an object holding components and services can be used, but not both(?m).*/percona-server-(?P[0-9]+(\.[0-9]+)?(\.[0-9]+)?(alpha[0-9]|beta[0-9]|rc[0-9])?)Certificate rotation detected, shutting down client connections to start using new credentialsk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaProps.DefinitionsEntry%v accessor error: contains non-string key in the slice: %v is of the type %T, expected stringmissing/incomplete maven artifact coordinates -- groupId: '%s' artifactId: '%s', version: '%s'MutatingWebhook describes an admission webhook and the resources and operations it applies to.MutatingAdmissionPolicyBindingSpec is the specification of the MutatingAdmissionPolicyBinding.CertificateSigningRequestCondition describes a condition of a CertificateSigningRequest objectServiceCIDRSpec define the CIDRs the user wants to use for allocating ClusterIPs for Services.A template directive keyword ("if", "for", etc) is expected at the beginning of a %{ sequence.Returns the number of Unicode characters (technically: grapheme clusters) in the given string.The pre-commit command enables the ability to manage Git pre-commit hooks for secret detection.Critical severity is not available for your tenant.This severity status will be enabled shortlyThe codebashing command enables the ability to retrieve the link about a specific vulnerability -------------------------------------------------------------------------- $ cx configure $ cx scan create -s . --project-name my_project_name $ cx scan list Base delay in seconds between scan enqueue retry attempts with exponential backoff (default: 5)%s%sSet configuration properties Run 'cx utils env' for the list of supported environment variablesRecursiveReadOnlyMounts is set to true if the runtime handler supports RecursiveReadOnlyMounts.Stdin if true, redirects the standard input stream of the pod for this call. Defaults to false.Stdout if true indicates that stdout is to be redirected for the attach call. Defaults to true.Stderr if true indicates that stderr is to be redirected for the attach call. Defaults to true.PodDNSConfig defines the DNS parameters of a pod in addition to those generated from DNSPolicy.iscsiInterface is the interface Name that uses an iSCSI transport. Defaults to 'default' (tcp).A brief CamelCase message indicating details about why the pod is in this state. e.g. 'Evicted'Detected a Linear API Token, posing a risk to project management tools and sensitive task data.(?m)(\x00|\x{FFFD})?v?(?P[0-9]+\.[0-9]+\.[0-9]+(-alpha[0-9]|-beta[0-9]|-rc[0-9])?)\x00/([^/]*/[\w+][\w+-]*)-((\d+)((\.\d+)*)([a-z]?)((_(pre|p|beta|alpha|rc)\d*)*)(-r\d+)?)/CONTENTS$k8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1.JSONSchemaProps.PatternPropertiesEntryk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1beta1.CustomResourceDefinitionConditionk8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaProps.DependenciesEntryIndicates that the deployment is paused and will not be processed by the deployment controller.TypeChecking contains results of type checking the expressions in the ValidatingAdmissionPolicyHorizontalPodAutoscalerSpec describes the desired functionality of the HorizontalPodAutoscaler.Go struct field %s has unnecessarily quoted appearance of `%s` tag option; specify `%s` insteaderror converting *[]NamedCluster into *map[string]*api.Cluster: duplicate name "%v" in list: %verror converting *[]NamedContext into *map[string]*api.Context: duplicate name "%v" in list: %vContainers is a list of a subset of the information in each container of the Pod being created.Send the PDF report to the specified email address. Use "," as the delimiter for multiple emailsScan triggered in asynchronous mode or still running. Click more details to get the full status.The show command enables the ability to show information about a requested scan in Checkmarx Onehttps://checkmarx.com/resource/documents/en/34965-68621-checkmarx-one-cli-quick-start-guide.html https://checkmarx.com/resource/documents/en/34965-68625-checkmarx-one-cli-commands.html b3312fa7e23ee7e4988e056be3f82d19181d9c6efe8141120314088f5013875ac656398d8a2ed19d2a85c8edd3ec2aefaa87ca22be8b05378eb1c71ef320ad746e1d3b628ba79b9859f741e082542a385502f25dbf55296c3a545e3872760ab73617de4a96262c6f5d9e98bf9292dc29f8f41dbd289a147ce9da3113b5f0b8c00a60b1ce1d7e819d7a431d7c90ea0e5fcrypto/rsa: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only mode(?i)\\[!"#$%&'()*+,./:;<=>?