Azure/azure-sdk-for-rust

Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

33 of your 82 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 3.06s · analysis 15.69s · 11.3 MB · GitHub API rate-limit (preflight)

https://github.com/Azure/azure-sdk-for-rust · scanned 2026-06-05 22:38 UTC (4 days, 7 hours ago) · 10 languages

179 raw signals (77 security + 102 graph) 43rd percentile · Rust · large (100-500K LoC)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 4 days, 7 hours ago · v2 · 72 actionable findings from 2 signal sources. 54 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

88.9% cov · 44 findings

Score breakdown â 2026-05-18-v5

Component	Sub-score	Weight	Contribution
`structure_score`	60.0	0.15	9.00
`security_score`	53.7	0.25	13.43
`testing_score`	67.0	0.20	13.40
`documentation_score`	84.0	0.15	12.60
`practices_score`	82.0	0.15	12.30
`code_quality`	50.0	0.10	5.00
Overall		1.00	65.7

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 3 High 4 Medium 9 Low 41 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 28 System graph 44 Crowd 0 Layer: Cicd 5 Quality 48 Software 7 Security 4 Api 1 Frontend 2 Network 3 Hardware 2

Exclude dismissed / FP Exclude test files

All 1443 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`rust-toolchain.toml`	software	healthy	`rust-toolchain.toml`
`FAQ.md`	software	healthy	`FAQ.md`
`deny.toml`	software	healthy	`deny.toml`
`Cargo.toml`	software	healthy	`Cargo.toml`
`.mcp.json`	software	healthy	`.mcp.json`
`.rustfmt.toml`	software	healthy	`.rustfmt.toml`
`.taplo.toml`	software	healthy	`.taplo.toml`
`README.md`	software	healthy	`README.md`
`CONTRIBUTING.md`	software	healthy	`CONTRIBUTING.md`
`.markdownlint-cli2.yaml`	software	healthy	`.markdownlint-cli2.yaml`
`.clippy.toml`	software	healthy	`.clippy.toml`
`SUPPORT.md`	software	healthy	`SUPPORT.md`
`CODE_OF_CONDUCT.md`	software	healthy	`CODE_OF_CONDUCT.md`
`SECURITY.md`	software	healthy	`SECURITY.md`
`AGENTS.md`	software	healthy	`AGENTS.md`
`devcontainer.json`	software	healthy	`.devcontainer/devcontainer.json`
`Dockerfile`	software	healthy	`.devcontainer/Dockerfile`
`README.md`	software	healthy	`doc/README.md`
`distributed-tracing-for-rust-service-clients.md`	software	healthy	`doc/distributed-tracing-for-rust-service-clients.md`
`deprecation-process.md`	software	healthy	`doc/deprecation-process.md`
`checks.md`	software	healthy	`doc/checks.md`
`typespec-based-generation.md`	software	healthy	`doc/dev/typespec-based-generation.md`
`README.md`	software	healthy	`doc/dev/README.md`
`resourcemanager-generation.md`	software	healthy	`doc/dev/resourcemanager-generation.md`
`cgmanifest.json`	software	healthy	`eng/cgmanifest.json`
`CredScanSuppression.json`	software	healthy	`eng/CredScanSuppression.json`
`emitter-package.json`	software	healthy	`eng/emitter-package.json`
`emitter-package-lock.json`	software	healthy	`eng/emitter-package-lock.json`
`vcpkg.json`	software	healthy	`eng/vcpkg.json`
`README.md`	software	healthy	`eng/common/README.md`
`validate-service-label.instructions.md`	software	healthy	`eng/common/instructions/azsdk-tools/validate-service-label.…`
`typespec-to-sdk.instructions.md`	software	healthy	`eng/common/instructions/azsdk-tools/typespec-to-sdk.instruc…`
`typespec-docs.instructions.md`	software	healthy	`eng/common/instructions/azsdk-tools/typespec-docs.instructi…`
`verify-setup.instructions.md`	software	healthy	`eng/common/instructions/azsdk-tools/verify-setup.instructio…`
`README.md`	software	healthy	`eng/common/mcp/README.md`
`pullrequest-faq.md`	software	healthy	`eng/common/scripts/job-matrix/pullrequest-faq.md`
`README.md`	software	healthy	`eng/common/scripts/job-matrix/README.md`
`README.md`	software	healthy	`eng/common/scripts/X509Certificate2/README.md`
`codeowners-linter.yml`	software	healthy	`eng/common/pipelines/codeowners-linter.yml`
`ai-evals-tests.yml`	software	healthy	`eng/common/pipelines/ai-evals-tests.yml`
`archetype-typespec-emitter.yml`	software	healthy	`eng/common/pipelines/templates/archetype-typespec-emitter.y…`
`mark-release-completion.yml`	software	healthy	`eng/common/pipelines/templates/steps/mark-release-completio…`
`verify-samples.yml`	software	healthy	`eng/common/pipelines/templates/steps/verify-samples.yml`
`set-test-pipeline-version.yml`	software	healthy	`eng/common/pipelines/templates/steps/set-test-pipeline-vers…`
`save-package-properties.yml`	software	healthy	`eng/common/pipelines/templates/steps/save-package-propertie…`
`retain-run.yml`	software	healthy	`eng/common/pipelines/templates/steps/retain-run.yml`
`publish-1es-artifact.yml`	software	healthy	`eng/common/pipelines/templates/steps/publish-1es-artifact.y…`
`create-pull-request.yml`	software	healthy	`eng/common/pipelines/templates/steps/create-pull-request.yml`
`detect-api-changes.yml`	software	healthy	`eng/common/pipelines/templates/steps/detect-api-changes.yml`
