Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

ogulcancelik/herdr

https://github.com/ogulcancelik/herdr · scanned 2026-07-23 19:44 UTC (4 days, 21 hours ago)

109 raw signals (0 security + 109 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 4 days, 21 hours ago · v7 · 109 actionable findings from 1 signal source. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

70.0% cov · 109 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 10 Medium 29 Low 69 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 109 Crowd 0 Layer: Software 13 Security 21 Quality 55 Frontend 1 Cicd 2 Dependencies 17

Exclude dismissed / FP Exclude test files

All 1039 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`test_parse_archive_root_returns_single_top_level_directory`	software	healthy	`scripts/test_vendor_libghostty_vt.py:19`
`test_ensure_dist_archive_refuses_stale_archives_without_hea…`	software	healthy	`scripts/test_vendor_libghostty_vt.py:30`
`git_output`	software	healthy	`scripts/test_vendor_libghostty_vt.py:37`
`test_require_clean_checkout_rejects_tracked_and_untracked_c…`	software	healthy	`scripts/test_vendor_libghostty_vt.py:52`
`test_ensure_dist_archive_rejects_checkout_dirtied_by_build`	software	healthy	`scripts/test_vendor_libghostty_vt.py:62`
`test_vendored_tree_contains_required_upstream_files`	software	healthy	`scripts/test_vendor_libghostty_vt.py:75`
`test_vendor_metadata_exists_and_points_at_vendored_tree`	software	healthy	`scripts/test_vendor_libghostty_vt.py:90`
`test_local_vendor_patches_are_listed_in_patch_index`	software	healthy	`scripts/test_vendor_libghostty_vt.py:99`
`test_local_vendor_patches_are_applied_to_vendored_tree`	software	healthy	`scripts/test_vendor_libghostty_vt.py:117`
`test_embedded_libghostty_logging_is_silenced`	software	healthy	`scripts/test_vendor_libghostty_vt.py:136`
`normalize_title`	software	healthy	`scripts/changelog.py:43`
`normalize_version`	software	healthy	`scripts/changelog.py:53`
`parse_version`	software	healthy	`scripts/changelog.py:57`
`parse_sections`	software	healthy	`scripts/changelog.py:68`
`find_section`	software	healthy	`scripts/changelog.py:83`
`extract_section_body`	software	healthy	`scripts/changelog.py:90`
`prepare_release`	software	healthy	`scripts/changelog.py:98`
`read_protocol_version`	software	healthy	`scripts/changelog.py:129`
`normalize_announcement`	software	healthy	`scripts/changelog.py:137`
`infer_protocol_from_notes`	software	healthy	`scripts/changelog.py:165`
`normalize_assets`	software	healthy	`scripts/changelog.py:172`
`normalize_release_metadata`	software	healthy	`scripts/changelog.py:189`
`normalize_releases`	software	healthy	`scripts/changelog.py:222`
`build_latest_json`	software	healthy	`scripts/changelog.py:242`
`default_release_assets`	software	healthy	`scripts/changelog.py:287`
`manifest_from_release_payload`	software	healthy	`scripts/changelog.py:296`
`canonicalize_manifest`	software	healthy	`scripts/changelog.py:343`
`ensure_manifest_matches_expected`	software	healthy	`scripts/changelog.py:370`
`ensure_current_release_assets_are_mirrored`	software	healthy	`scripts/changelog.py:384`
`load_text`	software	healthy	`scripts/changelog.py:396`
`load_json`	software	healthy	`scripts/changelog.py:403`
`archived_releases_from_current_manifest`	software	healthy	`scripts/changelog.py:419`
`load_product_announcement`	software	healthy	`scripts/changelog.py:445`
`write_text`	software	healthy	`scripts/changelog.py:461`
`fetch_release_payload`	software	healthy	`scripts/changelog.py:465`
`fetch_remote_json`	software	healthy	`scripts/changelog.py:492`
`verify_asset_urls_resolve`	software	healthy	`scripts/changelog.py:519`
`ensure_manifest_is_outdated`	software	healthy	`scripts/changelog.py:539`
`git_status_lines`	software	healthy	`scripts/changelog.py:550`
`cmd_prepare`	software	dead	`scripts/changelog.py:562`
`cmd_extract`	software	dead	`scripts/changelog.py:570`
`cmd_sync_latest_json`	software	dead	`scripts/changelog.py:580`
`cmd_validate_product_announcement`	software	dead	`scripts/changelog.py:623`
`cmd_verify_release_state`	software	dead	`scripts/changelog.py:634`
`build_parser`	software	healthy	`scripts/changelog.py:667`
`main`	software	healthy	`scripts/changelog.py:717`
`test_prepare_release_moves_unreleased_into_versioned_section`	software	healthy	`scripts/test_changelog.py:28`
`test_prepare_release_accepts_bracketed_unreleased_heading`	software	healthy	`scripts/test_changelog.py:37`
`test_extract_section_body_returns_requested_version_only`	software	healthy	`scripts/test_changelog.py:45`
`test_build_latest_json_trims_notes`	software	healthy	`scripts/test_changelog.py:52`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`clippy.toml`	software	healthy	`clippy.toml`
`rust-toolchain.toml`	software	healthy	`rust-toolchain.toml`
`Cargo.toml`	software	healthy	`Cargo.toml`
`SPONSORS.md`	software	healthy	`SPONSORS.md`
`README.md`	software	healthy	`README.md`
`CONTRIBUTING.md`	software	healthy	`CONTRIBUTING.md`
`build.rs`	software	healthy	`build.rs`
`SKILL.md`	software	healthy	`SKILL.md`
`LICENSE`	software	healthy	`LICENSE`
`Cargo.lock`	software	healthy	`Cargo.lock`
`AGENTS.md`	software	healthy	`AGENTS.md`
`CHANGELOG.md`	software	healthy	`CHANGELOG.md`
`detach_reattach.rs`	software	healthy	`tests/detach_reattach.rs`
`api_ping.rs`	software	healthy	`tests/api_ping.rs`
`auto_detect.rs`	software	healthy	`tests/auto_detect.rs`
`cli.rs`	software	healthy	`tests/cli.rs`
