Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

venkybobby/SARO

https://github.com/venkybobby/SARO · scanned 2026-06-16 00:48 UTC (2 months, 1 week ago)

169 raw signals (0 security + 169 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 1 week ago · v1 · 147 actionable findings from 1 signal source. 22 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

100.0% cov · 147 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 35 Medium 24 Low 76 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 147 Crowd 0 Layer: Software 5 Frontend 2 Hardware 6 Security 8 Cicd 4 Quality 42 Api 80

Exclude dismissed / FP Exclude test files

All 3550 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`_database_url`	software	healthy	`database.py:30`
`_get_engine`	software	healthy	`database.py:82`
`_on_connect`	software	healthy	`database.py:96`
`_get_session_factory`	software	healthy	`database.py:103`
`__getattr__`	software	healthy	`database.py:116`
`connect`	software	healthy	`database.py:119`
`dispose`	software	healthy	`database.py:122`
`get_db`	software	healthy	`database.py:135`
`_iter_sql_statements`	software	healthy	`database.py:169`
`apply_pending_migrations`	software	healthy	`database.py:202`
`create_all_tables`	software	healthy	`database.py:284`
`ensure_app_schema`	software	healthy	`database.py:467`
`verify_migration_objects`	software	healthy	`database.py:575`
`health_check`	software	healthy	`database.py:620`
`_build_persona_seeds`	software	healthy	`database.py:675`
`seed_persona_permissions`	software	healthy	`database.py:697`
`text_not_whitespace`	software	healthy	`schemas.py:103`
`enforce_minimum_samples`	software	healthy	`schemas.py:222`
`output_not_blank`	software	healthy	`schemas.py:175`
`to_sample_in`	software	healthy	`schemas.py:180`
`to_batch_in`	software	healthy	`schemas.py:230`
`validate_weights`	software	healthy	`schemas.py:839`
`_non_empty_ids`	software	healthy	`schemas.py:980`
`_accept_requires_ack`	software	healthy	`schemas.py:1002`
`_sqlite_uuid_init`	software	healthy	`conftest.py:36`
`_default_get_db`	software	healthy	`conftest.py:73`
`_isolate_dependency_overrides`	software	healthy	`conftest.py:82`
`pytest_collection_modifyitems`	software	healthy	`conftest.py:102`
`pytest_sessionfinish`	software	healthy	`conftest.py:118`
`_secret_key`	software	healthy	`auth.py:32`
`_algorithm`	software	healthy	`auth.py:42`
`_expire_minutes`	software	healthy	`auth.py:46`
`hash_password`	software	healthy	`auth.py:79`
`verify_password`	software	healthy	`auth.py:84`
`create_access_token`	software	healthy	`auth.py:119`
`_decode_token`	software	healthy	`auth.py:140`
`get_current_user`	software	dead	`auth.py:154`
`require_write_access`	software	dead	`auth.py:198`
`_log_authz_denial`	software	healthy	`auth.py:229`
`require_role`	software	healthy	`auth.py:245`
`_check`	software	healthy	`auth.py:278`
`persona_required`	software	healthy	`auth.py:269`
`require_write_persona`	software	healthy	`auth.py:295`
`authenticate_user`	software	healthy	`auth.py:326`
`__init__`	software	healthy	`engine.py:594`
`_load_reference_data`	software	healthy	`engine.py:621`
`_build_incident_index`	software	healthy	`engine.py:726`
`check_and_refresh_index`	software	dead	`engine.py:746`
`_rebuild_incident_index`	software	healthy	`engine.py:768`
`_compute_domain_priors`	software	healthy	`engine.py:793`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`fly.toml`	software	healthy	`fly.toml`
`railway.toml`	software	healthy	`railway.toml`
`database.py`	software	healthy	`database.py`
`ADR-004-compliance-scope-locks.md`	software	healthy	`ADR-004-compliance-scope-locks.md`
`.safety-policy.yml`	software	healthy	`.safety-policy.yml`
`report-agent.md`	software	healthy	`report-agent.md`
`schemas.py`	software	healthy	`schemas.py`
`__init__.py`	software	healthy	`__init__.py`
`conftest.py`	software	healthy	`conftest.py`
`post-edit-version-check.sh`	software	healthy	`post-edit-version-check.sh`
`.mcp.json`	software	healthy	`.mcp.json`
`write-epic-prd.md`	software	healthy	`write-epic-prd.md`
`compliance-context.md`	software	healthy	`compliance-context.md`
`qa-framework.md`	software	healthy	`qa-framework.md`
`CLAUDE.md`	software	healthy	`CLAUDE.md`
`config.py`	software	healthy	`config.py`
`auth.py`	software	healthy	`auth.py`
`codebase-standards.md`	software	healthy	`codebase-standards.md`
`system-prompts.md`	software	healthy	`system-prompts.md`
`pre-commit-compliance-gate.sh`	software	healthy	`pre-commit-compliance-gate.sh`
`settings.json`	software	healthy	`settings.json`
`Dockerfile`	software	healthy	`Dockerfile`
`trace-review.md`	software	healthy	`trace-review.md`
`plugin.json`	software	healthy	`plugin.json`
`engine.py`	software	healthy	`engine.py`
`deployment-context.md`	software	healthy	`deployment-context.md`
`.pre-commit-config.yaml`	software	healthy	`.pre-commit-config.yaml`
`architecture-context.md`	software	healthy	`architecture-context.md`
`models.py`	software	healthy	`models.py`
`write-test.md`	software	healthy	`write-test.md`
`GAP_REQUIREMENTS_SPEC.md`	software	healthy	`GAP_REQUIREMENTS_SPEC.md`
`compliance-agent.md`	software	healthy	`compliance-agent.md`
`.env.example`	software	healthy	`.env.example`
`drift-agent.md`	software	healthy	`drift-agent.md`
`incident-response.md`	software	healthy	`incident-response.md`
`health-check.sh`	software	healthy	`health-check.sh`
`phase-gate-review.md`	software	healthy	`phase-gate-review.md`
`pre-edit-standards-check.sh`	software	healthy	`pre-edit-standards-check.sh`
`compliance-check.md`	software	healthy	`compliance-check.md`
`gunicorn.conf.py`	software	healthy	`gunicorn.conf.py`
`main.py`	software	healthy	`main.py`
`requirements.txt`	software	healthy	`requirements.txt`
`RB-005-enterprise-demo-prep.md`	software	healthy	`RB-005-enterprise-demo-prep.md`
`team-context.md`	software	healthy	`team-context.md`
`docker-compose.yml`	software	healthy	`docker-compose.yml`
`ruff.toml`	software	healthy	`ruff.toml`
`fly.toml`	software	healthy	`frontend/fly.toml`
`vite.config.js`	software	healthy	`frontend/vite.config.js`
`package.json`	software	healthy	`frontend/package.json`
`index.html`	software	healthy	`frontend/index.html`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`_EngineProxy`	software	healthy	`database.py:113`
`Base`	software	healthy	`database.py:129`
`TokenOut`	software	healthy	`schemas.py:22`
`LoginIn`	software	healthy	`schemas.py:30`
`UserCreateIn`	software	healthy	`schemas.py:35`
`UserOut`	software	healthy	`schemas.py:42`
`BootstrapIn`	software	healthy	`schemas.py:57`
`TenantCreateIn`	software	healthy	`schemas.py:68`
`TenantOut`	software	healthy	`schemas.py:73`
`SampleIn`	software	healthy	`schemas.py:87`
`AuditConfigIn`	software	healthy	`schemas.py:109`
`BatchIn`	software	healthy	`schemas.py:123`
`SARoDataSampleIn`	software	healthy	`schemas.py:152`
`SARoDataBatchIn`	software	healthy	`schemas.py:202`
`GateResultOut`	software	healthy	`schemas.py:248`
`BayesianDomainScore`	software	healthy	`schemas.py:256`
`BayesianScoresOut`	software	healthy	`schemas.py:269`
`MITCoverageOut`	software	healthy	`schemas.py:274`
`SimilarIncidentOut`	software	healthy	`schemas.py:282`
