{"id":"bufferoverride.com/bufferoverride","name":"bufferoverride","commands":["bo"],"examples":[{"run":"bo run -- bun test","does":"Run a command, keep what it printed with secrets redacted, and search for an existing answer"},{"run":"bo search \"worker exited before finishing\"","does":"Search questions without signing in"},{"run":"bo get <id> --markdown","does":"Print a whole thread as markdown"},{"run":"bo login","does":"Sign in with a device code approved in your browser"},{"run":"bo mcp config","does":"Print the MCP server configuration for Claude Code (or --client vscode)"}],"description":"bo, the BufferOverride CLI: capture a failing command with its environment, redact the secrets, and find the existing answer before you ask. Also prints MCP config for coding agents.","homepage":"https://bufferoverride.com","repository":"https://github.com/profullstack/bufferoverride","license":"MIT","agentic":true,"latest_version":"0.1.0","vendor":"Profullstack","install":"curl -fsSL https://bufferoverride.com/install.sh | sh","publisher":"profullstack","w3bs":"w3bs install bufferoverride.com/bufferoverride","scan":{"status":"passed","scanner":"threatcrush 0.13.30","filesScanned":195,"summary":{"critical":0,"high":0,"medium":15,"low":24,"info":0},"malware":0,"truncated":false,"version":"0.1.0","sources":{"installer":"https://bufferoverride.com/install.sh","installerSha256":"409d951edb40150775b6be944e339acebcf1a57e34f54f0700ff1e0502b4b4e5","repository":"github.com/profullstack/bufferoverride","commit":"34de189bf2b06a538c54729fd84f7f3ef459e7a2"},"notes":[],"scannedAt":"2026-11-02T17:35:25.235Z","findings":[{"ruleId":"sql-template-interpolation","title":"SQL built from a template literal or f-string","severity":"medium","category":"code","cwe":"CWE-89","file":"source/apps/api/src/edit.ts","line":413,"malware":false},{"ruleId":"sql-template-interpolation","title":"SQL built from a template literal or f-string","severity":"medium","category":"code","cwe":"CWE-89","file":"source/apps/api/src/mcp.ts","line":409,"malware":false},{"ruleId":"sql-template-interpolation","title":"SQL built from a template literal or f-string","severity":"medium","category":"code","cwe":"CWE-89","file":"source/apps/api/src/moderation.ts","line":82,"malware":false},{"ruleId":"sql-template-interpolation","title":"SQL built from a template literal or f-string","severity":"medium","category":"code","cwe":"CWE-89","file":"source/apps/api/src/write.ts","line":274,"malware":false},{"ruleId":"sql-template-interpolation","title":"SQL built from a template literal or f-string","severity":"medium","category":"code","cwe":"CWE-89","file":"source/apps/api/src/write.ts","line":299,"malware":false},{"ruleId":"sql-template-interpolation","title":"SQL built from a template literal or f-string","severity":"medium","category":"code","cwe":"CWE-89","file":"source/apps/api/src/write.ts","line":307,"malware":false},{"ruleId":"js-unescaped-html-sink","title":"unescaped HTML rendering","severity":"medium","category":"code","cwe":"CWE-79","file":"source/apps/web/app/_components/markdown-area.tsx","line":99,"malware":false},{"ruleId":"js-unescaped-html-sink","title":"unescaped HTML rendering","severity":"medium","category":"code","cwe":"CWE-79","file":"source/apps/web/app/_components/markdown.tsx","line":24,"malware":false},{"ruleId":"js-unescaped-html-sink","title":"unescaped HTML rendering","severity":"medium","category":"code","cwe":"CWE-79","file":"source/apps/web/app/_components/pit-footer.tsx","line":17,"malware":false},{"ruleId":"js-open-redirect","title":"redirect to a non-constant destination","severity":"medium","category":"code","cwe":"CWE-601","file":"source/apps/web/app/ask/ask-form.tsx","line":96,"malware":false},{"ruleId":"js-unescaped-html-sink","title":"unescaped HTML rendering","severity":"medium","category":"code","cwe":"CWE-79","file":"source/apps/web/app/q/[id]/[slug]/page.tsx","line":229,"malware":false},{"ruleId":"js-unescaped-html-sink","title":"unescaped HTML rendering","severity":"medium","category":"code","cwe":"CWE-79","file":"source/apps/web/app/q/interactive.tsx","line":371,"malware":false},{"ruleId":"js-open-redirect","title":"redirect to a non-constant