{
  "repository": "chef/chef",
  "ref": "a49be34037c74369d819ab258df0bc33b8dac3e9",
  "methods": [
    {
      "slug": "formal",
      "title": "Formal verification and model checking"
    },
    {
      "slug": "static_analysis",
      "title": "Static analysis"
    },
    {
      "slug": "testing",
      "title": "Testing"
    },
    {
      "slug": "formatting",
      "title": "Formatting and hygiene"
    },
    {
      "slug": "supply_chain",
      "title": "Supply chain"
    },
    {
      "slug": "unclassified",
      "title": "Unclassified"
    }
  ],
  "verifications": [
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "New-Item -ItemType Directory -Force -Path $env:GITHUB_WORKSPACE\\tmp\\tm-creds"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/target_mode_integration.yml",
          "locator": "jobs.windows-host.steps[7] (Write SSH credentials file)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "New-Item -ItemType Directory -Force -Path $env:TEMP\\test_cookbook_md5\\recipes"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/windows-fips.yml",
          "locator": "jobs.windows.steps[6] (Run Chef Infra Client and verify FIPS enforcement)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "New-Item -ItemType Directory -Force -Path $env:TEMP\\test_cookbook_sha256\\recipes"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/windows-fips.yml",
          "locator": "jobs.windows.steps[6] (Run Chef Infra Client and verify FIPS enforcement)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "New-Item -ItemType Directory -Force -Path $winKeyDir"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/target_mode_integration.yml",
          "locator": "jobs.windows-host.steps[6] (Start sshd in WSL2 and generate SSH key pair)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "New-Item -ItemType Directory -Force -Path C:\\temp"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/windows-fips.yml",
          "locator": "jobs.windows.steps[6] (Run Chef Infra Client and verify FIPS enforcement)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "Remove-Item -Path $env:TEMP\\test_cookbook_md5 -Recurse -Force -ErrorAction SilentlyContinue"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/windows-fips.yml",
          "locator": "jobs.windows.steps[7] (Cleanup artifacts on runner)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "Remove-Item -Path $env:TEMP\\test_cookbook_sha256 -Recurse -Force -ErrorAction SilentlyContinue"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/windows-fips.yml",
          "locator": "jobs.windows.steps[7] (Cleanup artifacts on runner)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "Remove-Item -Path chef-infra-client-latest.hart -Force -ErrorAction SilentlyContinue"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/windows-fips.yml",
          "locator": "jobs.windows.steps[7] (Cleanup artifacts on runner)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "Set-Content -Path $env:TEMP\\test_cookbook_md5\\recipes\\default.rb"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/windows-fips.yml",
          "locator": "jobs.windows.steps[6] (Run Chef Infra Client and verify FIPS enforcement)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "Set-Content -Path $env:TEMP\\test_cookbook_sha256\\recipes\\default.rb"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/windows-fips.yml",
          "locator": "jobs.windows.steps[6] (Run Chef Infra Client and verify FIPS enforcement)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "Write-Host *** ALL TESTS PASSED: FIPS mode is correctly enforced ***"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/windows-fips.yml",
          "locator": "jobs.windows.steps[6] (Run Chef Infra Client and verify FIPS enforcement)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "Write-Host *** FAIL: SHA256 failed (exit code: $exitCodeSHA256) - FIPS blocking approved algorithm ***"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/windows-fips.yml",
          "locator": "jobs.windows.steps[6] (Run Chef Infra Client and verify FIPS enforcement)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "Write-Host *** TESTS FAILED ***"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/windows-fips.yml",
          "locator": "jobs.windows.steps[6] (Run Chef Infra Client and verify FIPS enforcement)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "Write-Host --- Test 1: MD5 Digest (should FAIL in FIPS mode) ---"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/windows-fips.yml",
          "locator": "jobs.windows.steps[6] (Run Chef Infra Client and verify FIPS enforcement)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "Write-Host --- Test 2: SHA256 Digest (should SUCCEED in FIPS mode) ---"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/windows-fips.yml",
          "locator": "jobs.windows.steps[6] (Run Chef Infra Client and verify FIPS enforcement)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "Write-Host === Cleaning up test artifacts ==="
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/windows-fips.yml",
          "locator": "jobs.windows.steps[7] (Cleanup artifacts on runner)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "Write-Host FIPS Verification Test Results"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/windows-fips.yml",
          "locator": "jobs.windows.steps[6] (Run Chef Infra Client and verify FIPS enforcement)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "Write-Host Starting FIPS Verification Tests"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/windows-fips.yml",
          "locator": "jobs.windows.steps[6] (Run Chef Infra Client and verify FIPS enforcement)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "Write-Host Test 1 - MD5 Result:"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/windows-fips.yml",
          "locator": "jobs.windows.steps[6] (Run Chef Infra Client and verify FIPS enforcement)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "Write-Host Test 2 - SHA256 Result:"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/windows-fips.yml",
          "locator": "jobs.windows.steps[6] (Run Chef Infra Client and verify FIPS enforcement)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "Write-Host ✓ Copied to chef-infra-client-latest.hart"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/windows-fips.yml",
          "locator": "jobs.windows.steps[3] (Build Habitat Package of Chef Infra Client)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "bundle exec cookstyle --chefstyle -c .rubocop.yml"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/lint.yml",
          "locator": "jobs.cookstyle.steps[3]"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "bundle exec rspec spec/functional/resource/chocolatey_package_spec.rb"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/func_spec.yml",
          "locator": "jobs.choco.steps[2]"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "bundle exec rspec spec/functional/resource/macos_userdefaults_spec.rb"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/func_spec.yml",
