ghostty-org/ghostty

Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

87 of your 121 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 28.47s · analysis 27.1s · 80.8 MB · GitHub API rate-limit (preflight)

https://github.com/ghostty-org/ghostty · scanned 2026-06-05 10:18 UTC (5 days, 15 hours ago) · 10 languages

134 raw signals (106 security + 28 graph) 11/13 scanners ran 60th percentile · Swift · medium (20-100K LoC) System graph score 88 (lower by 15)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 5 days, 15 hours ago · v2 · 49 actionable findings from 2 signal sources. 70 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

88.9% cov · 14 findings

Score breakdown â 2026-05-18-v5

Component	Sub-score	Weight	Contribution
`structure_score`	65.0	0.15	9.75
`security_score`	100.0	0.25	25.00
`testing_score`	34.0	0.20	6.80
`documentation_score`	82.0	0.15	12.30
`practices_score`	84.0	0.15	12.60
`code_quality`	66.0	0.10	6.60
Overall		1.00	73.0

security_score may be inflated — optional security scanners were skipped on this fast scan

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 10 Medium 8 Low 9 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 35 System graph 14 Crowd 0 Layer: Cicd 8 Software 8 Quality 24 Security 4 Api 1 Network 3 Frontend 1

Exclude dismissed / FP Exclude test files

All 732 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`typos.toml`	software	healthy	`typos.toml`
`AI_POLICY.md`	software	healthy	`AI_POLICY.md`
`README.md`	software	healthy	`README.md`
`HACKING.md`	software	healthy	`HACKING.md`
`CONTRIBUTING.md`	software	healthy	`CONTRIBUTING.md`
`.swiftlint.yml`	software	healthy	`.swiftlint.yml`
`PACKAGING.md`	software	healthy	`PACKAGING.md`
`build.zig.zon.json`	software	healthy	`build.zig.zon.json`
`Makefile`	software	healthy	`Makefile`
`AGENTS.md`	software	healthy	`AGENTS.md`
`README.md`	software	healthy	`test/README.md`
`ucs-detect.sh`	software	healthy	`test/ucs-detect.sh`
`README.md`	software	healthy	`test/windows/README.md`
`test_dll_init.c`	software	healthy	`test/windows/test_dll_init.c`
`README.md`	software	healthy	`test/fuzz-libghostty/README.md`
`AGENTS.md`	software	healthy	`test/fuzz-libghostty/AGENTS.md`
`sanitize-filenames.sh`	software	healthy	`test/fuzz-libghostty/corpus/sanitize-filenames.sh`
`README_CONTRIBUTORS.md`	software	healthy	`po/README_CONTRIBUTORS.md`
`README_TRANSLATORS.md`	software	healthy	`po/README_TRANSLATORS.md`
`test_libghostty_vt.c`	software	healthy	`nix/test-src/test_libghostty_vt.c`
`check-zig-cache.sh`	software	healthy	`nix/build-support/check-zig-cache.sh`
`fetch-zig-cache.sh`	software	healthy	`nix/build-support/fetch-zig-cache.sh`
`check-blueprints.sh`	software	healthy	`nix/build-support/check-blueprints.sh`
`exceptions.json`	software	healthy	`flatpak/exceptions.json`
`zig-packages.json`	software	healthy	`flatpak/zig-packages.json`
`dependencies.yml`	software	healthy	`flatpak/dependencies.yml`
`com.mitchellh.ghostty.yml`	software	healthy	`flatpak/com.mitchellh.ghostty.yml`
`com.mitchellh.ghostty-debug.yml`	software	healthy	`flatpak/com.mitchellh.ghostty-debug.yml`
`ghostty.h`	software	healthy	`include/ghostty.h`
`vt.h`	software	healthy	`include/ghostty/vt.h`
`build_info.h`	software	healthy	`include/ghostty/vt/build_info.h`
`style.h`	software	healthy	`include/ghostty/vt/style.h`
`color.h`	software	healthy	`include/ghostty/vt/color.h`
`grid_ref_tracked.h`	software	healthy	`include/ghostty/vt/grid_ref_tracked.h`
`types.h`	software	healthy	`include/ghostty/vt/types.h`
`grid_ref.h`	software	healthy	`include/ghostty/vt/grid_ref.h`
`kitty_graphics.h`	software	healthy	`include/ghostty/vt/kitty_graphics.h`
`focus.h`	software	healthy	`include/ghostty/vt/focus.h`
`terminal.h`	software	healthy	`include/ghostty/vt/terminal.h`
`size_report.h`	software	healthy	`include/ghostty/vt/size_report.h`
`key.h`	software	healthy	`include/ghostty/vt/key.h`
`osc.h`	software	healthy	`include/ghostty/vt/osc.h`
`allocator.h`	software	healthy	`include/ghostty/vt/allocator.h`
`sys.h`	software	healthy	`include/ghostty/vt/sys.h`
`selection.h`	software	healthy	`include/ghostty/vt/selection.h`
`screen.h`	software	healthy	`include/ghostty/vt/screen.h`
`modes.h`	software	healthy	`include/ghostty/vt/modes.h`
`wasm.h`	software	healthy	`include/ghostty/vt/wasm.h`
`mouse.h`	software	healthy	`include/ghostty/vt/mouse.h`
`paste.h`	software	healthy	`include/ghostty/vt/paste.h`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`test`	software	healthy	`test`
`windows`	software	healthy	`test/windows`
`fuzz-libghostty`	software	healthy	`test/fuzz-libghostty`
`corpus`	software	healthy	`test/fuzz-libghostty/corpus`
`po`	software	healthy	`po`
`nix`	software	healthy	`nix`
`test-src`	software	healthy	`nix/test-src`
`build-support`	software	healthy	`nix/build-support`
`flatpak`	software	healthy	`flatpak`
`include`	software	healthy	`include`
`ghostty`	software	healthy	`include/ghostty`
`vt`	software	healthy	`include/ghostty/vt`
`mouse`	software	healthy	`include/ghostty/vt/mouse`
`key`	software	healthy	`include/ghostty/vt/key`
`example`	software	healthy	`example`
`c-vt-cmake`	software	healthy	`example/c-vt-cmake`
`src`	software	healthy	`example/c-vt-cmake/src`
`zig-formatter`	software	healthy	`example/zig-formatter`
`c-vt-modes`	software	healthy	`example/c-vt-modes`
`src`	software	healthy	`example/c-vt-modes/src`
`c-vt-paste`	software	healthy	`example/c-vt-paste`
`src`	software	healthy	`example/c-vt-paste/src`
`wasm-vt`	software	healthy	`example/wasm-vt`
`c-vt-kitty-graphics`	software	healthy	`example/c-vt-kitty-graphics`
`src`	software	healthy	`example/c-vt-kitty-graphics/src`
