{
  "agents": 0,
  "check_codes": [
    "context_file_invalid"
  ],
  "check_errors": 0,
  "check_passed": true,
  "check_warnings": 1,
  "claim": "This commit was scanned by HOL Guard and checked by the HOL Plugin Kit under the recorded versions, and the evidence carries a GitHub-signed provenance attestation. It does not mean vulnerability-free, and packaged runtimes were not load-tested.",
  "commands": 2,
  "commit_sha": "5e503e17034656a0646c1951b5e6bc0eddf832a7",
  "findings_total": 11,
  "generated_at": "2026-10-26T07:06:21.234041Z",
  "grade": "A",
  "guard_version": "3.58.0a4",
  "hooks": false,
  "max_severity": "high",
  "mcp_servers": [
    {
      "command": "hol-guard",
      "env_vars": [],
      "host": null,
      "name": "hol-guard",
      "package": null,
      "transport": "stdio"
    }
  ],
  "plugin_name": "hol-guard",
  "plugin_version": "0.1.1",
  "ref": "refs/heads/main",
  "repository": "hashgraph-online/hol-guard-plugin",
  "runtimes": [
    {
      "runtime": "agent-skills",
      "supported": true
    },
    {
      "runtime": "claude-code",
      "supported": true
    },
    {
      "runtime": "codex",
      "supported": true
    },
    {
      "runtime": "cursor",
      "supported": true
    },
    {
      "runtime": "gemini-cli",
      "supported": true
    },
    {
      "runtime": "mcp-registry",
      "supported": false
    },
    {
      "runtime": "opencode",
      "supported": true
    },
    {
      "runtime": "vscode",
      "supported": true
    }
  ],
  "sbom": {
    "components": 61,
    "format": "CycloneDX",
    "sha256": "54fbf2a276fc0797be4e0edca6de1b08018b3dfd607fc3ceac2e5717fde5a553",
    "spec_version": "1.6"
  },
  "scan_profile": "default",
  "schema_version": "plugin-release/v1",
  "score": 91,
  "sensitive_content_included": false,
  "skills": 2,
  "visibility": "public",
  "workflow_run_id": "40283678166"
}