Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

shahidkarimi/canary-rollout-project

https://github.com/shahidkarimi/canary-rollout-project · scanned 2026-06-16 00:08 UTC (2 months, 2 weeks ago)

21 raw signals (0 security + 21 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 2 weeks ago · v1 · 14 actionable findings from 1 signal source. 7 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

77.8% cov · 14 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 0 Medium 6 Low 6 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 14 Crowd 0 Layer: Software 1 Hardware 1 Frontend 1 Cicd 4 Quality 7

Exclude dismissed / FP Exclude test files

All 171 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`image::app/Dockerfile`	hardware	healthy	`app/Dockerfile`
`tf::aws_cloudwatch_dashboard::main`	hardware	healthy	`infra/observability/main.tf`
`tf::aws_cloudwatch_log_group::apigw`	hardware	healthy	`infra/lambda/apigw.tf`
`tf::aws_apigatewayv2_api::http`	hardware	healthy	`infra/lambda/apigw.tf`
`tf::aws_apigatewayv2_integration::lambda`	hardware	healthy	`infra/lambda/apigw.tf`
`tf::aws_apigatewayv2_route::default`	hardware	healthy	`infra/lambda/apigw.tf`
`tf::aws_apigatewayv2_stage::default`	hardware	healthy	`infra/lambda/apigw.tf`
`tf::aws_lambda_permission::apigw`	hardware	healthy	`infra/lambda/apigw.tf`
`tf::aws_iam_role::exec`	hardware	healthy	`infra/lambda/main.tf`
`tf::aws_iam_role_policy_attachment::exec_logs`	hardware	healthy	`infra/lambda/main.tf`
`tf::aws_iam_role_policy::exec`	hardware	healthy	`infra/lambda/main.tf`
`tf::aws_cloudwatch_log_group::fn`	hardware	healthy	`infra/lambda/main.tf`
`tf::aws_lambda_function::podinfo`	hardware	healthy	`infra/lambda/main.tf`
`tf::aws_lambda_alias::live`	hardware	healthy	`infra/lambda/main.tf`
`tf::aws_lambda_provisioned_concurrency_config::live`	hardware	healthy	`infra/lambda/main.tf`
`tf::aws_iam_role::codedeploy`	hardware	healthy	`infra/lambda/codedeploy.tf`
`tf::aws_iam_role_policy_attachment::codedeploy`	hardware	healthy	`infra/lambda/codedeploy.tf`
`tf::aws_codedeploy_app::lambda`	hardware	healthy	`infra/lambda/codedeploy.tf`
`tf::aws_codedeploy_deployment_group::lambda`	hardware	healthy	`infra/lambda/codedeploy.tf`
`tf::aws_cloudwatch_metric_alarm::lambda_errors`	hardware	healthy	`infra/lambda/alarms.tf`
`tf::aws_cloudwatch_metric_alarm::lambda_throttles`	hardware	healthy	`infra/lambda/alarms.tf`
`tf::aws_cloudwatch_metric_alarm::lambda_duration_p99`	hardware	healthy	`infra/lambda/alarms.tf`
`tf::aws_cloudwatch_metric_alarm::apigw_5xx`	hardware	healthy	`infra/lambda/alarms.tf`
`tf::tls_private_key::alb`	hardware	healthy	`infra/ec2/alb.tf`
`tf::tls_self_signed_cert::alb`	hardware	healthy	`infra/ec2/alb.tf`
`tf::aws_acm_certificate::alb`	hardware	healthy	`infra/ec2/alb.tf`
`tf::aws_lb::main`	hardware	healthy	`infra/ec2/alb.tf`
`tf::aws_lb_target_group::blue`	hardware	healthy	`infra/ec2/alb.tf`
`tf::aws_lb_target_group::green`	hardware	healthy	`infra/ec2/alb.tf`
`tf::aws_lb_listener::https`	hardware	healthy	`infra/ec2/alb.tf`
`tf::aws_lb_listener::http_redirect`	hardware	healthy	`infra/ec2/alb.tf`
`tf::aws_ssm_parameter::active_color`	hardware	healthy	`infra/ec2/alb.tf`
`tf::aws_ssm_parameter::active_image`	hardware	healthy	`infra/ec2/alb.tf`
`tf::aws_iam_role::codedeploy`	hardware	healthy	`infra/ec2/codedeploy.tf`
`tf::aws_iam_role_policy_attachment::codedeploy`	hardware	healthy	`infra/ec2/codedeploy.tf`
`tf::aws_codedeploy_app::ec2`	hardware	healthy	`infra/ec2/codedeploy.tf`
`tf::aws_codedeploy_deployment_group::ec2`	hardware	healthy	`infra/ec2/codedeploy.tf`
`tf::aws_vpc::main`	hardware	healthy	`infra/ec2/network.tf`
`tf::aws_internet_gateway::main`	hardware	healthy	`infra/ec2/network.tf`