`c-vt-colors`	software	healthy	`example/c-vt-colors`
`src`	software	healthy	`example/c-vt-colors/src`
`c-vt-encode-focus`	software	healthy	`example/c-vt-encode-focus`
`src`	software	healthy	`example/c-vt-encode-focus/src`
`c-vt-stream`	software	healthy	`example/c-vt-stream`
`src`	software	healthy	`example/c-vt-stream/src`
`c-vt-static`	software	healthy	`example/c-vt-static`
`src`	software	healthy	`example/c-vt-static/src`
`c-vt-grid-ref-tracked`	software	healthy	`example/c-vt-grid-ref-tracked`
`src`	software	healthy	`example/c-vt-grid-ref-tracked/src`
`c-vt`	software	healthy	`example/c-vt`
`src`	software	healthy	`example/c-vt/src`
`c-vt-encode-key`	software	healthy	`example/c-vt-encode-key`
`src`	software	healthy	`example/c-vt-encode-key/src`
`c-vt-size-report`	software	healthy	`example/c-vt-size-report`
`src`	software	healthy	`example/c-vt-size-report/src`
`c-vt-cmake-cross`	software	healthy	`example/c-vt-cmake-cross`
`src`	software	healthy	`example/c-vt-cmake-cross/src`
`swift-vt-xcframework`	software	healthy	`example/swift-vt-xcframework`
`Sources`	software	healthy	`example/swift-vt-xcframework/Sources`
`cpp-vt-stream`	software	healthy	`example/cpp-vt-stream`
`src`	software	healthy	`example/cpp-vt-stream/src`
`c-vt-encode-mouse`	software	healthy	`example/c-vt-encode-mouse`
`src`	software	healthy	`example/c-vt-encode-mouse/src`
`c-vt-cmake-static`	software	healthy	`example/c-vt-cmake-static`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`skip`	cicd	healthy	`.github/workflows/test.yml`
`required`	cicd	healthy	`.github/workflows/test.yml`
`build-bench`	cicd	healthy	`.github/workflows/test.yml`
`list-examples`	cicd	healthy	`.github/workflows/test.yml`
`build-examples-zig`	cicd	healthy	`.github/workflows/test.yml`
`build-examples-cmake`	cicd	healthy	`.github/workflows/test.yml`
`build-examples-cmake-windows`	cicd	healthy	`.github/workflows/test.yml`
`build-examples-swift`	cicd	healthy	`.github/workflows/test.yml`
`build-cmake`	cicd	healthy	`.github/workflows/test.yml`
`test-lib-vt-pkgconfig`	cicd	healthy	`.github/workflows/test.yml`
`build-flatpak`	cicd	healthy	`.github/workflows/test.yml`
`build-snap`	cicd	healthy	`.github/workflows/test.yml`
`build-libghostty-vt`	cicd	healthy	`.github/workflows/test.yml`
`build-libghostty-vt-macos`	cicd	healthy	`.github/workflows/test.yml`
`build-libghostty-vt-android`	cicd	healthy	`.github/workflows/test.yml`
`build-libghostty-vt-windows`	cicd	healthy	`.github/workflows/test.yml`
`build-libghostty-windows-gnu`	cicd	healthy	`.github/workflows/test.yml`
`build-linux`	cicd	healthy	`.github/workflows/test.yml`
`build-linux-libghostty`	cicd	healthy	`.github/workflows/test.yml`
`build-nix`	cicd	healthy	`.github/workflows/test.yml`
`build-dist`	cicd	healthy	`.github/workflows/test.yml`
`build-dist-lib-vt`	cicd	healthy	`.github/workflows/test.yml`
`trigger-snap`	cicd	healthy	`.github/workflows/test.yml`
`trigger-flatpak`	cicd	healthy	`.github/workflows/test.yml`
`build-macos`	cicd	healthy	`.github/workflows/test.yml`
`build-macos-freetype`	cicd	healthy	`.github/workflows/test.yml`
`test`	cicd	healthy	`.github/workflows/test.yml`
`test-lib-vt`	cicd	healthy	`.github/workflows/test.yml`
`test-gtk`	cicd	healthy	`.github/workflows/test.yml`
`test-simd`	cicd	healthy	`.github/workflows/test.yml`
`test-sentry-linux`	cicd	healthy	`.github/workflows/test.yml`
`test-macos`	cicd	healthy	`.github/workflows/test.yml`
`test-windows`	cicd	healthy	`.github/workflows/test.yml`
`test-i18n`	cicd	healthy	`.github/workflows/test.yml`
`test-fuzz-libghostty`	cicd	healthy	`.github/workflows/test.yml`
`zig-fmt`	cicd	healthy	`.github/workflows/test.yml`
`pinact`	cicd	healthy	`.github/workflows/test.yml`
`prettier`	cicd	healthy	`.github/workflows/test.yml`
`swiftlint`	cicd	healthy	`.github/workflows/test.yml`
`alejandra`	cicd	healthy	`.github/workflows/test.yml`
`typos`	cicd	healthy	`.github/workflows/test.yml`
`shellcheck`	cicd	healthy	`.github/workflows/test.yml`
`translations`	cicd	healthy	`.github/workflows/test.yml`
`blueprint-compiler`	cicd	healthy	`.github/workflows/test.yml`
`test-pkg-linux`	cicd	healthy	`.github/workflows/test.yml`
`test-debian-13`	cicd	healthy	`.github/workflows/test.yml`
`valgrind`	cicd	healthy	`.github/workflows/test.yml`
`required`	cicd	healthy	`.github/workflows/nix.yml`
`check-zig-cache-hash`	cicd	healthy	`.github/workflows/nix.yml`
`manage`	cicd	healthy	`.github/workflows/vouch-manage-by-discussion.yml`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`CF_R2_RELEASE_SECRET_KEY`	cicd	healthy	`—`
`PROD_MACOS_CERTIFICATE_NAME`	cicd	healthy	`—`
`PROD_MACOS_CERTIFICATE_PWD`	cicd	healthy	`—`
`PROD_MACOS_CERTIFICATE`	cicd	healthy	`—`
`CF_R2_RELEASE_AWS_KEY`	cicd	healthy	`—`
`CF_R2_DEPS_AWS_KEY`	cicd	healthy	`—`
`VOUCH_APP_ID`	cicd	healthy	`—`
`PROD_MACOS_SPARKLE_KEY`	cicd	healthy	`—`
`CF_R2_TIP_AWS_KEY`	cicd	healthy	`—`
`GHOSTTY_VERSION`	cicd	healthy	`—`
`PROD_MACOS_SPARKLE_KEY_PUB`	cicd	healthy	`—`
`CF_R2_DEPS_ACCOUNT_ID`	cicd	healthy	`—`
`PROD_MACOS_CI_KEYCHAIN_PWD`	cicd	healthy	`—`
`CACHIX_AUTH_TOKEN`	cicd	healthy	`—`
`MINISIGN_PASSWORD`	cicd	healthy	`—`
`APPLE_NOTARIZATION_ISSUER`	cicd	healthy	`—`
`APPLE_NOTARIZATION_KEY_ID`	cicd	healthy	`—`
`CF_R2_DEPS_SECRET_KEY`	cicd	healthy	`—`
`CF_R2_TIP_SECRET_KEY`	cicd	healthy	`—`
`GITHUB_TOKEN`	cicd	healthy	`—`
`APPLE_NOTARIZATION_KEY`	cicd	healthy	`—`
`CF_R2_RELEASE_ACCOUNT_ID`	cicd	healthy	`—`
`GH_RELEASE_TOKEN`	cicd	healthy	`—`
`SENTRY_AUTH_TOKEN`	cicd	healthy	`—`
`MINISIGN_KEY`	cicd	healthy	`—`
`VOUCH_APP_PRIVATE_KEY`	cicd	healthy	`—`
`CF_R2_TIP_ACCOUNT_ID`	cicd	healthy	`—`