`FixedDeltaOut`	software	healthy	`schemas.py:297`
`AppliedRuleOut`	software	healthy	`schemas.py:312`
`RemediationOut`	software	healthy	`schemas.py:320`
`AuditReportOut`	software	healthy	`schemas.py:327`
`AuditListItemOut`	software	healthy	`schemas.py:352`
`DemoRequestIn`	software	healthy	`schemas.py:371`
`DemoRequestOut`	software	healthy	`schemas.py:381`
`DemoRequestStatusUpdateIn`	software	healthy	`schemas.py:395`
`AuditTraceOut`	software	healthy	`schemas.py:404`
`RemediateTraceIn`	software	healthy	`schemas.py:428`
`IDPConfigIn`	software	healthy	`schemas.py:437`
`UserEnrollmentIn`	software	healthy	`schemas.py:451`
`ClientOnboardingIn`	software	healthy	`schemas.py:458`
`ClientConfigOut`	software	healthy	`schemas.py:481`
`SCIMTokenRotateOut`	software	healthy	`schemas.py:504`
`AuditEventOut`	software	healthy	`schemas.py:511`
`ChainOfThoughtStep`	software	healthy	`schemas.py:528`
`ExecutiveStep`	software	healthy	`schemas.py:539`
`EnhancedTraceOut`	software	healthy	`schemas.py:546`
`DashboardKPIOut`	software	healthy	`schemas.py:575`
`SingleOutputAuditIn`	software	healthy	`schemas.py:594`
`SingleOutputAuditOut`	software	healthy	`schemas.py:620`
`AuditMetadataOut`	software	healthy	`schemas.py:636`
`GitHubIntegrationConfigIn`	software	healthy	`schemas.py:651`
`GitHubIntegrationOut`	software	healthy	`schemas.py:666`
`GitHubScanResultOut`	software	healthy	`schemas.py:677`
`AuditDashboardItemOut`	software	healthy	`schemas.py:692`
`TraceExportOut`	software	healthy	`schemas.py:717`
`TraceVerifyIn`	software	healthy	`schemas.py:725`
`TraceVerifyOut`	software	healthy	`schemas.py:729`
`AIMSDocumentIn`	software	healthy	`schemas.py:739`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`GET /health`	api	healthy	`main.py`
`GET /`	api	healthy	`main.py`
`GET /unread-count`	api	healthy	`routers/notifications.py`
`PATCH /{notification_id}/read`	api	healthy	`routers/notifications.py`
`POST /read-all`	api	healthy	`routers/notifications.py`
`GET /stream`	api	healthy	`routers/notifications.py`
`POST /{audit_id}/export`	api	healthy	`routers/trace_export.py`
`GET /{audit_id}/export.pdf`	api	healthy	`routers/trace_export.py`
`POST /{audit_id}/verify`	api	healthy	`routers/trace_export.py`
`PATCH /remediation/traces/{trace_id}/remediate`	api	healthy	`routers/remediation.py`
`POST /remediation/traces/{trace_id}/create-jira-issue`	api	healthy	`routers/remediation.py`
`GET /remediation/audits/{audit_id}/progress`	api	healthy	`routers/remediation.py`
`GET /remediation/audits/{audit_id}/traces`	api	healthy	`routers/remediation.py`
`GET /remediation/oauth/jira/start`	api	healthy	`routers/remediation.py`
`GET /remediation/oauth/jira/callback`	api	healthy	`routers/remediation.py`
`GET /remediation`	api	healthy	`routers/remediation.py`
`POST /remediation/bulk-remediate`	api	healthy	`routers/remediation.py`
`POST /remediation/steps`	api	healthy	`routers/remediation.py`
`POST /coverage/systems`	api	healthy	`routers/remediation.py`
`GET /coverage`	api	healthy	`routers/remediation.py`
`PUT /`	api	healthy	`routers/risk_config.py`
`DELETE /`	api	healthy	`routers/risk_config.py`
`GET /summary`	api	healthy	`routers/reports.py`
`GET /{audit_id}`	api	healthy	`routers/reports.py`
`GET /{audit_id}/mit`	api	healthy	`routers/reports.py`
`GET /{audit_id}/delta`	api	healthy	`routers/reports.py`
`GET /{audit_id}/rules`	api	healthy	`routers/reports.py`
`GET /{audit_id}/incidents`	api	healthy	`routers/reports.py`
`GET /nist-coverage`	api	healthy	`routers/reports.py`
`POST /{audit_id}/iso42001-annex`	api	healthy	`routers/reports.py`
`GET /engine/integrity`	api	healthy	`routers/reports.py`
`GET /incident-corpus-stats`	api	healthy	`routers/reports.py`
`POST /`	api	healthy	`routers/clients.py`
`GET /{tenant_id}`	api	healthy	`routers/clients.py`
`POST /{tenant_id}/test-sso`	api	healthy	`routers/clients.py`
`POST /{tenant_id}/scim/rotate-token`	api	healthy	`routers/clients.py`
`POST /erasure-request`	api	healthy	`routers/governance.py`
`POST /retention-policy`	api	healthy	`routers/governance.py`
`GET /docs`	api	healthy	`routers/governance.py`
`GET /ir-plan`	api	healthy	`routers/governance.py`
`GET /validation-status`	api	healthy	`routers/evf_sprint3.py`
`GET /validation-status/{framework}`	api	healthy	`routers/evf_sprint3.py`
`GET /qco/expiry-alerts`	api	healthy	`routers/evf_sprint3.py`
`POST /admin/expiry-scan`	api	healthy	`routers/evf_sprint3.py`
`GET /verify-chain`	api	healthy	`routers/audit_chain.py`
`GET /api/v1/sso/metadata/{tenant_slug}`	api	healthy	`routers/sso.py`
`GET /api/v1/sso/login/{tenant_slug}`	api	healthy	`routers/sso.py`
`POST /api/v1/sso/acs/{tenant_slug}`	api	healthy	`routers/sso.py`
`POST /api/v1/sso/magic-link`	api	healthy	`routers/sso.py`
`GET /kpis`	api	healthy	`routers/dashboard.py`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`IF`	data	healthy	`migrations/011_evf_sprint1_tables.sql`
`evf_sme_engagements`	data	healthy	`migrations/011_evf_sprint1_tables.sql`
`evf_engagement_transitions`	data	healthy	`migrations/011_evf_sprint1_tables.sql`
`evf_validation_gates`	data	healthy	`migrations/011_evf_sprint1_tables.sql`
`insight_actions`	data	healthy	`migrations/021_create_insight_actions.sql`
`controls`	data	healthy	`migrations/011_unified_control_library.sql`
`control_framework_mappings`	data	healthy	`migrations/011_unified_control_library.sql`
`evf_qco_registry`	data	healthy	`migrations/012_evf_sprint2_tables.sql`
`evf_publication_events`	data	healthy	`migrations/012_evf_sprint2_tables.sql`
`ai_systems`	data	healthy	`migrations/010_ai_system_inventory.sql`
`system_audits`	data	healthy	`migrations/010_ai_system_inventory.sql`
`hf_sample_queue`	data	healthy	`migrations/007_hf_sample_queue.sql`
`registered_ai_systems`	data	healthy	`migrations/005_add_registered_ai_systems.sql`
`evaluation_runs`	data	healthy	`migrations/014_evaluation_runs.sql`
`notifications`	data	healthy	`migrations/006_add_notifications.sql`
`persona_permissions`	data	healthy	`migrations/004_add_persona_permissions.sql`
`evf_expiry_notifications`	data	healthy	`migrations/013_evf_sprint3_tables.sql`
`statements`	data	healthy	`migrations/000_create_core_tables.sql`
`ai_incidents`	data	healthy	`migrations/000_create_core_tables.sql`
`aigp_principles`	data	healthy	`migrations/000_create_core_tables.sql`
`demo_requests`	data	healthy	`migrations/000_create_core_tables.sql`
`eu_ai_act_rules`	data	healthy	`migrations/000_create_core_tables.sql`
`governance_rules`	data	healthy	`migrations/000_create_core_tables.sql`
`mit_risks`	data	healthy	`migrations/000_create_core_tables.sql`
`nist_ai_rmf_controls`	data	healthy	`migrations/000_create_core_tables.sql`
`tenants`	data	healthy	`migrations/000_create_core_tables.sql`
`aims_documents`	data	healthy	`migrations/000_create_core_tables.sql`
`client_configs`	data	healthy	`migrations/000_create_core_tables.sql`
`github_integrations`	data	healthy	`migrations/000_create_core_tables.sql`
`tenant_risk_configs`	data	healthy	`migrations/000_create_core_tables.sql`
`users`	data	healthy	`migrations/000_create_core_tables.sql`
`audit_events`	data	healthy	`migrations/000_create_core_tables.sql`