`publish-artifact.yml`	software	healthy	`eng/common/pipelines/templates/steps/publish-artifact.yml`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`.devcontainer`	software	healthy	`.devcontainer`
`doc`	software	healthy	`doc`
`dev`	software	healthy	`doc/dev`
`eng`	software	healthy	`eng`
`common`	software	healthy	`eng/common`
`instructions`	software	healthy	`eng/common/instructions`
`azsdk-tools`	software	healthy	`eng/common/instructions/azsdk-tools`
`mcp`	software	healthy	`eng/common/mcp`
`scripts`	software	healthy	`eng/common/scripts`
`job-matrix`	software	healthy	`eng/common/scripts/job-matrix`
`X509Certificate2`	software	healthy	`eng/common/scripts/X509Certificate2`
`pipelines`	software	healthy	`eng/common/pipelines`
`templates`	software	healthy	`eng/common/pipelines/templates`
`steps`	software	healthy	`eng/common/pipelines/templates/steps`
`stages`	software	healthy	`eng/common/pipelines/templates/stages`
`jobs`	software	healthy	`eng/common/pipelines/templates/jobs`
`spelling`	software	healthy	`eng/common/spelling`
`tsp-client`	software	healthy	`eng/common/tsp-client`
`actions`	software	healthy	`eng/common/actions`
`login-to-github`	software	healthy	`eng/common/actions/login-to-github`
`testproxy`	software	healthy	`eng/common/testproxy`
`scripts`	software	healthy	`eng/common/testproxy/scripts`
`tag-merge`	software	healthy	`eng/common/testproxy/scripts/tag-merge`
`resolve-asset-conflict`	software	healthy	`eng/common/testproxy/scripts/resolve-asset-conflict`
`onboarding`	software	healthy	`eng/common/testproxy/onboarding`
`docgeneration`	software	healthy	`eng/common/docgeneration`
`templates`	software	healthy	`eng/common/docgeneration/templates`
`matthews`	software	healthy	`eng/common/docgeneration/templates/matthews`
`styles`	software	healthy	`eng/common/docgeneration/templates/matthews/styles`
`TestResources`	software	healthy	`eng/common/TestResources`
`clouds`	software	healthy	`eng/common/TestResources/clouds`
`knowledge`	software	healthy	`eng/common/knowledge`
`scripts`	software	healthy	`eng/scripts`
`pipelines`	software	healthy	`eng/pipelines`
`templates`	software	healthy	`eng/pipelines/templates`
`variables`	software	healthy	`eng/pipelines/templates/variables`
`steps`	software	healthy	`eng/pipelines/templates/steps`
`stages`	software	healthy	`eng/pipelines/templates/stages`
`jobs`	software	healthy	`eng/pipelines/templates/jobs`
`tools`	software	healthy	`eng/tools`
`generate_api_report`	software	healthy	`eng/tools/generate_api_report`
`src`	software	healthy	`eng/tools/generate_api_report/src`
`check_api_superset`	software	healthy	`eng/tools/check_api_superset`
`src`	software	healthy	`eng/tools/check_api_superset/src`
`samples`	software	healthy	`samples`
`cosmos_read_item_native_tls`	software	healthy	`samples/cosmos_read_item_native_tls`
`infra`	software	healthy	`samples/cosmos_read_item_native_tls/infra`
`src`	software	healthy	`samples/cosmos_read_item_native_tls/src`
`list_blobs_rustls_symcrypt`	software	healthy	`samples/list_blobs_rustls_symcrypt`
`infra`	software	healthy	`samples/list_blobs_rustls_symcrypt/infra`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`auth::sdk/storage/azure_storage_queue/examples/queue_storag…`	security	healthy	`sdk/storage/azure_storage_queue/examples/queue_storage_logg…`
`auth::sdk/identity/azure_identity/src/client_assertion_cred…`	security	healthy	`sdk/identity/azure_identity/src/client_assertion_credential…`
`auth::sdk/core/azure_core_amqp/src/cbs.rs`	security	healthy	`sdk/core/azure_core_amqp/src/cbs.rs`
`auth::eng/common/actions/login-to-github/action.yml`	security	healthy	`eng/common/actions/login-to-github/action.yml`
`auth::sdk/core/azure_core_amqp/src/fe2o3/cbs.rs`	security	healthy	`sdk/core/azure_core_amqp/src/fe2o3/cbs.rs`
`auth::sdk/storage/azure_storage_blob/examples/blob_storage_…`	security	healthy	`sdk/storage/azure_storage_blob/examples/blob_storage_loggin…`
`auth::eng/common/TestResources/deploy-test-resources.yml`	security	healthy	`eng/common/TestResources/deploy-test-resources.yml`
`auth::sdk/identity/azure_identity/src/client_certificate_cr…`	security	healthy	`sdk/identity/azure_identity/src/client_certificate_credenti…`
`auth::sdk/keyvault/azure_security_keyvault_certificates/tes…`	security	healthy	`sdk/keyvault/azure_security_keyvault_certificates/tests/cer…`
`auth::sdk/storage/azure_storage_blob/src/generated/models/m…`	security	healthy	`sdk/storage/azure_storage_blob/src/generated/models/method_…`
`auth::sdk/storage/azure_storage_blob/examples/storage_error…`	security	healthy	`sdk/storage/azure_storage_blob/examples/storage_error.rs`
`auth::sdk/identity/azure_identity/src/azure_pipelines_crede…`	security	healthy	`sdk/identity/azure_identity/src/azure_pipelines_credential.…`
`auth::.github/workflows/event-processor.yml`	security	healthy	`.github/workflows/event-processor.yml`