          "locator": "jobs.userdefaults.steps[3]"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "bundle exec rspec spec/integration/target_mode/target_mode_run_spec.rb --format doc"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/target_mode_integration.yml",
          "locator": "jobs.linux-host.steps[10] (Run target-mode cookbook convergence tests)"
        },
        {
          "path": ".github/workflows/target_mode_integration.yml",
          "locator": "jobs.windows-host.steps[9] (Run target-mode cookbook convergence tests)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "bundle exec rspec spec/integration/target_mode/transport_spec.rb --format doc"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/target_mode_integration.yml",
          "locator": "jobs.linux-host.steps[9] (Run Train transport connectivity tests)"
        },
        {
          "path": ".github/workflows/target_mode_integration.yml",
          "locator": "jobs.windows-host.steps[8] (Run Train transport connectivity tests)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "bundle exec tasks/bin/run_external_test chef/berkshelf main rake"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/gem_tests.yml",
          "locator": "jobs.berkshelf.steps[4] (Run berkshelf tests)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "bundle exec tasks/bin/run_external_test chef/chef-zero main rake pedant"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/gem_tests.yml",
          "locator": "jobs.chef-zero.steps[4] (Run chef-zero tests)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "bundle exec tasks/bin/run_external_test chef/cheffish main rake spec"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/gem_tests.yml",
          "locator": "jobs.cheffish.steps[4] (Run cheffish tests)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "bundle exec tasks/bin/run_external_test chef/chefspec main rake"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/gem_tests.yml",
          "locator": "jobs.chefspec.steps[4] (Run chefspec tests)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "deb [check-valid-until=no] https://snapshot.debian.org/archive/debian-security/20260901T000000Z bullseye-security main"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/func_spec.yml",
          "locator": "jobs.functional-docker.steps[2] (Install native deps (apt))"
        },
        {
          "path": ".github/workflows/unit_specs.yml",
          "locator": "jobs.unit-docker.steps[2] (Install native deps (apt))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "deb [check-valid-until=no] https://snapshot.debian.org/archive/debian/20260901T000000Z bullseye main"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/func_spec.yml",
          "locator": "jobs.functional-docker.steps[2] (Install native deps (apt))"
        },
        {
          "path": ".github/workflows/unit_specs.yml",
          "locator": "jobs.unit-docker.steps[2] (Install native deps (apt))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "deb [check-valid-until=no] https://snapshot.debian.org/archive/debian/20260901T000000Z bullseye-updates main"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/func_spec.yml",
          "locator": "jobs.functional-docker.steps[2] (Install native deps (apt))"
        },
        {
          "path": ".github/workflows/unit_specs.yml",
          "locator": "jobs.unit-docker.steps[2] (Install native deps (apt))"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "file /tmp/test_md5 do"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/selfhosted-linux-fips.yml",
          "locator": "jobs.linux-fips.steps[7] (Run Chef Infra Client and verify FIPS enforcement)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "file /tmp/test_sha256 do"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/selfhosted-linux-fips.yml",
          "locator": "jobs.linux-fips.steps[7] (Run Chef Infra Client and verify FIPS enforcement)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "file /tmp/test_sha512 do"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/selfhosted-linux-fips.yml",
          "locator": "jobs.linux-fips.steps[7] (Run Chef Infra Client and verify FIPS enforcement)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "file C:\\temp\\test_md5 do"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/windows-fips.yml",
          "locator": "jobs.windows.steps[6] (Run Chef Infra Client and verify FIPS enforcement)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "file C:\\temp\\test_sha256 do"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/windows-fips.yml",
          "locator": "jobs.windows.steps[6] (Run Chef Infra Client and verify FIPS enforcement)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "key_files = [/tmp/id_test]"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/target_mode_integration.yml",
          "locator": "jobs.linux-host.steps[8] (Write per-target credentials files)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "kitchen verify end-to-end-$EXPR"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/kitchen.yml",
          "locator": "jobs.win_x86_64.steps[6] (Kitchen Test)"
        },
        {
          "path": ".github/workflows/kitchen.yml",
          "locator": "jobs.mac_arm64.steps[6] (Kitchen Test)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "ssh-keyscan -p 2222 127.0.0.1 >> ~/.ssh/known_hosts 2>/dev/null"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/target_mode_integration.yml",
          "locator": "jobs.linux-host.steps[7] (Wait for SSH to become available on both containers)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "ssh-keyscan -p 2223 127.0.0.1 >> ~/.ssh/known_hosts 2>/dev/null"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/target_mode_integration.yml",
          "locator": "jobs.linux-host.steps[7] (Wait for SSH to become available on both containers)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    },
    {
      "tool": null,
      "method": "unclassified",
      "commands": [
        "touch spec/data/nodes/test.rb spec/data/nodes/default.rb spec/data/nodes/test.example.com.rb"
      ],
      "triggers": [
        "ci"
      ],
      "evidence": [
        {
          "path": ".github/workflows/target_mode_specs.yml",
          "locator": "jobs.target-mode-core.steps[3] (Create unit test node fixtures)"
        },
        {
          "path": ".github/workflows/target_mode_specs.yml",
          "locator": "jobs.target-mode-resources.steps[3] (Create unit test node fixtures)"
        },
        {
          "path": ".github/workflows/unit_specs.yml",
          "locator": "jobs.unit.steps[4] (Create unit test node fixtures)"
        },
        {
          "path": ".github/workflows/unit_specs.yml",
          "locator": "jobs.unit-docker.steps[4] (Create unit test node fixtures)"
        }
      ],
      "upstream": null,
      "docs": null,
      "exit_codes": {},
      "autofix": false,
      "declared_only": false
    }
  ]
}