`audits`	data	healthy	`migrations/000_create_core_tables.sql`
`audit_metadata`	data	healthy	`migrations/000_create_core_tables.sql`
`audit_traces`	data	healthy	`migrations/000_create_core_tables.sql`
`enhanced_traces`	data	healthy	`migrations/000_create_core_tables.sql`
`github_scan_results`	data	healthy	`migrations/000_create_core_tables.sql`
`iso42001_documents`	data	healthy	`migrations/000_create_core_tables.sql`
`risk_metadata`	data	healthy	`migrations/000_create_core_tables.sql`
`sample_findings`	data	healthy	`migrations/000_create_core_tables.sql`
`scan_reports`	data	healthy	`migrations/000_create_core_tables.sql`
`schema_migrations`	data	healthy	`migrations/000_schema_migrations_tracking.sql`
`statement`	data	healthy	`main.py`
`Base`	data	healthy	`database.py`
`Tenant`	data	healthy	`models.py`
`User`	data	healthy	`models.py`
`Audit`	data	healthy	`models.py`
`ScanReport`	data	healthy	`models.py`
`AuditMetadata`	data	healthy	`models.py`
`RiskMetadata`	data	healthy	`models.py`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`frontend`	software	healthy	`frontend`
`src`	software	healthy	`frontend/src`
`api`	software	healthy	`frontend/src/api`
`test`	software	healthy	`frontend/src/test`
`utils`	software	healthy	`frontend/src/utils`
`components`	software	healthy	`frontend/src/components`
`ui`	software	healthy	`frontend/src/components/ui`
`pages`	software	healthy	`frontend/src/pages`
`hooks`	software	healthy	`frontend/src/hooks`
`styles`	software	healthy	`frontend/src/styles`
`rule_packs`	software	healthy	`rule_packs`
`eu-ai-act`	software	healthy	`rule_packs/eu-ai-act`
`v1.0.0`	software	healthy	`rule_packs/eu-ai-act/v1.0.0`
`nist-ai-rmf`	software	healthy	`rule_packs/nist-ai-rmf`
`v1.0.0`	software	healthy	`rule_packs/nist-ai-rmf/v1.0.0`
`aigp`	software	healthy	`rule_packs/aigp`
`v1.0.0`	software	healthy	`rule_packs/aigp/v1.0.0`
`iso-42001`	software	healthy	`rule_packs/iso-42001`
`v1.0.0`	software	healthy	`rule_packs/iso-42001/v1.0.0`
`tests`	software	healthy	`tests`
`fixtures`	software	healthy	`tests/fixtures`
`fp_baseline`	software	healthy	`tests/fixtures/fp_baseline`
`regression`	software	healthy	`tests/regression`
`middleware`	software	healthy	`middleware`
`docs`	software	healthy	`docs`
`legal`	software	healthy	`docs/legal`
`metrics`	software	healthy	`docs/metrics`
`evf`	software	healthy	`docs/evf`
`scripts`	software	healthy	`scripts`
`quality`	software	healthy	`quality`
`saro-data-framework`	software	healthy	`saro-data-framework`
`tests`	software	healthy	`saro-data-framework/tests`
`output`	software	healthy	`saro-data-framework/output`
`src`	software	healthy	`saro-data-framework/src`
`saro_data_framework`	software	healthy	`saro-data-framework/src/saro_data_framework`
`converters`	software	healthy	`saro-data-framework/src/saro_data_framework/converters`
`saro_data`	software	healthy	`saro-data-framework/src/saro_data`
`converters`	software	healthy	`saro-data-framework/src/saro_data/converters`
`files1`	software	healthy	`files1`
`.claude`	software	healthy	`.claude`
`commands`	software	healthy	`.claude/commands`
`agents`	software	healthy	`.claude/agents`
`skills`	software	healthy	`.claude/skills`
`ci-debugger`	software	healthy	`.claude/skills/ci-debugger`
`compliance-guard`	software	healthy	`.claude/skills/compliance-guard`
`deploy-railway`	software	healthy	`.claude/skills/deploy-railway`
`rule-pack-edit`	software	healthy	`.claude/skills/rule-pack-edit`
`saro-dev`	software	healthy	`.claude/skills/saro-dev`
`drift-sentinel`	software	healthy	`.claude/skills/drift-sentinel`
`api-conventions`	software	healthy	`.claude/skills/api-conventions`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`auth::tests/regression/manifest.yaml`	security	healthy	`tests/regression/manifest.yaml`
`auth::saro-data-framework/src/saro_data/cli.py`	security	healthy	`saro-data-framework/src/saro_data/cli.py`
`auth::routers/aims.py`	security	healthy	`routers/aims.py`
`auth::main.py`	security	healthy	`main.py`
`auth::middleware/rate_limiter.py`	security	healthy	`middleware/rate_limiter.py`
`auth::pre-edit-standards-check.sh`	security	healthy	`pre-edit-standards-check.sh`
`auth::saro-data-framework/src/saro_data/runner.py`	security	healthy	`saro-data-framework/src/saro_data/runner.py`
`auth::.github/workflows/claude-security-audit.yml`	security	healthy	`.github/workflows/claude-security-audit.yml`
`auth::routers/sso.py`	security	healthy	`routers/sso.py`
`auth::routers/demo.py`	security	healthy	`routers/demo.py`
`auth::schemas.py`	security	healthy	`schemas.py`
`auth::tests/test_s000_seed.py`	security	healthy	`tests/test_s000_seed.py`
`auth::models.py`	security	healthy	`models.py`
`auth::saro-data-framework/src/saro_data_framework/cli.py`	security	healthy	`saro-data-framework/src/saro_data_framework/cli.py`
`auth::engine.py`	security	healthy	`engine.py`
`auth::frontend/src/pages/Login.jsx`	security	healthy	`frontend/src/pages/Login.jsx`
`auth::routers/onboarding.py`	security	healthy	`routers/onboarding.py`
`auth::tests/test_epic9_persona.py`	security	healthy	`tests/test_epic9_persona.py`
`auth::auth.py`	security	healthy	`auth.py`
`auth::tests/test_sar005_sso.py`	security	healthy	`tests/test_sar005_sso.py`
`auth::config.py`	security	healthy	`config.py`
`auth::saro-data-framework/output/pii_masking_batch.json`	security	healthy	`saro-data-framework/output/pii_masking_batch.json`
`auth::tests/test_specs.py`	security	healthy	`tests/test_specs.py`
`auth::.claude/skills/security-audit/SKILL.md`	security	healthy	`.claude/skills/security-audit/SKILL.md`
`auth::routers/ingest.py`	security	healthy	`routers/ingest.py`
`auth::routers/remediation.py`	security	healthy	`routers/remediation.py`
`auth::tests/test_live005_live006.py`	security	healthy	`tests/test_live005_live006.py`
`auth::scripts/gen_fix_spec.js`	security	healthy	`scripts/gen_fix_spec.js`
`auth::tests/test_epic7_onboarding.py`	security	healthy	`tests/test_epic7_onboarding.py`
`auth::services/jira.py`	security	healthy	`services/jira.py`
`auth::frontend/src/pages/DemoEntry.jsx`	security	healthy	`frontend/src/pages/DemoEntry.jsx`
`auth::tests/fixtures/fp_baseline/corpus.json`	security	healthy	`tests/fixtures/fp_baseline/corpus.json`
`auth::.github/workflows/deploy.yml`	security	healthy	`.github/workflows/deploy.yml`
`auth::.env.example`	security	healthy	`.env.example`
`auth::scripts/seed_demo_tenant.py`	security	healthy	`scripts/seed_demo_tenant.py`
`auth::requirements.txt`	security	healthy	`requirements.txt`
`auth::.claude/skills/api-conventions/SKILL.md`	security	healthy	`.claude/skills/api-conventions/SKILL.md`
`auth::routers/auth.py`	security	healthy	`routers/auth.py`
`auth::.github/workflows/claude-pr-review.yml`	security	healthy	`.github/workflows/claude-pr-review.yml`
`auth::tests/test_gap4_rate_limiting.py`	security	healthy	`tests/test_gap4_rate_limiting.py`
`auth::services/saml_service.py`	security	healthy	`services/saml_service.py`
`auth::services/persona_service.py`	security	healthy	`services/persona_service.py`
`auth::rule_packs/aigp/v1.0.0/rules.yaml`	security	healthy	`rule_packs/aigp/v1.0.0/rules.yaml`

