{
 "id": "c6b9c911c4cb",
 "url": "https://api.zfinia.com/x402/v1/ci-workflow-contract-audit",
 "host": "api.zfinia.com",
 "method": "POST",
 "type": "http",
 "x402Version": 2,
 "scheme": "exact",
 "network": "eip155:8453",
 "net": "base",
 "testnet": false,
 "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
 "price_atomic": "120000",
 "price_usd": 0.12,
 "band": "10c-1usd",
 "payTo": "0x25e8245f07d5e4873987293dad666afbe56a9608",
 "networks": [
  "eip155:8453"
 ],
 "description": "Audit a CI workflow for what it leaves movable or undeclared. Reports actions pinned to a tag rather than a commit - a tag can be moved by whoever owns the action, so the code a step runs can change without this file changing - missing permissions and timeouts, a job depending on one that is not declared, a pull_request_target trigger, and an expression interpolated straight into a shell command.",
 "serviceName": "CI Workflow Audit",
 "tags": [
  "configuration",
  "continuous integration",
  "supply chain hygiene",
  "linting",
  "developer tooling"
 ],
 "mimeType": null,
 "iconUrl": null,
 "bazaar": {
  "info": {
   "input": {
    "body": {
     "contract": {
      "required_jobs": [
       "build",
       "publish",
       "lint"
      ]
     },
     "workflow": {
      "jobs": {
       "build": {
        "runs-on": "ubuntu-latest",
        "steps": [
         {
          "uses": "actions/checkout@v4"
         },
         {
          "uses": "actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8"
         },
         {
          "name": "Greet",
          "run": "echo \"Building ${{ github.event.pull_request.title }}\""
         },
         {
          "run": "npm ci && npm test"
         }
        ]
       },
       "notify": {
        "needs": [
         "publish",
         "lint"
        ],
        "runs-on": "ubuntu-latest",
        "steps": [
         {
          "run": "echo done"
         }
        ]
       },
       "publish": {
        "needs": "build",
        "permissions": {
         "contents": "read",
         "packages": "write"
        },
        "runs-on": "ubuntu-latest",
        "steps": [
         {
          "uses": "actions/checkout@8f4b7f84864484a7bf31766abe9204da3cbe65b3"
         }
        ],
        "timeout-minutes": 15
       }
      },
      "name": "release",
      "on": {
       "pull_request_target": {},
       "push": {
        "branches": [
         "main"
        ]
       }
      }
     }
    },
    "bodyType": "json",
    "method": "POST",
    "type": "http"
   },
   "output": {
    "type": "json",
    "example_truncated": true,
    "chars": 2535
   }
  },
  "has_schema": true
 },
 "quality": {
  "calls30": 1,
  "payers30": 1,
  "lastCalledAt": "2026-10-04T08:02:44.497Z"
 },
 "catalogs": [
  {
   "name": "cdp",
   "lastUpdated": "2026-10-04T08:02:50.284Z",
   "seen_at": "2026-10-25T21:12:17.062Z"
  }
 ],
 "catalog_names": [
  "cdp"
 ],
 "first_seen_catalog": "2026-10-04T08:02:50.284Z",
 "last_updated_catalog": "2026-10-04T08:02:50.284Z",
 "first_seen": "2026-10-22",
 "templated": false,
 "category": "research/reports",
 "probe": {
  "at": "2026-10-22T00:28:06.837Z",
  "head_status": 402,
  "get_status": 402,
  "is_402": true,
  "status": "live",
  "body_json": true,
  "has_accepts": true,
  "accepts_count": 1,
  "accepts0": {
   "scheme": "exact",
   "network": "eip155:8453",
   "amount": "120000",
   "payTo": "0x25e8245f07d5e4873987293dad666afbe56a9608",
   "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
   "maxTimeoutSeconds": 60,
   "extra": {
    "name": "USD Coin",
    "version": "2"
   }
  },
  "price_matches_catalog": true,
  "payto_matches_catalog": true,
  "x402Version": 2,
  "has_bazaar_ext": true,
  "has_payment_required_header": true,
  "mpp_header": null,
  "channel": "header+body",
  "content_type": "application/json",
  "latency_ms": 384,
  "error": null,
  "cors": null,
  "ratelimit_headers": false,
  "server": "Vercel",
  "error_text": "Payment required",
  "resource_url_in_402": "https://api.zfinia.com/x402/v1/ci-workflow-contract-audit"
 },
 "onchain": {
  "resolved": true,
  "source": "forensics-2026-09-30",
  "payers": 4,
  "payments": 5,
  "usd": 0.034,
  "median_usd": 0.01,
  "first": "2026-08-30T15:12:51.000000Z",
  "last": "2026-09-30T06:01:57.000000Z",
  "sampler_share": 1,
  "non_sampler_payers": 0,
  "is_contract": false,
  "name": null
 },
 "status": "live",
 "valid_402": true,
 "dead": false,
 "verdict": "live",
 "live_reprobe": null,
 "featured": null,
 "page": "https://bazaar.agentexchange.work/r/c6b9c911c4cb",
 "seller": "https://bazaar.agentexchange.work/seller/api.zfinia.com",
 "seller_json": "https://bazaar.agentexchange.work/seller/api.zfinia.com.json",
 "paid": {
  "probe_now": {
   "url": "https://bazaar.agentexchange.work/r/c6b9c911c4cb/probe.json",
   "price_usd": 0.01,
   "protocol": "x402"
  },
  "feature": {
   "url": "https://bazaar.agentexchange.work/featured",
   "method": "POST",
   "body": {
    "id": "c6b9c911c4cb"
   },
   "price_usd": 1,
   "protocol": "x402"
  }
 },
 "license": "CC BY 4.0"
}