# Linux Security Audit Report

- Run dir: `/home/wangyin/linux-security-audit/reports/mindspore-jenkins-smoke-package-20260610-021950`
- Generated: 2026-06-12T01:41:10.357102+00:00
- Host: `mindspore-jenkins-smoke-package` (x86_64)

## Module summary

| Module | Status | Summary |
|---|---|---|
| sensitive-info-scan | warn | 42055 unique findings (26075 actionable, 15980 likely-FP). critical=142 high=4688 medium=673 low=20572 info=0 |

## sensitive-info-scan

**critical**:142 **high**:4688 **medium**:673 **low**:20572 **likely_fp**:15980 **total_unique**:42055

Top findings (20 of 42055):

- [critical] **private_key** - `/root/.ssh/id_rsa:1` score=16.0 entropy=3.66 sensitive path: (?:^|/)id_(rsa|ed25519|ecdsa|dsa)(?:\.|$)
- [critical] **private_key** - `/home/jenkins/.ssh/id_rsa:1` score=16.0 entropy=3.66 sensitive path: (?:^|/)id_(rsa|ed25519|ecdsa|dsa)(?:\.|$)
- [critical] **pem-private-key** - `/root/.ssh/id_rsa:1` score=14.5 entropy=1.58 sensitive path: (?:^|/)id_(rsa|ed25519|ecdsa|dsa)(?:\.|$);very short secret
- [critical] **pem-private-key** - `/home/jenkins/.ssh/id_rsa:1` score=14.5 entropy=1.58 sensitive path: (?:^|/)id_(rsa|ed25519|ecdsa|dsa)(?:\.|$);very short secret
- [critical] **pem-private-key** - `/etc/ssl/private/ssl-cert-snakeoil.key:1` score=12.0 entropy=3.2 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **private_key** - `/etc/ssl/private/ssl-cert-snakeoil.key:1` score=12.0 entropy=3.53 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **pem-private-key** - `/mnt/sfs_turbo/ccache_analysis/mindspore2/build/mindspore/_deps/grpc-src/src/core/tsi/test_creds/client.key:1` score=12.0 entropy=3.2 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **private_key** - `/mnt/sfs_turbo/ccache_analysis/mindspore2/build/mindspore/_deps/grpc-src/src/core/tsi/test_creds/client.key:1` score=12.0 entropy=3.53 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **pem-private-key** - `/mnt/sfs_turbo/ccache_analysis/mindspore2/build/mindspore/_deps/grpc-src/src/core/tsi/test_creds/ca.key:1` score=12.0 entropy=3.2 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **private_key** - `/mnt/sfs_turbo/ccache_analysis/mindspore2/build/mindspore/_deps/grpc-src/src/core/tsi/test_creds/ca.key:1` score=12.0 entropy=3.53 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **pem-private-key** - `/mnt/sfs_turbo/ccache_analysis/mindspore2/build/mindspore/_deps/grpc-src/src/core/tsi/test_creds/badclient.key:1` score=12.0 entropy=3.2 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **private_key** - `/mnt/sfs_turbo/ccache_analysis/mindspore2/build/mindspore/_deps/grpc-src/src/core/tsi/test_creds/badclient.key:1` score=12.0 entropy=3.53 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **private_key** - `/mnt/sfs_turbo/ccache_analysis/mindspore2/build/mindspore/_deps/grpc-src/src/core/tsi/test_creds/client2.key:1` score=12.0 entropy=3.53 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **pem-private-key** - `/mnt/sfs_turbo/ccache_analysis/mindspore2/build/mindspore/_deps/grpc-src/src/core/tsi/test_creds/client2.key:1` score=12.0 entropy=3.2 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **pem-private-key** - `/mnt/sfs_turbo/ccache_analysis/mindspore2/build/mindspore/_deps/grpc-src/src/core/tsi/test_creds/badserver.key:1` score=12.0 entropy=3.2 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **private_key** - `/mnt/sfs_turbo/ccache_analysis/mindspore2/build/mindspore/_deps/grpc-src/src/core/tsi/test_creds/badserver.key:1` score=12.0 entropy=3.53 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **pem-private-key** - `/mnt/sfs_turbo/ccache_analysis/mindspore2/build/mindspore/_deps/grpc-src/src/core/tsi/test_creds/server0.key:1` score=12.0 entropy=3.2 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **private_key** - `/mnt/sfs_turbo/ccache_analysis/mindspore2/build/mindspore/_deps/grpc-src/src/core/tsi/test_creds/server0.key:1` score=12.0 entropy=3.53 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **pem-private-key** - `/mnt/sfs_turbo/ccache_analysis/mindspore2/build/mindspore/_deps/grpc-src/src/core/tsi/test_creds/server1.key:1` score=12.0 entropy=3.2 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$
- [critical] **private_key** - `/mnt/sfs_turbo/ccache_analysis/mindspore2/build/mindspore/_deps/grpc-src/src/core/tsi/test_creds/server1.key:1` score=12.0 entropy=3.53 sensitive path: \.pem$|\.key$|\.p12$|\.pfx$|\.jks$

Notes:
- Severity is heuristic; review high/critical first.
- `is_likely_fp` items are kept for audit but should be skimmed, not actioned blindly.