@[\\\]^_`{|}~-]|&(?:#x[a-f0-9]{1,8}|#[0-9]{1,8}|[a-z][a-z0-9]{1,31});%s does not equal %s. Expect version and constraint to equal when major and minor versions are 0The name of the request in the special ResourceClaim which corresponds to the extended resource.Specifies the set of values to check for container exit codes. At most 255 elements are allowed.The node this Taint is attached to has the "effect" on any pod that does not tolerate the Taint.ObservedGeneration reflects the generation of the most recently observed replication controller.%v.%v has already been registered as unversioned kind %q - kind name must be unique in scheme %q^v[0-9]+\.(0\.0-|\d+\.\d+-([^+]*\.)?0\.)\d{14}-[A-Za-z0-9]+(\+[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?$Found a Frame.io API token, potentially compromising video collaboration and project management.Identified a PlanetScale API token, potentially compromising database management and operations.Detected a Readme API token, risking unauthorized documentation management and content exposure."user_token5": "xoxp-4614724432022-4621207627011-5182682871568-1ddad9823e8528ad0f4944dfa3c6fc6c"Found a Yandex Access Token, posing a risk to Yandex service integrations and user data privacy.manifest list/index references to blobs and/or manifests are missing in your target registry: %w(?m)(\x00|\?)PostgreSQL (?P[0-9]+(\.[0-9]+)?(\.[0-9]+)?(alpha[0-9]|beta[0-9]|rc[0-9])?)Unable to complete the copy, the accumulated size increase of copy is %d, exceeding the limit %dThe number of failed finished jobs to retain. Value must be non-negative integer. Defaults to 1.ValidatingWebhook describes an admission webhook and the resources and operations it applies to.deprecatedCount is the deprecated field assuring backward compatibility with core.v1 Event type.cidr is a string representing the IPBlock Valid examples are "192.168.1.0/24" or "2001:db8::/64"service references a service as a backend. This is a mutually exclusive setting with "Resource".name is the name of the port on the Service. This is a mutually exclusive setting with "Number".DeviceCounterConsumption defines a set of counters that a device will consume from a CounterSet."PreserveSeqIndent" option adds a reader annotation, please set "OmitReaderAnnotations" to falseReturns true if the given value is a value in the given list, tuple, or set, or false otherwise.Replaces one letter after each non-letter and non-digit character with its uppercase equivalent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https://checkmarx.com/resource/documents/en/34965-365503-hooks.html The bfl command enables the ability to show best fix location for a querid within the scan resultThe tags command enables the ability to provide a list of all the available tags in Checkmarx OneNumber of retry attempts for scan enqueue failures due to queue capacity (default: 0, no retries)Invalid value for --container-images flag. After prefix '%s', the image reference cannot be emptyPath to the kics scan results file. It is used to identify and remediate the kics vulnerabilitieshttp: RoundTripper implementation (%T) returned a *Response with content length %d but a nil Bodycrypto/hmac: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only modeRetrieval from the private repository failed. Verify the credentials used for the integration. %sName of the resource to which this resource resize policy applies. Supported values: cpu, memory.Found a Finnhub Access Token, risking unauthorized access to financial market data and analytics.Discovered a Sendbird Access ID, which could compromise chat and messaging platform integrations.StatefulSetOrdinals describes the policy used for replica ordinal assignment in this StatefulSet.Total number of available pods (ready for at least minReadySeconds) targeted by this statefulset.Total number of available pods (ready for at least minReadySeconds) targeted by this StatefulSet.CIDR is a string representing the IP Block Valid examples are "192.168.1.0/24" or "2001:db8::/64"MutatingAdmissionPolicySpec is the specification of the desired behavior of the admission policy.The API server encodes the object to this version when persisting it in the backend (e.g., etcd).MetricTarget defines the target value, average value, or average utilization of a specific metricdeprecatedSource is the deprecated field assuring backward compatibility with core.v1 Event type.inlined Go struct field %s of type %s must be a Go struct, Go map of string key, or json.RawValueThe equals sign "=" indicates an argument definition, and must not be used when defining a block.error converting *[]NamedAuthInfo into *map[string]*api.AuthInfo: duplicate name "%v" in list: %vPopulate SAST results 'data.redundancy' with values 'fix' (to fix) or 'redundant' (no need to fix)Running a Secrets-Realtime scan is a fast and efficient way to identify exposed secrets in a file.NoClientCertRequestClientCertRequireAnyClientCertVerifyClientCertIfGivenRequireAndVerifyClientCertThe