Label	Layer	Status	Path
`/Settings`	frontend	healthy	`frontend/src/pages/Settings.jsx`
`/AIInsights`	frontend	healthy	`frontend/src/pages/AIInsights.jsx`
`/RulePacks`	frontend	healthy	`frontend/src/pages/RulePacks.jsx`
`/RiskRegister.test`	frontend	healthy	`frontend/src/pages/RiskRegister.test.jsx`
`/ClaimsMatrix`	frontend	healthy	`frontend/src/pages/ClaimsMatrix.jsx`
`/Evaluations`	frontend	healthy	`frontend/src/pages/Evaluations.jsx`
`/RiskRegister`	frontend	healthy	`frontend/src/pages/RiskRegister.jsx`
`/RiskForm`	frontend	healthy	`frontend/src/pages/RiskForm.jsx`
`/RiskDetail.test`	frontend	healthy	`frontend/src/pages/RiskDetail.test.jsx`
`/Onboarding`	frontend	healthy	`frontend/src/pages/Onboarding.jsx`
`/Reports`	frontend	healthy	`frontend/src/pages/Reports.jsx`
`/ComplianceHub`	frontend	healthy	`frontend/src/pages/ComplianceHub.jsx`
`/TrustCenter`	frontend	healthy	`frontend/src/pages/TrustCenter.jsx`
`/DemoEntry`	frontend	healthy	`frontend/src/pages/DemoEntry.jsx`
`/Aims`	frontend	healthy	`frontend/src/pages/Aims.jsx`
`/TraceView`	frontend	healthy	`frontend/src/pages/TraceView.jsx`
`/CoverageGap`	frontend	healthy	`frontend/src/pages/CoverageGap.jsx`
`/GovernanceDocs`	frontend	healthy	`frontend/src/pages/GovernanceDocs.jsx`
`/KnowledgePortal`	frontend	healthy	`frontend/src/pages/KnowledgePortal.jsx`
`/RiskDetail`	frontend	healthy	`frontend/src/pages/RiskDetail.jsx`
`/TrustCenter.test`	frontend	healthy	`frontend/src/pages/TrustCenter.test.jsx`
`/Governance`	frontend	healthy	`frontend/src/pages/Governance.jsx`
`/AIInsights.test`	frontend	healthy	`frontend/src/pages/AIInsights.test.jsx`
`/TraceView.test`	frontend	healthy	`frontend/src/pages/TraceView.test.jsx`
`/Remediation`	frontend	healthy	`frontend/src/pages/Remediation.jsx`
`/Dashboard`	frontend	healthy	`frontend/src/pages/Dashboard.jsx`
`/AdminSettings`	frontend	healthy	`frontend/src/pages/AdminSettings.jsx`
`/RiskSummary`	frontend	healthy	`frontend/src/pages/RiskSummary.jsx`
`/HowSaroReasons`	frontend	healthy	`frontend/src/pages/HowSaroReasons.jsx`
`/DriftAlerts`	frontend	healthy	`frontend/src/pages/DriftAlerts.jsx`
`/Upload`	frontend	healthy	`frontend/src/pages/Upload.jsx`
`/RiskForm.test`	frontend	healthy	`frontend/src/pages/RiskForm.test.jsx`
`/Login`	frontend	healthy	`frontend/src/pages/Login.jsx`
`/EvfAdmin`	frontend	healthy	`frontend/src/pages/EvfAdmin.jsx`
`/demo`	frontend	healthy	`frontend/src/App.jsx`
`/login`	frontend	healthy	`frontend/src/App.jsx`
`/app`	frontend	healthy	`frontend/src/App.jsx`
`/dashboard`	frontend	healthy	`frontend/src/App.jsx`
`/`	frontend	healthy	`frontend/src/App.jsx`
`*`	frontend	healthy	`frontend/src/App.jsx`