Label	Layer	Status	Path
`port:3001`	network	healthy	`.github/workflows/issue-triage.lock.yml`
`port:256`	network	healthy	`.github/workflows/issue-triage.lock.yml`
`port:64828`	network	healthy	`.github/workflows/issue-triage.lock.yml`
`port:02`	network	healthy	`.github/workflows/scheduled-event-processor.yml`
`port:30`	network	healthy	`.github/workflows/scheduled-event-processor.yml`
`port:08`	network	healthy	`.github/workflows/scheduled-event-processor.yml`
`port:03`	network	healthy	`.github/workflows/scheduled-event-processor.yml`
`port:09`	network	healthy	`.github/workflows/scheduled-event-processor.yml`
`port:04`	network	healthy	`.github/workflows/scheduled-event-processor.yml`
`port:10`	network	healthy	`.github/workflows/scheduled-event-processor.yml`
`port:05`	network	healthy	`.github/workflows/scheduled-event-processor.yml`
`port:11`	network	healthy	`.github/workflows/scheduled-event-processor.yml`

Label	Layer	Status	Path
`event-handler-with-azure`	cicd	healthy	`.github/workflows/event-processor.yml`
`copilot-setup-steps`	cicd	healthy	`.github/workflows/copilot-setup-steps.yml`
`activation`	cicd	healthy	`.github/workflows/issue-triage.lock.yml`
`agent`	cicd	healthy	`.github/workflows/issue-triage.lock.yml`
`conclusion`	cicd	healthy	`.github/workflows/issue-triage.lock.yml`
`detection`	cicd	healthy	`.github/workflows/issue-triage.lock.yml`
`safe_outputs`	cicd	healthy	`.github/workflows/issue-triage.lock.yml`
`post-apiview`	cicd	healthy	`.github/workflows/post-apiview.yml`
`event-handler`	cicd	healthy	`.github/workflows/scheduled-event-processor.yml`
`event-handler`	cicd	healthy	`.github/workflows/event.yml`
`build-samples`	cicd	healthy	`.github/workflows/build-samples.yml`