Label	Layer	Status	Path
`gha::test`	cicd	healthy	`.github/workflows/test.yml`
`gha::nix`	cicd	healthy	`.github/workflows/nix.yml`
`gha::vouch-manage-by-discussion`	cicd	healthy	`.github/workflows/vouch-manage-by-discussion.yml`
`gha::publish-tag`	cicd	healthy	`.github/workflows/publish-tag.yml`
`gha::release-tag`	cicd	healthy	`.github/workflows/release-tag.yml`
`gha::vouch-manage-by-issue`	cicd	healthy	`.github/workflows/vouch-manage-by-issue.yml`
`gha::vouch-check-issue`	cicd	healthy	`.github/workflows/vouch-check-issue.yml`
`gha::milestone`	cicd	healthy	`.github/workflows/milestone.yml`
`gha::release-tip`	cicd	healthy	`.github/workflows/release-tip.yml`
`gha::update-colorschemes`	cicd	healthy	`.github/workflows/update-colorschemes.yml`
`gha::vouch-sync-codeowners`	cicd	healthy	`.github/workflows/vouch-sync-codeowners.yml`
`gha::vouch-check-pr`	cicd	healthy	`.github/workflows/vouch-check-pr.yml`
`gha::flatpak`	cicd	healthy	`.github/workflows/flatpak.yml`
`gha::clean-artifacts`	cicd	healthy	`.github/workflows/clean-artifacts.yml`
`gha::snap`	cicd	healthy	`.github/workflows/snap.yml`