`client_mode.rs`	software	healthy	`tests/client_mode.rs`
`cross_area.rs`	software	healthy	`tests/cross_area.rs`
`multi_client.rs`	software	healthy	`tests/multi_client.rs`
`server_headless.rs`	software	healthy	`tests/server_headless.rs`
`live_handoff.rs`	software	healthy	`tests/live_handoff.rs`
`herdr-plugin.toml`	software	healthy	`tests/fixtures/plugin-smoke/herdr-plugin.toml`
`current-herdr-session.json`	software	healthy	`tests/fixtures/session/current-herdr-session.json`
`legacy-pre-tabs-v2.json`	software	healthy	`tests/fixtures/session/legacy-pre-tabs-v2.json`
`current-herdr-dev-session.json`	software	healthy	`tests/fixtures/session/current-herdr-dev-session.json`
`protocol.rs`	software	healthy	`tests/cli/protocol.rs`
`agent_options.rs`	software	healthy	`tests/cli/agent_options.rs`
`panes.rs`	software	healthy	`tests/cli/panes.rs`
`harness.rs`	software	healthy	`tests/cli/harness.rs`
`protocol_guard.rs`	software	healthy	`tests/cli/protocol_guard.rs`
`sessions.rs`	software	healthy	`tests/cli/sessions.rs`
`mod.rs`	software	healthy	`tests/cli/mod.rs`
`surface.rs`	software	healthy	`tests/cli/surface.rs`
`agent_wait.rs`	software	healthy	`tests/cli/agent_wait.rs`
`workspace.rs`	software	healthy	`tests/cli/workspace.rs`
`plugins.rs`	software	healthy	`tests/cli/plugins.rs`
`agent_transport.rs`	software	healthy	`tests/cli/agent_transport.rs`
`agents.rs`	software	healthy	`tests/cli/agents.rs`
`hooks.rs`	software	healthy	`tests/cli/hooks.rs`
`mod.rs`	software	healthy	`tests/support/mod.rs`
`README.md`	software	healthy	`docs/next/README.md`
`product-announcement.json`	software	healthy	`docs/next/product-announcement.json`
`CHANGELOG.md`	software	healthy	`docs/next/CHANGELOG.md`
`herdr-api.schema.json`	software	healthy	`docs/next/api/herdr-api.schema.json`
`manifest.json`	software	healthy	`docs/versions/manifest.json`
`README.md`	software	healthy	`docs/versions/README.md`
`test_vendor_libghostty_vt.py`	software	healthy	`scripts/test_vendor_libghostty_vt.py`
`changelog.py`	software	healthy	`scripts/changelog.py`
`__init__.py`	software	healthy	`scripts/__init__.py`
`test_changelog.py`	software	healthy	`scripts/test_changelog.py`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`tests`	software	healthy	`tests`
`fixtures`	software	healthy	`tests/fixtures`
`plugin-smoke`	software	healthy	`tests/fixtures/plugin-smoke`
`session`	software	healthy	`tests/fixtures/session`
`cli`	software	healthy	`tests/cli`
`support`	software	healthy	`tests/support`
`docs`	software	healthy	`docs`
`next`	software	healthy	`docs/next`
`api`	software	healthy	`docs/next/api`
`versions`	software	healthy	`docs/versions`
`scripts`	software	healthy	`scripts`
`website`	software	healthy	`website`
`scripts`	software	healthy	`website/scripts`
`css`	software	healthy	`website/css`
`agent-detection`	software	healthy	`website/agent-detection`
`src`	software	healthy	`website/src`
`scripts`	software	healthy	`website/src/scripts`
`content`	software	healthy	`website/src/content`
`blog`	software	healthy	`website/src/content/blog`
`styles`	software	healthy	`website/src/styles`
`workers`	software	healthy	`workers`
`plugin-marketplace`	software	healthy	`workers/plugin-marketplace`
`src`	software	healthy	`workers/plugin-marketplace/src`
`.codex`	software	healthy	`.codex`
`skills`	software	healthy	`.codex/skills`
`triage`	software	healthy	`.codex/skills/triage`
`herdr-pre-release-audit`	software	healthy	`.codex/skills/herdr-pre-release-audit`
`references`	software	healthy	`.codex/skills/herdr-pre-release-audit/references`
`.github`	software	healthy	`.github`
`ISSUE_TEMPLATE`	software	healthy	`.github/ISSUE_TEMPLATE`
`DISCUSSION_TEMPLATE`	software	healthy	`.github/DISCUSSION_TEMPLATE`
`workflows`	software	healthy	`.github/workflows`
`src`	software	healthy	`src`
`pty`	software	healthy	`src/pty`
`actor`	software	healthy	`src/pty/actor`
`backend`	software	healthy	`src/pty/backend`
`client`	software	healthy	`src/client`
`input`	software	healthy	`src/client/input`
`integration`	software	healthy	`src/integration`
`assets`	software	healthy	`src/integration/assets`
`pi`	software	healthy	`src/integration/assets/pi`
`hermes`	software	healthy	`src/integration/assets/hermes`
`opencode`	software	healthy	`src/integration/assets/opencode`
`qodercli`	software	healthy	`src/integration/assets/qodercli`
`kimi`	software	healthy	`src/integration/assets/kimi`
`kilo`	software	healthy	`src/integration/assets/kilo`
`droid`	software	healthy	`src/integration/assets/droid`
`devin`	software	healthy	`src/integration/assets/devin`
`mastracode`	software	healthy	`src/integration/assets/mastracode`
`codex`	software	healthy	`src/integration/assets/codex`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`[email protected]`	dependencies	healthy	`Cargo.toml`
`bincode@2`	dependencies	healthy	`Cargo.toml`
`bytes@1`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`ctrlc@3`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`regex@1`	dependencies	healthy	`Cargo.toml`
`serde@1`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`serde_json@1`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`tokio@1`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`[email protected]`	dependencies	healthy	`Cargo.toml`
`@astrojs/sitemap@^3.7.2`	dependencies	healthy	`website/package.json`
`@astrojs/starlight@^0.36.0`	dependencies	healthy	`website/package.json`
`astro@^5.0.0`	dependencies	healthy	`website/package.json`