gitlab command presents the unique contributors for the provided GitLab repositories or groupscrypto/ecdsa: use of hash functions other than SHA-2 or SHA-3 is not allowed in FIPS 140-only modemy [Linkedin](https://www.linkedin.com/in/rodriguesjeffdev/) or email: rodriguesjeff.dev@gmail.comNumber of port to expose on the pod's IP address. This must be a valid port number, 0 < x < 65536.Hostname is set for load-balancer ingress points that are DNS based (typically AWS load-balancers)ReplicationControllerCondition describes the state of a replication controller at a certain point.ResourceID is the unique identifier of the resource. See the ResourceID type for more information.User represents user identity information initially attached to the first process of the containerAPI_ORG_CREATE("https://qyapi.weixin.qq.com/cgi-bin/department/create?access_token=ACCESS_TOKEN"),Detected a Lob Publishable API Key, posing a risk of exposing mail and print service integrations.Discovered a Shippo API token, potentially compromising shipping services and customer order data.http://hooks.slack.com/workflows/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 a Twitch API token, which could compromise streaming services and account integrations.(?m).*/percona-xtrabackup-(?P[0-9]+(\.[0-9]+)?(\.[0-9]+)?(alpha[0-9]|beta[0-9]|rc[0-9])?)RollingUpdate is used to communicate parameters when Type is RollingUpdateStatefulSetStrategyType.readyReplicas is the number of pods created by this StatefulSet controller with a Ready Condition.DEPRECATED. The config this deployment is rolling back to. Will be cleared after rollback is done.CrossVersionObjectReference contains enough information to let you identify the referred resource.0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ!"#$%&'()*+,-./:;<=>?@[\]^_`{|}~ The PE Optional Header size can not accommodate for a Certificate Tableentry in its Data Directory^(?P[a-zA-Z][\w-]*?)(?P\-?\d[\d\.]*?)($|-(?P[a-zA-Z][\w-]*?)?)$ValidatingAdmissionPolicyBindingSpec is the specification of the ValidatingAdmissionPolicyBinding.ValidatingAdmissionPolicySpec is the specification of the desired behavior of the AdmissionPolicy.value contains the amount of change which is permitted by the policy. It must be greater than zeroembedded Go struct field %s of an unexported type must be explicitly ignored with a `json:"-"` tagConcatenates together the elements of all given lists with a delimiter, producing a single string. $ cx results exit-code --scan-id --scan-types Failed to extract image name and tag from Docker/Podman archive %s. Skipping analysis of this file.grpc: the credentials require transport level security (use grpc.WithTransportCredentials() to set)AD_UNIT_ID_FOR_INTERSTITIAL_TEST ca-app-pub-3940256099942544/4411468910preferredVersion is the version preferred by the API server, which probably is the storage version.Status of the condition for a component. Valid values for "Healthy": "True", "False", or "Unknown".EndpointPort is a tuple that describes a single port. Deprecated: This API is deprecated in v1.33+.ContainerRuntime Version reported by the node through runtime remote API (e.g. containerd://1.4.2).Identified a Flutterwave Secret Key, risking unauthorized financial transactions and data breaches.Found a Mailgun private API token, risking unauthorized email service operations and data breaches.Detected a Netlify Access Token, potentially compromising web hosting services and site management.Found a New Relic user API ID, posing a risk to application monitoring services and data integrity.Found an OpenAI API Key, posing a risk of unauthorized access to AI services and data manipulation.(?m)'pretty_version'\s*=>\s*'(?P[0-9]+\.[0-9]+\.[0-9]+(beta[0-9]+|alpha[0-9]+|RC[0-9]+)?)'client-key-data or client-key must be specified for %v to use the clientCert authentication method.Total number of non-terminating pods targeted by this deployment (their labels match the selector).LeaseName is the name of the lease for which this candidate is contending. This field is immutable.name is the referenced service. The service must exist in the same namespace as the Ingress object.port of the referenced service. A port name or port number is required for a IngressServiceBackend.DeviceClassSpec is used in a [DeviceClass] to define what can be allocated and how to configure it.ResourceClaimStatus tracks whether the resource has been allocated and what the result of that was.revision suffix brace component sequences starting with "/!" others than those defined are reservederror converting *[]NamedExtension into *map[string]runtime.Object: duplicate name "%v" in list: %vRemoves consecutive sequences of characters in "cutset" from the start and end of the given string.The risk-management command displays risk management results for a specific project in Checkmarx OneThe 'telemetry' command allows collecting and sending user interaction events for analysis purposes.ed25519: expected opts.Hash zero (unhashed message, for standard Ed25519) or SHA-512 (for Ed25519ph)Balancer retrieved for name %q. grpc-go will be switching to case sensitive balancer registries soonnum values of :authority: %v, num values of host: %v, both must only have 1 value as per HTTP/2 specIdentified a Private Key, which may compromise cryptographic security and sensitive data encryption.secretRef is Optional: points to a secret object containing parameters used to connect to OpenStack.secretRef is optional: points to a secret object containing parameters used to connect to OpenStack.UserNamespaces is set to true if the runtime handler supports UserNamespaces, including for volumes.Invalid values count %+v of requirement %#v, for 'Gt', 'Lt' operators, exactly one value is requiredDetected a GitHub Refresh Token, which could allow prolonged unauthorized access to GitHub services.k8s.io.apiextensions_apiserver.pkg.apis.apiextensions.v1beta1.JSONSchemaProps.PatternPropertiesEntryThe number of successful finished jobs to retain. Value must be non-negative integer. Defaults to 3.List of ReplicaSets. More info: https://kubernetes.io/docs/concepts/workloads/controllers/replicasetuser specified IP address is supported only when connecting to networks with user configured subnetsMatchCondition represents a condition which must by fulfilled for a request to be sent to a webhook.APIVersion is the API group version the resources belong to. In format of "group/version". Required.MatchCondition represents a condition which must be fulfilled for a request to be sent to a webhook.`name` is the name of matching ServiceAccount objects, or "*" to match regardless of name. Required.Go struct field %s has malformed `json` tag: invalid character %q before next option (expecting ',')The given key does not identify an element in this collection value: the collection has no elements.Either a JSON object or JSON array of objects is required here, to specify %s labels for this block.Replaces all instances of the given substring in the given string with the given replacement string. $ cx configure set cx_base_uri Setting property [cx_base_uri] to value []Detected a Generic API Key, potentially exposing access to various services and sensitive operations.consider using "google.golang.org/protobuf/testing/protocmp".Transform to compare proto.Message typesThe CIDR with which clients can match their IP to figure out the server address that they should use.Namespace is the metadata.namespace of the referenced ConfigMap. This field is required in all cases.podIP address allocated to the pod. Routable at least within the cluster. Empty if not yet allocated.image is the rados image name. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-itFound a HubSpot API Token, posing a risk to CRM data integrity and unauthorized marketing operations.Detected a Slack Legacy token, risking unauthorized access to older Slack integrations and user data.https://hooks.slack.com/workflows/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icyOnPodConditionsPattern describes a pattern for matching an actual pod condition type.SuccessPolicy describes when a Job can be declared as succeeded based on the success of some indexes.Total number of non-terminating pods targeted by this deployment that have the desired template spec.unsupported sslmode %q; only "require" (default), "verify-full", "verify-ca", and "disable" supportedHorizontalPodAutoscalerCondition describes the state of a HorizontalPodAutoscaler at a certain point.undefined symbols index in dynamic symbol table command is greater than symbol table length (%d > %d)reason is why the action was taken. It is human-readable. This field can have at most 128 characters.parameters holds the parameters for the provisioner that should create volumes of this storage class.The root value in a JSON-based configuration must be either a JSON object or a JSON array of objects.Either a JSON object or a JSON array is required, representing the contents of one or more %q blocks.Either a JSON object or JSON array of objects is required here, to define arguments and child blocks. $ cx scan kics-realtime --file --additional-params --engine cgocheck > 1 mode is no longer supported at runtime. Use GOEXPERIMENT=cgocheck2 at build time instead.xtg-x-cel-gaulishen-GB-oxendicten-x-i-defaultund-x-i-enochiansee-x-i-mingonan-x-zh-minen-US-u-va-posix\A\s*(?:export\s+)?