{
"event": "PreToolUse",
"tool_name": "Bash",
"tool_input": {
"command": "echo \"=== H2: Hardcoded Credentials ===\" && grep -rn \"password.*=.*['\\\"]\" --include=\"*.php\" | grep -v \"getenv\\|_ENV\\|_SERVER\\|CredentialService\\|\/\/ \\|#\\|getMariaDbPassword\\|getRequired\\|PASSWORD\" | head -10",
"description": "Check H2 violations"
}
}
{
"tool_response": {
"stdout": "=== H3: eval\/shell_exec ===\nUseCases\/Pipeline\/RunPipelineUseCase.php:112: exec($cmd);\nInfrastructure\/Docs\/ChunkSyncService.php:524: $result = curl_exec($ch);\nInfrastructure\/Docs\/HybridSearchService.php:420: $result = curl_exec($ch);\nInfrastructure\/AI\/QdrantService.php:128: $result = curl_exec($ch);\nInfrastructure\/AI\/QdrantService.php:171: $result = curl_exec($ch);\nInfrastructure\/AI\/QdrantService.php:235: $result = curl_exec($ch);\nInfrastructure\/AI\/QdrantService.php:287: $result = curl_exec($ch);\nInfrastructure\/AI\/QdrantService.php:365: $result = curl_exec($ch);\nInfrastructure\/AI\/ClaudeService.php:204: $result = curl_exec($ch);\nInfrastructure\/AI\/ClaudeService.php:260: $result = curl_exec($ch);",
"stderr": "",
"interrupted": false,
"isImage": false
}
}