Label	Layer	Status	Path
`VendorLibghosttyVtTests`	software	healthy	`scripts/test_vendor_libghostty_vt.py:18`
`Section`	software	healthy	`scripts/changelog.py:32`
`ChangelogError`	software	healthy	`scripts/changelog.py:39`
`ChangelogScriptTests`	software	healthy	`scripts/test_changelog.py:27`
`DocsTranslationParityTests`	software	healthy	`scripts/test_docs_translation_parity.py:10`
`StructField`	software	healthy	`scripts/config_reference_check.py:44`
`Model`	software	healthy	`scripts/config_reference_check.py:51`
`RawMode`	software	healthy	`scripts/verify_suspicious_keys.py:85`
`VendorPortablePtyTests`	software	healthy	`scripts/test_vendor_portable_pty.py:9`
`PreviewNotesTests`	software	healthy	`scripts/test_preview.py:13`
`ConventionalCommitTests`	software	healthy	`scripts/test_preview.py:190`
`VendorMetadata`	software	healthy	`scripts/vendor_libghostty_vt.py:14`
`CommandResult`	software	healthy	`scripts/capture_agent_screen.py:37`
`PaneMatch`	software	healthy	`scripts/capture_agent_screen.py:44`
`CollectKeysTests`	software	healthy	`scripts/test_config_reference_check.py:81`
`CheckTests`	software	healthy	`scripts/test_config_reference_check.py:135`
`RealModelTests`	software	healthy	`scripts/test_config_reference_check.py:224`
`RawMode`	software	healthy	`scripts/capture_key_matrix.py:109`
`AgentDetectionManifestCheckTests`	software	healthy	`scripts/test_agent_detection_manifest_check.py:45`
`CheckError`	software	healthy	`scripts/agent_detection_manifest_check.py:91`
`MemoryR2`	software	healthy	`workers/plugin-marketplace/src/index.test.ts:MemoryR2`
`MemoryKV`	software	healthy	`workers/plugin-marketplace/src/index.test.ts:MemoryKV`