([\w\.]+)(?:\s*=\s*|:\s+?)('(?:\'|[^'])*'|"(?:\"|[^"])*"|[^#\n]+)?\s*(?:\s*\#.*)?\zignoring service config from resolver (%v) and applying the default because service config is disabledBalancer registered with name %q. grpc-go will be switching to case sensitive balancer registries soonWARNING: This chart or one of its subcharts contains CRDs. Rendering may fail or contain inaccuracies.usage: %s module/path [v1.2.3] => other/module v1.4 or %s module/path [v1.2.3] => ../local/directoryhttp2: failed reading the frame payload: %w, note that the frame header looked like an HTTP/1.1 headerRequired: Selects a field of the pod: only annotations, labels, name, namespace and uid are supported.SeccompProfile defines a pod/container's seccomp profile settings. Only one profile source may be set.Items is a list of secret objects. More info: https://kubernetes.io/docs/concepts/configuration/secretID of the node assigned by the cloud provider in the format: ://The number of available replicas (ready for at least minReadySeconds) for this replication controller.Detected a Finicity Public Key, potentially exposing public cryptographic operations and integrations.Uncovered a Mailgun webhook signing key, potentially compromising email automation and data integrity.Uncovered an npm access token, potentially compromising package management and code repository access.(?m).*/Percona-XtraDB-Cluster-(?P[0-9]+(\.[0-9]+)?(\.[0-9]+)?(alpha[0-9]|beta[0-9]|rc[0-9])?)averageValue is the target value of the average of the metric across all relevant pods (as a quantity)ssh: signature algorithm %q isn't a key format; key is malformed and should be re-encoded with type %qPodCertificateRequestSpec describes the certificate request. All fields are immutable after creation.terminating indicates that this endpoint is terminating. A nil value should be interpreted as "false".Name is unique identifier among all devices managed by the driver in the pool. It must be a DNS label.The "`" character is not valid. To create a multi-line string, use the "heredoc" syntax, like "<=2 && n%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);The azure command presents the unique contributors for the provided Azure repositories or organizationsproviding github.com/containerd/containerd/remotes.Resolver via ClientOptResolver is no longer suportedA human-readable description of the cause of the error. This field may be presented as-is to a reader.readOnly defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadataSupplementalGroups are the supplemental groups initially attached to the first process in the containerAn array of string values. One value must match the label to be selected. Each entry in Values is ORed.readOnly Defaults to false (read/write). ReadOnly here will force the ReadOnly setting in VolumeMounts.Allocatable represents the resources of a node that are available for scheduling. Defaults to Capacity.AutomountServiceAccountToken indicates whether a service account token should be automatically mounted.amazon.de#@#div[data-cel-widget="desktop-rhf_SponsoredProductsRemoteRHFSearchEXPSubsK2ClickPagination"]Identified a Mailchimp API key, potentially compromising email marketing campaigns and subscriber data.Detected a MapBox API token, posing a risk to geospatial services and sensitive location data exposure.Found a MessageBird API token, risking unauthorized access to communication platforms and message data.Found a PlanetScale OAuth token, posing a risk to database access control and sensitive data integrity.Identified a Slack Bot token, which may compromise bot integrations and communication channel security.Detected a Slack App-level token, risking unauthorized access to Slack applications and workspace data.Uncovered a Snyk API token, potentially compromising software vulnerability scanning and code security.Found a Stripe Access Token, posing a risk to payment processing services and sensitive financial data.Found a Twitter API Secret, risking the security of Twitter app integrations and sensitive data access.Discovered a Twitter Bearer Token, potentially compromising API access and data retrieval from Twitter.Uncovered a Typeform API token, which could lead to unauthorized survey management and data collection.request returned %s with a message (> %d bytes); check if the server supports the requested API versionThe number of available non-terminating pods (ready for at least minReadySeconds) for this replica set.averageValue is the current value of the average of the metric across all relevant pods (as a quantity)selectPolicy is used to specify which policy should be used. If not set, the default value Max is