Label	Layer	Status	Path
`App`	frontend	healthy	`frontend/src/App.jsx`
`Sidebar`	frontend	healthy	`frontend/src/components/Sidebar.jsx`
`RegCoverage`	frontend	healthy	`frontend/src/components/RegCoverage.jsx`
`MetricsRow`	frontend	healthy	`frontend/src/components/MetricsRow.jsx`
`FlowStrip`	frontend	healthy	`frontend/src/components/FlowStrip.jsx`
`EngineScores`	frontend	healthy	`frontend/src/components/EngineScores.jsx`
`LiveFeed`	frontend	healthy	`frontend/src/components/LiveFeed.jsx`
`Settings`	frontend	healthy	`frontend/src/pages/Settings.jsx`
`AIInsights`	frontend	healthy	`frontend/src/pages/AIInsights.jsx`
`RulePacks`	frontend	healthy	`frontend/src/pages/RulePacks.jsx`
`ClaimsMatrix`	frontend	healthy	`frontend/src/pages/ClaimsMatrix.jsx`
`Evaluations`	frontend	healthy	`frontend/src/pages/Evaluations.jsx`
`RiskRegister`	frontend	healthy	`frontend/src/pages/RiskRegister.jsx`
`RiskForm`	frontend	healthy	`frontend/src/pages/RiskForm.jsx`
`Onboarding`	frontend	healthy	`frontend/src/pages/Onboarding.jsx`
`Reports`	frontend	healthy	`frontend/src/pages/Reports.jsx`
`ComplianceHub`	frontend	healthy	`frontend/src/pages/ComplianceHub.jsx`
`TrustCenter`	frontend	healthy	`frontend/src/pages/TrustCenter.jsx`
`DemoEntry`	frontend	healthy	`frontend/src/pages/DemoEntry.jsx`
`Aims`	frontend	healthy	`frontend/src/pages/Aims.jsx`
`TraceView`	frontend	healthy	`frontend/src/pages/TraceView.jsx`
`CoverageGap`	frontend	healthy	`frontend/src/pages/CoverageGap.jsx`
`GovernanceDocs`	frontend	healthy	`frontend/src/pages/GovernanceDocs.jsx`
`KnowledgePortal`	frontend	healthy	`frontend/src/pages/KnowledgePortal.jsx`
`RiskDetail`	frontend	healthy	`frontend/src/pages/RiskDetail.jsx`
`Governance`	frontend	healthy	`frontend/src/pages/Governance.jsx`
`Remediation`	frontend	healthy	`frontend/src/pages/Remediation.jsx`
`Dashboard`	frontend	healthy	`frontend/src/pages/Dashboard.jsx`
`AdminSettings`	frontend	healthy	`frontend/src/pages/AdminSettings.jsx`
`RiskSummary`	frontend	healthy	`frontend/src/pages/RiskSummary.jsx`
`HowSaroReasons`	frontend	healthy	`frontend/src/pages/HowSaroReasons.jsx`
`DriftAlerts`	frontend	healthy	`frontend/src/pages/DriftAlerts.jsx`
`Upload`	frontend	healthy	`frontend/src/pages/Upload.jsx`
`Login`	frontend	healthy	`frontend/src/pages/Login.jsx`
`EvfAdmin`	frontend	healthy	`frontend/src/pages/EvfAdmin.jsx`