Label	Layer	Status	Path
`close`	cicd	healthy	`.github/workflows/label-next-release-issues.yml`
`flake-check`	cicd	healthy	`.github/workflows/nix.yml`
`approve`	cicd	healthy	`.github/workflows/approve-contributor.yml`
`conventional-commits`	cicd	healthy	`.github/workflows/ci.yml`
`check`	cicd	healthy	`.github/workflows/ci.yml`
`preflight`	cicd	healthy	`.github/workflows/preview.yml`
`build`	cicd	healthy	`.github/workflows/preview.yml`
`publish`	cicd	healthy	`.github/workflows/preview.yml`
`build`	cicd	healthy	`.github/workflows/website.yml`
`flake-check`	cicd	healthy	`.github/workflows/release.yml`
`build`	cicd	healthy	`.github/workflows/release.yml`
`validate-release-inputs`	cicd	healthy	`.github/workflows/release.yml`
`release`	cicd	healthy	`.github/workflows/release.yml`
`close-released-issues`	cicd	healthy	`.github/workflows/release.yml`
`update-latest-json`	cicd	healthy	`.github/workflows/release.yml`
`approve`	cicd	healthy	`.github/workflows/approve-merged-contributor.yml`
`check-template`	cicd	healthy	`.github/workflows/issue-gate.yml`
`check-contributor`	cicd	healthy	`.github/workflows/pr-gate.yml`
`build-linux`	cicd	healthy	`.github/workflows/build-artifacts-manual.yml`
`build-macos`	cicd	healthy	`.github/workflows/build-artifacts-manual.yml`
`build-windows`	cicd	healthy	`.github/workflows/build-artifacts-manual.yml`

Label	Layer	Status	Path
`gha::label-next-release-issues`	cicd	healthy	`.github/workflows/label-next-release-issues.yml`
`gha::nix`	cicd	healthy	`.github/workflows/nix.yml`
`gha::approve-contributor`	cicd	healthy	`.github/workflows/approve-contributor.yml`
`gha::ci`	cicd	healthy	`.github/workflows/ci.yml`
`gha::preview`	cicd	healthy	`.github/workflows/preview.yml`
`gha::website`	cicd	healthy	`.github/workflows/website.yml`
`gha::release`	cicd	healthy	`.github/workflows/release.yml`
`gha::approve-merged-contributor`	cicd	healthy	`.github/workflows/approve-merged-contributor.yml`
`gha::issue-gate`	cicd	healthy	`.github/workflows/issue-gate.yml`
`gha::pr-gate`	cicd	healthy	`.github/workflows/pr-gate.yml`
`gha::build-artifacts-manual`	cicd	healthy	`.github/workflows/build-artifacts-manual.yml`

Label	Layer	Status	Path
`KANGAL_GITHUB_TOKEN`	cicd	healthy	`—`
`CLOUDFLARE_PAGES_DEPLOY_HOOK`	cicd	healthy	`—`
`RELEASE_DEPLOY_KEY`	cicd	healthy	`—`
`RUST_TOOLCHAIN_VERSION`	cicd	healthy	`—`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`tests/live_handoff.rs`
`5.15.167.4`	network	healthy	`src/selection.rs`

Label	Layer	Status	Path
`repobility-clone-9qoqdszv`	software	healthy	`/tmp/repobility-clone-9qoqdszv`

Label	Layer	Status	Path
`redis`	data	healthy	`website/bun.lock`

Label	Layer	Status	Path
`vps::azure`	hardware	healthy	`website/bun.lock`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/1b2ef148-3886-4120-b38f-4a1431e6850d/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/1b2ef148-3886-4120-b38f-4a1431e6850d/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

ogulcancelik/herdr

Complete repo analysis

function 50+

file 50+

directory 50+

dependency 27

class 22

job 21

pipeline 11

env_var 4

service 2

repo 1

database 1

vps 1