used.Path to Kerberos configuration file(default: /etc/krb5.conf on linux and C:\Windows\krb5.ini on windows)Client received GoAway with error code ENHANCE_YOUR_CALM and debug data equal to ASCII "too_many_pings".FlexVolume represents a generic volume resource that is provisioned/attached using an exec based plugin.Host name to connect to, defaults to the pod IP. You probably want to set "Host" in httpHeaders instead.IP is set for load-balancer ingress points that are IP based (typically GCE or OpenStack load-balancers)The container for which to stream logs. Defaults to only container if there is one container in the pod.readOnly here will force the Quobyte volume to be mounted with read-only permissions. Defaults to false.the server was unable to return a response in the time allotted, but may still be processing the requestParseInt failed for value %+v in requirement %#v, for 'Gt', 'Lt' operators, the value must be an integer(?:sc|ext|scauth|authress)_[a-z0-9]{5,30}\.[a-z0-9]{4,6}\.acc[_-][a-z0-9-]{10,32}\.[a-z0-9+/_=-]{30,120}Found a DigitalOcean OAuth Access Token, risking unauthorized cloud resource access and data compromise.Identified a Grafana API key, which could compromise monitoring dashboards and sensitive data analytics.Identified a Mattermost Access Token, which may compromise team communication channels and data privacy.Detected a SendGrid API token, posing a risk of unauthorized email service operations and data exposure.Found a Twilio API Key, posing a risk to communication services and sensitive customer interaction data.request returned %s for API route and version %s, check if the server supports the requested API version(?m)\.[a-zA-Z0-9]*([rR]elease)?([gG]it)?([bB]uild)?[vV]er(sion)?=(\S+/)*(?Pv?\d+.\d+.\d+[-\w]*)PodDisruptionBudget is an object to define the max disruption that can be caused to a collection of podsdeprecatedLastTimestamp is the deprecated field assuring backward compatibility with core.v1 Event type.Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding.Multiple Strategic-Merge Patches in one `patches` entry is not allowed to set `patches.target` field: %sKind is the fully-qualified type of object being submitted (for example, v1.Pod or autoscaling.v1.Scale) # Checkmarx One Scan Summary *** ##### {{.ScanInfoMessage}} ##### [🔗 More details]({{.BaseURI}}) *** Running a OSS-Realtime scan is a fast and efficient way to identify malicious packages in a manifest fileThe specified path points to a directory, not a file. Please provide a valid CLI configuration file path. https://checkmarx.com/resource/documents/en/34965-68621-checkmarx-one-cli-quick-start-guide.html The github command presents the unique contributors for the provided GitHub repositories or organizationsFailed to write a GOAWAY frame as part of connection close after %s. Giving up and closing the transport.message is a human readable message indicating details about the transition. This may be an empty string.Select a single ClusterTrustBundle by object name. Mutually-exclusive with signerName and labelSelector.Restart policy to apply when specified resource is resized. If not specified, it defaults to NotRequired.Node is a worker node in Kubernetes. Each node will have a unique identifier in the cache (i.e. in etcd).Detected a Dynatrace API token, potentially risking application performance monitoring and data exposure.Detected a Nytimes Access Token, risking unauthorized access to New York Times APIs and content services.Detected a Prefect API token, risking unauthorized access to workflow management and automation services.Found a Pulumi API token, posing a risk to infrastructure as code services and cloud resource management.(?m)(\x00)clang LLVM \(rustc version (?P[0-9]+(\.[0-9]+)?(\.[0-9]+)) \(\w+ \d{4}\-\d{2}\-\d{2}\)deprecatedFirstTimestamp is the deprecated field assuring backward compatibility with core.v1 Event type.Device references one device instance via its name in the driver's resource pool. It must be a DNS label.DryRun indicates that modifications will definitely not be persisted for this request. Defaults to false.Invalid value for --container-images flag. Image name and tag cannot be empty. Found: image='%s', tag='%s'Please provide Proxy string using: --proxy 'http://proxy.example.com' or set CX_PROXY environment variableThis user doesn’t have the necessary permissions to view the Policy Management evaluation for this scan.ed25519: expected opts.HashFunc() zero (unhashed message, for standard Ed25519) or SHA-512 (for Ed25519ph)asn1: time did not serialize back to the original value and may be invalid: given %q, but serialized as %qState: %v, Target: %s, CallsStarted: %v, CallsSucceeded: %v, CallsFailed: %v, LastCallStartedTimestamp: %vEndpointAddress is a tuple that describes single IP address. Deprecated: This API is deprecated in v1.33+.Represents a scope's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist.The number of pods that have labels matching the labels of the pod template of the replication controller.Discovered a potential Discord client secret, risking compromised Discord bot integrations and data leaks.Detected a Droneci Access Token, potentially compromising continuous integration and deployment workflows.Uncovered a Gitter Access Token, which may lead to unauthorized access to chat and communication services.Identified an Intercom API Token, which could compromise customer communication channels and data privacy.Discovered a PlanetScale password, which could lead to unauthorized database operations and data breaches.Identified a Rubygem API token, potentially compromising Ruby library distribution and package management.DEPRECATED 1.9 - This group version of NetworkPolicyPeer is deprecated by networking/v1/NetworkPolicyPeer.DEPRECATED 1.9 - This group version of NetworkPolicyPort is deprecated by networking/v1/NetworkPolicyPort.DEPRECATED 1.9 - This group version of NetworkPolicySpec is deprecated by networking/v1/NetworkPolicySpec.targetValue is the target value of the metric (as a quantity). Mutually exclusive with TargetAverageValue.PreferredHolder signals to a lease holder that the lease has a more optimal holder and should be given up.endpoints is a list of unique endpoints in this slice. Each slice may include a maximum of 1000 endpoints.PriorityLevelConfigurationReference contains information that points to the "request-priority" being used.NodeSelector defines where the allocated resources are available. If unset, they are available everywhere.inlined Go struct field %s of type %s with `unknown` tag must be a Go map of string key or a json.RawValueConcatenates together all of the given lists or tuples into a single sequence, preserving the input order.Some remediations available were not applied or there are errors in the results file.Please check kics logstargetVolumeAttributesClassName is the name of the VolumeAttributesClass the PVC currently being reconciledpath that is exported by the NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfsSupplementalGroupsPolicy is set to true if the runtime supports SupplementalGroupsPolicy and ContainerUser.Deprecated. Not all kubelets will set this field. Remove field after 1.13. see: https://issues.k8s.io/61966Path within the volume from which the container's volume should be mounted. Defaults to "" (volume's root).unable to convert GroupVersionKind with empty fields to unstructured type to an OpenAPI definition name: %vDetected a Bittrex Secret Key, potentially compromising cryptocurrency transactions and financial security.Discovered a Contentful delivery API token, posing a risk to content management systems and data integrity.Detected a Heroku API Key, potentially compromising cloud application deployments and operational security.# Not critical, only usable on the sandboxed CI instance. TOKEN = "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"Detected a Square Access Token, risking unauthorized payment processing and financial transaction exposure.Identified a Twitter API Key, which may compromise Twitter application integrations and user data security.Uncovered a Twitter Access Secret, potentially risking unauthorized Twitter integrations and data breaches.Detected a Vault Batch Token, risking unauthorized access to secret management services and sensitive data.%v accessor error: contains non-string value in the map under key %q: %v is of the type %T, expected stringRollingUpdateStatefulSetStrategy is used to communicate parameter for RollingUpdateStatefulSetStrategyType.object %v does not implement the protobuf marshalling interface and cannot be encoded to a protobuf messagefieldSelector describes the limitation on access based on field. It can only limit access, not broaden it.If driver is set, only devices from that driver are selected. This fields corresponds to slice.spec.driver.Exclude files and directories from the scan based on the patterns defined in the directory's .gitignore fileAn error occurred while accessing the file or environment variable. Please verify the CLI configuration fileThe specified file does not exist. Please check the path and ensure the CLI configuration file is available.go package net: ignoring GODEBUG=netdns=cgo as the binary was compiled without support for the cgo resolver crypto/cipher: use of GCM with arbitrary IVs is not allowed in FIPS 140-only mode, use NewGCMWithRandomNonceReceived a