Label	Layer	Status	Path
`009_warning_banner_active.sql`	data	healthy	`migrations/009_warning_banner_active.sql`
`011_evf_sprint1_tables.sql`	data	healthy	`migrations/011_evf_sprint1_tables.sql`
`017_hashed_password_nullable.sql`	data	healthy	`migrations/017_hashed_password_nullable.sql`
`021_create_insight_actions.sql`	data	healthy	`migrations/021_create_insight_actions.sql`
`003_add_hash_chain_columns.sql`	data	healthy	`migrations/003_add_hash_chain_columns.sql`
`011_unified_control_library.sql`	data	healthy	`migrations/011_unified_control_library.sql`
`012_evf_sprint2_tables.sql`	data	healthy	`migrations/012_evf_sprint2_tables.sql`
`010_ai_system_inventory.sql`	data	healthy	`migrations/010_ai_system_inventory.sql`
`016_missing_reference_columns.sql`	data	healthy	`migrations/016_missing_reference_columns.sql`
`018_client_config_token_expire.sql`	data	healthy	`migrations/018_client_config_token_expire.sql`
`022_qco_rule_pack_pinning.sql`	data	healthy	`migrations/022_qco_rule_pack_pinning.sql`
`008_audit_text_fields.sql`	data	healthy	`migrations/008_audit_text_fields.sql`
`007_hf_sample_queue.sql`	data	healthy	`migrations/007_hf_sample_queue.sql`
`002_add_tenant_id_columns.sql`	data	healthy	`migrations/002_add_tenant_id_columns.sql`
`005_add_registered_ai_systems.sql`	data	healthy	`migrations/005_add_registered_ai_systems.sql`
`001_add_rls_policies.sql`	data	healthy	`migrations/001_add_rls_policies.sql`
`020_backfill_scan_reports_tenant_id.sql`	data	healthy	`migrations/020_backfill_scan_reports_tenant_id.sql`
`014_evaluation_runs.sql`	data	healthy	`migrations/014_evaluation_runs.sql`
`006_add_notifications.sql`	data	healthy	`migrations/006_add_notifications.sql`
`004_add_persona_permissions.sql`	data	healthy	`migrations/004_add_persona_permissions.sql`
`010_audit_metadata_text_fields.sql`	data	healthy	`migrations/010_audit_metadata_text_fields.sql`
`011_audit_metadata_vertical.sql`	data	healthy	`migrations/011_audit_metadata_vertical.sql`
`008_remediation_note.py`	data	healthy	`migrations/008_remediation_note.py`
`013_evf_sprint3_tables.sql`	data	healthy	`migrations/013_evf_sprint3_tables.sql`
`000_create_core_tables.sql`	data	healthy	`migrations/000_create_core_tables.sql`
`023_ai_incidents_fix_audit.sql`	data	healthy	`migrations/023_ai_incidents_fix_audit.sql`
`000_schema_migrations_tracking.sql`	data	healthy	`migrations/000_schema_migrations_tracking.sql`
`009_hash_chain_columns.py`	data	healthy	`migrations/009_hash_chain_columns.py`
`019_client_config_data_region.sql`	data	healthy	`migrations/019_client_config_data_region.sql`
`015_audit_traces_gate_id_nullable.sql`	data	healthy	`migrations/015_audit_traces_gate_id_nullable.sql`