Label	Layer	Status	Path
`__init__`	software	healthy	`src/font/nerd_font_codegen.py:72`
`visit_Assign`	software	dead	`src/font/nerd_font_codegen.py:77`
`visit_ClassDef`	software	dead	`src/font/nerd_font_codegen.py:88`
`visit_setup_patch_set`	software	healthy	`src/font/nerd_font_codegen.py:95`
`resolve_symbol`	software	healthy	`src/font/nerd_font_codegen.py:117`
`safe_literal_eval`	software	healthy	`src/font/nerd_font_codegen.py:123`
`process_patch_entry`	software	healthy	`src/font/nerd_font_codegen.py:156`
`extract_patch_set_values`	software	healthy	`src/font/nerd_font_codegen.py:170`
`parse_alignment`	software	healthy	`src/font/nerd_font_codegen.py:177`
`attr_key`	software	healthy	`src/font/nerd_font_codegen.py:186`
`coalesce_codepoints_to_ranges`	software	healthy	`src/font/nerd_font_codegen.py:203`
`emit_zig_entry_multikey`	software	healthy	`src/font/nerd_font_codegen.py:219`
`generate_codepoint_tables`	software	healthy	`src/font/nerd_font_codegen.py:304`
`generate_zig_switch_arms`	software	healthy	`src/font/nerd_font_codegen.py:414`

Label	Layer	Status	Path
`PatchSetScaleRules`	software	healthy	`src/font/nerd_font_codegen.py:43`
`PatchSetAttributeEntry`	software	healthy	`src/font/nerd_font_codegen.py:48`
`PatchSet`	software	healthy	`src/font/nerd_font_codegen.py:60`
`PatchSetExtractor`	software	healthy	`src/font/nerd_font_codegen.py:71`

Label	Layer	Status	Path
`port:256`	network	healthy	`flatpak/dependencies.yml`
`port:02`	network	healthy	`flatpak/dependencies.yml`
`port:958`	network	healthy	`flatpak/dependencies.yml`

Label	Layer	Status	Path
`repobility-clone-6507ege8`	software	healthy	`/tmp/repobility-clone-6507ege8`

Label	Layer	Status	Path
`gpu (detected)`	hardware	healthy	`snap/snapcraft.yaml`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/15245132-025c-481e-bc73-2d2f4b6d88a3/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/15245132-025c-481e-bc73-2d2f4b6d88a3/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

ghostty-org/ghostty

Complete repo analysis

file 50+

directory 50+

job 50+

env_var 27

pipeline 15

function 14

class 4

port 3

repo 1

gpu 1