HEADERS frame with a :connection header which makes the request malformed, as per the HTTP/2 specclient_secret 6da89121079f83b2eb6acccf8219ea982c3d79bccc3e9c6a85856480661f8fdeadding '%s' tag to the default cataloger selection, to override add '-%s' to the cataloger selection requestunable to load in-cluster configuration, KUBERNETES_SERVICE_HOST and KUBERNETES_SERVICE_PORT must be definedMust be fulfilled before a deletion is carried out. If not possible, a 409 Conflict status will be returned.ObjectMeta is metadata that all persisted resources must have, which includes all objects users must create.UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names#uidsvolumeID used to identify the volume in cinder. More info: https://examples.k8s.io/mysql-cinder-pd/README.mdList of pods. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.mdSecretReference represents a Secret Reference. It has enough information to retrieve secret in any namespaceActions that the management system should take in response to container lifecycle events. Cannot be updated.Whether this container should allocate a TTY for itself, also requires 'stdin' to be true. Default is false.Uncovered a Duffel API token, which may compromise travel platform integrations and sensitive customer data.Discovered a Flickr Access Token, posing a risk of unauthorized photo management and potential data leakage.Uncovered a GCP API key, which could lead to unauthorized access to Google Cloud services and data breaches.Found a Shopify shared secret, posing a risk to application authentication and e-commerce platform security.Uncovered a Sidekiq Sensitive URL, potentially exposing internal job queues and sensitive operation details.Uncovered a Slack Legacy bot token, which could lead to compromised legacy bot operations and data exposure.Detected a Telegram Bot API Token, risking unauthorized bot operations and message interception on Telegram.targetAverageValue is the target value of the average of the metric across all relevant pods (as a quantity)invalid maven pom specification, require non-empty values for groupID: '%s', artifactID: '%s', version: '%s'labelSelector describes the limitation on access based on labels. It can only limit access, not broaden it.NetworkPolicyPeer describes a peer to allow traffic to/from. Only certain combinations of fields are allowedData contains arbitrary driver-specific data. The length of the raw data must be smaller or equal to 10 Ki.allocatable represents the volume resources of a node that are available for scheduling. This field is beta.CRI API v1alpha2 is deprecated since containerd v1.7 and removed in containerd v2.0. Use CRI API v1 instead.Removes any consecutive space characters (as defined by Unicode) from the start and end of the given string.provided source does not need a key. Make sure you are defining the right source or remove the flag --ssh-keyIdentified a GitHub App Token, which may compromise GitHub application integrations and source code security.invalid nil message info; this suggests memory corruption due to a race or shallow copy on the message structstream error when reading response body, may be caused by closed connection. Please retry. Original error: %wfsType to mount. Must be a filesystem type supported by the host operating system. Ex. "ext4", "xfs", "ntfs".UID of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uidsSpecifies the hostname of the Pod If not specified, the pod's hostname will be set to a system-defined value.Detected a Datadog Access Token, potentially risking monitoring and analytics data exposure and manipulation.Detected a Discord API key, potentially compromising communication channels and user data privacy on Discord. #define OSCHF_DebugGetExpectedAverageCrystalAmplitude NOROM_OSCHF_DebugGetExpectedAverageCrystalAmplitudeUncovered a RapidAPI Access Token, which could lead to unauthorized access to various APIs and data services.Identified a Sendinblue API token, which may compromise email marketing services and subscriber data privacy."token1": "xapp-1-A052FGTS2DL-5171572773297-610b6a11f4b7eb819e87b767d80e6575a3634791acb9a9ead051da879eb5b55e""token2": "xapp-1-IEMF8IMY1OQ-4037076220459-85c370b433e366de369c4ef5abdf41253519266982439a75af74a3d68d543fb6""token3": "xapp-1-BM3V7LC51DA-1441525068281-86641a2582cd0903402ab523e5bcc53b8253098c31591e529b55b41974d2e82f"Found a Slack Configuration access token, posing a risk to workspace configuration and sensitive data access.The number of active pods which have a Ready condition and are not terminating (without a deletionTimestamp).IPBlock defines policy on a particular IPBlock. If this field is set then neither of the other fields can be.[