Label	Layer	Status	Path
`1.0.0.0`	network	healthy	`tests/test_epic4_rule_packs.py`
`11.47.34.34`	network	healthy	`saro-data-framework/output/pii_masking_batch.json`
`27.01.06.52`	network	healthy	`saro-data-framework/output/pii_masking_batch.json`
`7.205.223.46`	network	healthy	`saro-data-framework/output/pii_masking_batch.json`
`57.01.12.01`	network	healthy	`saro-data-framework/output/pii_masking_batch.json`
`33.156.222.79`	network	healthy	`saro-data-framework/output/pii_masking_batch.json`
`248.78.116.192`	network	healthy	`saro-data-framework/output/pii_masking_batch.json`
`118.91.137.9`	network	healthy	`saro-data-framework/output/pii_masking_batch.json`
`89.112.223.93`	network	healthy	`saro-data-framework/output/pii_masking_batch.json`
`206.87.16.252`	network	healthy	`saro-data-framework/output/pii_masking_batch.json`
`70.197.1.37`	network	healthy	`saro-data-framework/output/pii_masking_batch.json`
`29.149.167.137`	network	healthy	`saro-data-framework/output/pii_masking_batch.json`
`153.165.108.69`	network	healthy	`saro-data-framework/output/pii_masking_batch.json`
`14.84.89.57`	network	healthy	`saro-data-framework/output/pii_masking_batch.json`
`104.124.224.35`	network	healthy	`saro-data-framework/output/pii_masking_batch.json`
`90.133.147.172`	network	healthy	`saro-data-framework/output/pii_masking_batch.json`
`105.255.111.59`	network	healthy	`saro-data-framework/output/pii_masking_batch.json`
`97.174.35.202`	network	healthy	`saro-data-framework/output/pii_masking_batch.json`
`61.123.175.17`	network	healthy	`saro-data-framework/output/pii_masking_batch.json`
`146.160.82.214`	network	healthy	`saro-data-framework/output/pii_masking_batch.json`
`118.165.204.133`	network	healthy	`saro-data-framework/output/pii_masking_batch.json`
`248.169.82.93`	network	healthy	`saro-data-framework/output/pii_masking_batch.json`
`202.152.223.2`	network	healthy	`saro-data-framework/output/pii_masking_batch.json`
`198.161.155.37`	network	healthy	`saro-data-framework/output/pii_masking_batch.json`
`225.190.153.183`	network	healthy	`saro-data-framework/output/pii_masking_batch.json`
`2.16.840.1`	network	healthy	`services/rfc3161_service.py`
`101.3.4.2`	network	healthy	`services/rfc3161_service.py`