`tf::aws_subnet::public`	hardware	healthy	`infra/ec2/network.tf`
`tf::aws_route_table::public`	hardware	healthy	`infra/ec2/network.tf`
`tf::aws_route_table_association::public`	hardware	healthy	`infra/ec2/network.tf`
`tf::aws_security_group::alb`	hardware	healthy	`infra/ec2/network.tf`
`tf::aws_security_group::instance`	hardware	healthy	`infra/ec2/network.tf`
`tf::aws_cloudwatch_metric_alarm::alb_target_5xx`	hardware	healthy	`infra/ec2/alarms.tf`
`tf::aws_cloudwatch_metric_alarm::alb_target_response_time`	hardware	healthy	`infra/ec2/alarms.tf`
`tf::aws_cloudwatch_metric_alarm::host_cpu`	hardware	healthy	`infra/ec2/alarms.tf`
`tf::aws_cloudwatch_metric_alarm::host_memory`	hardware	healthy	`infra/ec2/alarms.tf`
`tf::aws_iam_role::instance`	hardware	healthy	`infra/ec2/asg.tf`
`tf::aws_iam_role_policy_attachment::ssm`	hardware	healthy	`infra/ec2/asg.tf`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`ENVIRONMENT.md`	software	healthy	`ENVIRONMENT.md`
`README.md`	software	healthy	`README.md`
`CLAUDE.md`	software	healthy	`CLAUDE.md`
`SCALING.md`	software	healthy	`docs/SCALING.md`
`PROMOTION_CHECKLIST.md`	software	healthy	`docs/PROMOTION_CHECKLIST.md`
`bootstrap.sh`	software	healthy	`scripts/bootstrap.sh`
`rotate-and-verify.sh`	software	healthy	`scripts/rotate-and-verify.sh`
`measure-coldstart.sh`	software	healthy	`scripts/measure-coldstart.sh`
`tf.sh`	software	healthy	`scripts/tf.sh`
`smoke.sh`	software	healthy	`scripts/smoke.sh`
`teardown.sh`	software	healthy	`scripts/teardown.sh`
`appspec.yml`	software	healthy	`scripts/codedeploy/appspec.yml`
`install_green.sh`	software	healthy	`scripts/codedeploy/hooks/install_green.sh`
`common.sh`	software	healthy	`scripts/codedeploy/hooks/common.sh`
`validate_and_shift.sh`	software	healthy	`scripts/codedeploy/hooks/validate_and_shift.sh`
`Dockerfile`	software	healthy	`app/Dockerfile`
`main.go`	software	healthy	`app/corrproxy/main.go`
`go.mod`	software	healthy	`app/corrproxy/go.mod`
`main.go`	software	healthy	`app/secret-extension/main.go`
`go.mod`	software	healthy	`app/secret-extension/go.mod`
`main.tf`	software	healthy	`infra/observability/main.tf`
`latest-image.sh`	software	healthy	`infra/lambda/latest-image.sh`
`apigw.tf`	software	healthy	`infra/lambda/apigw.tf`
`main.tf`	software	healthy	`infra/lambda/main.tf`
`variables.tf`	software	healthy	`infra/lambda/variables.tf`
`codedeploy.tf`	software	healthy	`infra/lambda/codedeploy.tf`
`versions.tf`	software	healthy	`infra/lambda/versions.tf`
`alarms.tf`	software	healthy	`infra/lambda/alarms.tf`
`outputs.tf`	software	healthy	`infra/lambda/outputs.tf`
`alb.tf`	software	healthy	`infra/ec2/alb.tf`
`variables.tf`	software	healthy	`infra/ec2/variables.tf`
`codedeploy.tf`	software	healthy	`infra/ec2/codedeploy.tf`
`versions.tf`	software	healthy	`infra/ec2/versions.tf`
`network.tf`	software	healthy	`infra/ec2/network.tf`
`alarms.tf`	software	healthy	`infra/ec2/alarms.tf`
`outputs.tf`	software	healthy	`infra/ec2/outputs.tf`
`asg.tf`	software	healthy	`infra/ec2/asg.tf`
`ecr.tf`	software	healthy	`infra/global/ecr.tf`
`secrets.tf`	software	healthy	`infra/global/secrets.tf`
`logs.tf`	software	healthy	`infra/global/logs.tf`
`variables.tf`	software	healthy	`infra/global/variables.tf`
`versions.tf`	software	healthy	`infra/global/versions.tf`
`kms.tf`	software	healthy	`infra/global/kms.tf`
`iam.tf`	software	healthy	`infra/global/iam.tf`
`outputs.tf`	software	healthy	`infra/global/outputs.tf`
`handler.py`	software	healthy	`infra/global/rotation/handler.py`
`pipeline.yml`	software	healthy	`.github/workflows/pipeline.yml`
`deploy.yml`	software	healthy	`.github/workflows/deploy.yml`
`CLAUDE.md`	quality	healthy	`CLAUDE.md`