Label	Layer	Status	Path
`work`	software	healthy	`eng/common/docgeneration/templates/matthews/styles/main.js:…`
`httpGetAsync`	software	healthy	`eng/common/docgeneration/templates/matthews/styles/main.js:…`
`httpGetAsyncFallbackOnFail`	software	healthy	`eng/common/docgeneration/templates/matthews/styles/main.js:…`
`populateOptions`	software	healthy	`eng/common/docgeneration/templates/matthews/styles/main.js:…`
`httpGetLatestAsync`	software	healthy	`eng/common/docgeneration/templates/matthews/styles/main.js:…`
`loadedOtherVersions`	software	healthy	`eng/common/docgeneration/templates/matthews/styles/main.js:…`
`populateIndexList`	software	healthy	`eng/common/docgeneration/templates/matthews/styles/main.js:…`
`getPackageUrl`	software	healthy	`eng/common/docgeneration/templates/matthews/styles/main.js:…`

Label	Layer	Status	Path
`gha::event-processor`	cicd	healthy	`.github/workflows/event-processor.yml`
`gha::copilot-setup-steps`	cicd	healthy	`.github/workflows/copilot-setup-steps.yml`
`gha::issue-triage.lock`	cicd	healthy	`.github/workflows/issue-triage.lock.yml`
`gha::post-apiview`	cicd	healthy	`.github/workflows/post-apiview.yml`
`gha::scheduled-event-processor`	cicd	healthy	`.github/workflows/scheduled-event-processor.yml`
`gha::event`	cicd	healthy	`.github/workflows/event.yml`
`gha::build-samples`	cicd	healthy	`.github/workflows/build-samples.yml`

Label	Layer	Status	Path
`APP_CONFIG_ENDPOINT`	cicd	healthy	`—`
`GITHUB_TOKEN`	cicd	healthy	`—`
`COPILOT_GITHUB_TOKEN`	cicd	healthy	`—`
`GH_AW_GITHUB_MCP_SERVER_TOKEN`	cicd	healthy	`—`
`LABEL_SERVICE_API_KEY`	cicd	healthy	`—`
`GH_AW_GITHUB_TOKEN`	cicd	healthy	`—`

Label	Layer	Status	Path
`2.3.12.23`	network	healthy	`eng/common/pipelines/templates/steps/credscan.yml`
`127.0.0.1`	network	healthy	`.github/workflows/issue-triage.lock.yml`
`169.254.169.254`	network	healthy	`sdk/identity/azure_identity/src/virtual_machine_managed_ide…`
`7.1.1.1`	network	healthy	`sdk/core/typespec_client_core/src/time/mod.rs`
`7.1.1.2`	network	healthy	`sdk/core/typespec_client_core/src/time/mod.rs`

Label	Layer	Status	Path
`vps::azure`	hardware	healthy	`Cargo.toml`
`vps::aws`	hardware	healthy	`eng/common/spelling/package-lock.json`

Label	Layer	Status	Path
`openai_or_anthropic_key::eng/common/pipelines/templates/ste…`	security	healthy	`eng/common/pipelines/templates/steps/policheck.yml`
`password_literal::eng/common/testproxy/rotate.sh`	security	healthy	`eng/common/testproxy/rotate.sh`

Label	Layer	Status	Path
`repobility-clone-hfmzg08t`	software	healthy	`/tmp/repobility-clone-hfmzg08t`

Label	Layer	Status	Path
`loadbalancer`	network	healthy	`sdk/eventhubs/azure_messaging_eventhubs/tests/eventhubs_pro…`

Label	Layer	Status	Path
`image::.devcontainer/Dockerfile`	hardware	healthy	`.devcontainer/Dockerfile`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/07700c1e-19b1-40ee-bbec-eac6a8c09532/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/07700c1e-19b1-40ee-bbec-eac6a8c09532/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

Azure/azure-sdk-for-rust

Complete repo analysis

file 50+

directory 50+

auth 13

port 12

job 11

function 8

pipeline 7

env_var 6

service 5

vps 2

secret 2

repo 1

load_balancer 1

container 1