Label	Layer	Status	Path
`refresh-seed`	cicd	healthy	`.github/workflows/seed-refresh.yml`
`sample`	cicd	healthy	`.github/workflows/hf_sampler.yml`
`evaluate`	cicd	healthy	`.github/workflows/eval-weekly.yml`
`diagnose-and-fix`	cicd	healthy	`.github/workflows/claude-ci-fix.yml`
`test`	cicd	healthy	`.github/workflows/deploy.yml`
`frontend`	cicd	healthy	`.github/workflows/deploy.yml`
`deploy`	cicd	healthy	`.github/workflows/deploy.yml`
`health-check`	cicd	healthy	`.github/workflows/deploy.yml`
`lint`	cicd	healthy	`.github/workflows/ci.yml`
`test`	cicd	healthy	`.github/workflows/ci.yml`
`security`	cicd	healthy	`.github/workflows/ci.yml`
`e2e`	cicd	healthy	`.github/workflows/ci.yml`
`respond`	cicd	healthy	`.github/workflows/claude-interactive.yml`
`review`	cicd	healthy	`.github/workflows/claude-pr-review.yml`
`regression-and-ratchet`	cicd	healthy	`.github/workflows/quality-gates.yml`
`migrations-apply`	cicd	healthy	`.github/workflows/quality-gates.yml`
`security-audit`	cicd	healthy	`.github/workflows/claude-security-audit.yml`
`evidence`	cicd	healthy	`.github/workflows/security-evidence-weekly.yml`

Label	Layer	Status	Path
`DATABASE_URL`	cicd	healthy	`—`
`ANTHROPIC_API_KEY`	cicd	healthy	`—`
`FLY_API_TOKEN`	cicd	healthy	`—`
`SARO_DEMO_TENANT_ID`	cicd	healthy	`—`
`SARO_RAILWAY_URL`	cicd	healthy	`—`
`PYTHON_VERSION`	cicd	healthy	`—`
`GITHUB_TOKEN`	cicd	healthy	`—`
`JWT_SECRET_KEY`	cicd	healthy	`—`
`SARO_PROCESSOR_TOKEN`	cicd	healthy	`—`
`HF_TOKEN`	cicd	healthy	`—`
`TEST_DATABASE_URL`	cicd	healthy	`—`
`SUPABASE_DATABASE_URL`	cicd	healthy	`—`

Label	Layer	Status	Path
`gha::seed-refresh`	cicd	healthy	`.github/workflows/seed-refresh.yml`
`gha::hf_sampler`	cicd	healthy	`.github/workflows/hf_sampler.yml`
`gha::eval-weekly`	cicd	healthy	`.github/workflows/eval-weekly.yml`
`gha::claude-ci-fix`	cicd	healthy	`.github/workflows/claude-ci-fix.yml`
`gha::deploy`	cicd	healthy	`.github/workflows/deploy.yml`
`gha::ci`	cicd	healthy	`.github/workflows/ci.yml`
`gha::claude-interactive`	cicd	healthy	`.github/workflows/claude-interactive.yml`
`gha::claude-pr-review`	cicd	healthy	`.github/workflows/claude-pr-review.yml`
`gha::quality-gates`	cicd	healthy	`.github/workflows/quality-gates.yml`
`gha::claude-security-audit`	cicd	healthy	`.github/workflows/claude-security-audit.yml`
`gha::security-evidence-weekly`	cicd	healthy	`.github/workflows/security-evidence-weekly.yml`

Label	Layer	Status	Path
`port:8000`	network	healthy	`Dockerfile`
`port:5173`	network	healthy	`frontend/vite.config.js`
`port:80`	network	healthy	`frontend/Dockerfile`
`port:02`	network	healthy	`.github/workflows/seed-refresh.yml`
`port:5432`	network	healthy	`.github/workflows/deploy.yml`
`port:03`	network	healthy	`.github/workflows/security-evidence-weekly.yml`

Label	Layer	Status	Path
`postgres`	data	healthy	`database.py`
`sqlite`	data	healthy	`conftest.py`
`postgresql`	data	healthy	`conftest.py`
`redis`	data	healthy	`CLAUDE.md`

Label	Layer	Status	Path
`image::Dockerfile`	hardware	healthy	`Dockerfile`
`image::frontend/Dockerfile`	hardware	healthy	`frontend/Dockerfile`
`db`	hardware	healthy	`docker-compose.yml`
`api`	hardware	healthy	`docker-compose.yml`

Label	Layer	Status	Path
`vps::azure`	hardware	healthy	`schemas.py`
`vps::aws`	hardware	healthy	`.env.example`

Label	Layer	Status	Path
`repobility-clone-6p9yydti`	software	healthy	`/tmp/repobility-clone-6p9yydti`

Label	Layer	Status	Path
`nginx`	network	healthy	`frontend/Dockerfile`

Label	Layer	Status	Path
`gpu (detected)`	hardware	healthy	`auth.py`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/14bd273c-422f-40ed-92e5-44bdb7148dc9/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/14bd273c-422f-40ed-92e5-44bdb7148dc9/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

venkybobby/SARO

Complete repo analysis

function 50+

file 50+

class 50+

endpoint 50+

table 50+

directory 50+

auth 43

route 40

component 35

migration 30

service 27

job 18

env_var 12

pipeline 11

port 6

database 4

container 4

vps 2

repo 1

load_balancer 1

gpu 1