{
  "repo": "kube-oidc",
  "full_name": "tidbcloud/kube-oidc",
  "status": "scan_complete",
  "scan_started_at": "2026-03-28T14:12:22Z",
  "scan_completed_at": "2026-03-28T14:12:22Z",
  "expected_binaries": [
    {
      "name": "kube-oidc-login",
      "path": "cmd/kube-oidc-login/main.go",
      "status": "completed",
      "role": "primary_service"
    },
    {
      "name": "kube-oidc-proxy",
      "path": "cmd/kube-oidc-proxy/main.go",
      "status": "completed",
      "role": "primary_service"
    }
  ],
  "scanned_binaries": [
    {
      "name": "kube-oidc-login",
      "path": "cmd/kube-oidc-login/main.go",
      "output_file": "cmd-kube-oidc-login"
    },
    {
      "name": "kube-oidc-proxy",
      "path": "cmd/kube-oidc-proxy/main.go",
      "output_file": "cmd-kube-oidc-proxy"
    }
  ],
  "skipped_binaries": [],
  "files_generated": [
    "interfaces/cmd-kube-oidc-login.json",
    "interfaces/cmd-kube-oidc-proxy.json",
    "service-mapping/cmd-kube-oidc-login.json",
    "service-mapping/cmd-kube-oidc-proxy.json"
  ],
  "scan_progress": {
    "completed": 2,
    "skipped": 0,
    "total": 2
  },
  "review_status": "pending",
  "codex_scan_at": "2026-03-28T14:12:22Z",
  "codex_scan_verdict": "scan_complete",
  "codex_scan_note": "Fresh source-backed codex scan confirmed that both binaries are real runtime entrypoints. kube-oidc-login serves the browser-driven OIDC login flow and kubeconfig download path, while kube-oidc-proxy is an HTTP or HTTPS authentication proxy that validates OIDC tokens and forwards requests to the Kubernetes API server. The KB paths are now aligned to the real main.go entrypoints."
}