https://github.com/Zoo-Code-Org/Zoo-Code
· scanned 2026-06-16 01:14 UTC (2 months, 1 week ago)
318 raw signals (0 security + 318 graph)
Last scanned 2 months, 1 week ago · v1 · 318 actionable findings from 1 signal source. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.
Showing 188 of 318 actionable findings. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.
src/assets/marketplace/mcps.yml:1217
.github/workflows/marketplace-publish.yml
CI/CD securitySupply chainGithub actions
.github/workflows/cli-release.yml
CI/CD securitySupply chainGithub actions
webview-ui/vite.config.ts:144
Cors wildcard
webview-ui/src/components/chat/TerminalOutput.tsx:74
Dangerous innerhtml
webview-ui/src/components/common/MermaidButton.tsx:196
Dangerous innerhtml
webview-ui/src/components/history/TaskItem.tsx:84
Dangerous innerhtml
src/services/mcp/utils/callbackServer.ts:156
Direct innerhtml assignment
webview-ui/src/components/chat/ChatTextArea.tsx:785
Direct innerhtml assignment
webview-ui/src/components/common/MermaidBlock.tsx:108
Direct innerhtml assignment
apps/cli/src/commands/cli/upgrade.ts:1
Node child process
packages/core/src/worktree/worktree-include.ts:8
Node child process
packages/core/src/worktree/worktree-service.ts:8
Node child process
packages/types/scripts/publish-npm.cjs:5
Node child process
scripts/bootstrap.mjs:3
Node child process
scripts/code-server.js:11
Node child process
scripts/install-vsix.js:1
Node child process
src/services/code-index/semble/semble-cli.ts:1
Node child process
src/services/code-index/semble/semble-downloader.ts:7
Node child process
src/services/glob/list-files.ts:4
Node child process
src/services/ripgrep/diagnostic.ts:1
Node child process
src/services/ripgrep/index.ts:1
Node child process
src/services/search/file-search.ts:4
Node child process
src/utils/git.ts:4
Node child process
webview-ui/vite.config.ts:3
Node child process
apps/cli/package.json
LockfileReproducibilityGenerated repo pattern
apps/vscode-e2e/package.json
LockfileReproducibilityGenerated repo pattern
apps/vscode-nightly/package.json
LockfileReproducibilityGenerated repo pattern
packages/cloud/package.json
LockfileReproducibilityGenerated repo pattern
packages/config-eslint/package.json
LockfileReproducibilityGenerated repo pattern
packages/core/package.json
LockfileReproducibilityGenerated repo pattern
packages/ipc/package.json
LockfileReproducibilityGenerated repo pattern
packages/telemetry/package.json
LockfileReproducibilityGenerated repo pattern
packages/types/package.json
LockfileReproducibilityGenerated repo pattern
packages/vscode-shim/package.json
LockfileReproducibilityGenerated repo pattern
src/package.json
LockfileReproducibilityGenerated repo pattern
webview-ui/package.json
LockfileReproducibilityGenerated repo pattern
package.json
CI/CD securitySupply chainNpm
This page is publicly accessible at:
https://repobility.com/scan/1226948b-e1d5-4696-ade9-6034e1c8613c/
To check status programmatically (no auth required):
curl -s https://repobility.com/api/v1/public/scan/1226948b-e1d5-4696-ade9-6034e1c8613c/
Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.