destination","severity":"medium","category":"code","cwe":"CWE-601","file":"source/apps/web/app/q/interactive.tsx","line":512,"malware":false},{"ruleId":"js-unescaped-html-sink","title":"unescaped HTML rendering","severity":"medium","category":"code","cwe":"CWE-79","file":"source/apps/web/app/q/interactive.tsx","line":787,"malware":false},{"ruleId":"sql-template-interpolation","title":"SQL built from a template literal or f-string","severity":"medium","category":"code","cwe":"CWE-89","file":"source/apps/web/app/sitemap.xml/route.ts","line":15,"malware":false},{"ruleId":"secret-generic-api-key","title":"Generic API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/api/test/coinpay.test.ts","line":9,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/api/test/coinpay.test.ts","line":9,"malware":false},{"ruleId":"secret-generic-api-key","title":"Generic API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/api/test/ownership.test.ts","line":12,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/api/test/ownership.test.ts","line":12,"malware":false},{"ruleId":"sql-template-interpolation","title":"SQL built from a template literal or f-string","severity":"low","category":"code","cwe":"CWE-89","file":"source/apps/api/test/ownership.test.ts","line":350,"malware":false},{"ruleId":"sql-template-interpolation","title":"SQL built from a template literal or f-string","severity":"low","category":"code","cwe":"CWE-89","file":"source/apps/api/test/ownership.test.ts","line":373,"malware":false},{"ruleId":"sql-template-interpolation","title":"SQL built from a template literal or f-string","severity":"low","category":"code","cwe":"CWE-89","file":"source/apps/api/test/ownership.test.ts","line":379,"malware":false},{"ruleId":"secret-generic-api-key","title":"Generic API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/api/test/profile.test.ts","line":11,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/api/test/profile.test.ts","line":11,"malware":false},{"ruleId":"secret-openai-key","title":"OpenAI API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/cli/test/cli.test.js","line":273,"malware":false},{"ruleId":"secret-anthropic-key","title":"Anthropic API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/cli/test/cli.test.js","line":273,"malware":false},{"ruleId":"secret-openai-key","title":"OpenAI API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/cli/test/cli.test.js","line":278,"malware":false},{"ruleId":"secret-anthropic-key","title":"Anthropic API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/cli/test/cli.test.js","line":278,"malware":false},{"ruleId":"secret-openai-key","title":"OpenAI API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/cli/test/cli.test.js","line":284,"malware":false},{"ruleId":"secret-anthropic-key","title":"Anthropic API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/cli/test/cli.test.js","line":284,"malware":false},{"ruleId":"secret-aws-access-key","title":"AWS Access Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/cli/test/redact.test.js","line":7,"malware":false},{"ruleId":"secret-openai-key","title":"OpenAI API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/cli/test/redact.test.js","line":8,"malware":false},{"ruleId":"secret-anthropic-key","title":"Anthropic API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/cli/test/redact.test.js","line":8,"malware":false},{"ruleId":"secret-database-url","title":"Database URL with credentials","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/cli/test/redact.test.js","line":9,"malware":false},{"ruleId":"secret-github-token","title":"GitHub Token","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/cli/test/redact.test.js","line":29,"malware":false},{"ruleId":"secret-github-token","title":"GitHub Token","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/cli/test/redact.test.js","line":34,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/cli/test/redact.test.js","line":41,"malware":false},{"ruleId":"secret-generic-api-key","title":"Generic API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/web/test/queries.test.ts","line":9,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/web/test/queries.test.ts","line":9,"malware":false}]}}