Label	Layer	Status	Path
`docs`	software	healthy	`docs`
`scripts`	software	healthy	`scripts`
`codedeploy`	software	healthy	`scripts/codedeploy`
`hooks`	software	healthy	`scripts/codedeploy/hooks`
`app`	software	healthy	`app`
`corrproxy`	software	healthy	`app/corrproxy`
`secret-extension`	software	healthy	`app/secret-extension`
`infra`	software	healthy	`infra`
`observability`	software	healthy	`infra/observability`
`lambda`	software	healthy	`infra/lambda`
`ec2`	software	healthy	`infra/ec2`
`global`	software	healthy	`infra/global`
`rotation`	software	healthy	`infra/global/rotation`
`.github`	software	healthy	`.github`
`workflows`	software	healthy	`.github/workflows`

Label	Layer	Status	Path
`ECR_REPO`	cicd	healthy	`—`
`PODINFO_COMMIT`	cicd	healthy	`—`
`PODINFO_VERSION`	cicd	healthy	`—`
`ECR_REGISTRY`	cicd	healthy	`—`
`AWS_REGION`	cicd	healthy	`—`

Label	Layer	Status	Path
`handler`	software	dead	`infra/global/rotation/handler.py:20`
`create_secret`	software	healthy	`infra/global/rotation/handler.py:48`
`test_secret`	software	healthy	`infra/global/rotation/handler.py:63`
`finish_secret`	software	healthy	`infra/global/rotation/handler.py:72`

Label	Layer	Status	Path
`build`	cicd	healthy	`.github/workflows/pipeline.yml`
`deploy-dev`	cicd	healthy	`.github/workflows/pipeline.yml`
`deploy-prod`	cicd	healthy	`.github/workflows/pipeline.yml`
`deploy`	cicd	healthy	`.github/workflows/deploy.yml`

Label	Layer	Status	Path
`auth::.github/workflows/deploy.yml`	security	healthy	`.github/workflows/deploy.yml`
`auth::README.md`	security	healthy	`README.md`
`auth::.github/workflows/pipeline.yml`	security	healthy	`.github/workflows/pipeline.yml`

Label	Layer	Status	Path
`port:9898`	network	healthy	`scripts/rotate-and-verify.sh`
`port:9899`	network	healthy	`scripts/rotate-and-verify.sh`

Label	Layer	Status	Path
`169.254.169.254`	network	healthy	`scripts/codedeploy/hooks/common.sh`
`127.0.0.1`	network	healthy	`app/corrproxy/main.go`

Label	Layer	Status	Path
`vps::ec2`	hardware	healthy	`README.md`
`vps::aws`	hardware	healthy	`README.md`

Label	Layer	Status	Path
`gha::pipeline`	cicd	healthy	`.github/workflows/pipeline.yml`
`gha::deploy`	cicd	healthy	`.github/workflows/deploy.yml`

Label	Layer	Status	Path
`repobility-clone-c93c8qk2`	software	healthy	`/tmp/repobility-clone-c93c8qk2`

Label	Layer	Status	Path
`tf::aws_iam_instance_profile::instance`	hardware	healthy	`infra/ec2/asg.tf`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/225447bc-1fa9-433a-b04f-bd6644580704/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/225447bc-1fa9-433a-b04f-bd6644580704/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

shahidkarimi/canary-rollout-project

Complete repo analysis

container 50+

file 49

directory 15

env_var 5

function 4

job 4

auth 3

port 2

service 2

vps 2

pipeline 2

repo 1

vm 1