Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo
9 of your 12 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 2.61s · analysis 1.87s · 0.4 MB · GitHub API rate-limit (preflight)

devops-infra/action-pull-request

https://github.com/devops-infra/action-pull-request · scanned 2026-06-05 17:38 UTC (4 days, 22 hours ago) · 10 languages

48 raw signals (12 security + 36 graph) 96th percentile · Python · tiny (<2K LoC)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 4 days, 22 hours ago · v2 · 16 actionable findings from 2 signal sources. 14 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
77.4
/100
Security checks
74
8 findings
System graph
81
77.8% cov · 8 findings
Critical
0
click to filter
Agents
6
0 votes
Crowd
0
reported
Score breakdown â 2026-05-18-v5
Component Sub-score Weight Contribution
structure_score 45.0 0.15 6.75
security_score 97.1 0.25 24.27
testing_score 85.0 0.20 17.00
documentation_score 75.0 0.15 11.25
practices_score 89.0 0.15 13.35
code_quality 80.0 0.10 8.00
Overall 1.00 80.6
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 0 High 6 Medium 4 Low 3 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 8 System graph 8 Crowd 0 Layer: Cicd 6 Quality 2 Software 2 Api 1 Hardware 3 Frontend 1 Security 1

All 58 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

LabelLayerStatusPath
action.yml software healthy action.yml
.yamllint.yml software healthy .yamllint.yml
README.md software healthy README.md
Dockerfile software healthy Dockerfile
.pre-commit-config.yaml software healthy .pre-commit-config.yaml
Taskfile.yml software healthy Taskfile.yml
Taskfile.scripts.yml software healthy Taskfile.scripts.yml
Taskfile.docker.yml software healthy Taskfile.docker.yml
.env.example software healthy .env.example
.hadolint.yaml software healthy .hadolint.yaml
Taskfile.variables.yml software healthy Taskfile.variables.yml
Taskfile.cicd.yml software healthy Taskfile.cicd.yml
entrypoint.sh software healthy entrypoint.sh
local-image.yml software healthy tests/docker/local-image.yml
test_repository_validation.sh software healthy tests/unit/test_repository_validation.sh
test_branch_validation.sh software healthy tests/unit/test_branch_validation.sh
test_repository_configuration.sh software healthy tests/unit/test_repository_configuration.sh
test_existing_pr_lookup.sh software healthy tests/unit/test_existing_pr_lookup.sh
test_pr_create_with_gh.sh software healthy tests/unit/test_pr_create_with_gh.sh
test_input_limits_validation.sh software healthy tests/unit/test_input_limits_validation.sh
test_replace_template_diff.sh software healthy tests/unit/test_replace_template_diff.sh
test_split_content_bytes.py software healthy tests/unit/test_split_content_bytes.py
test_template_source_selection.sh software healthy tests/unit/test_template_source_selection.sh
replace-template-diff.sh software healthy scripts/replace-template-diff.sh
split_content_bytes.py software healthy scripts/split_content_bytes.py
dependabot.yml software healthy .github/dependabot.yml
manual-release-branch-prepare.yml software healthy .github/workflows/manual-release-branch-prepare.yml
auto-pull-request-create.yml software healthy .github/workflows/auto-pull-request-create.yml
manual-e2e-validate.yml software healthy .github/workflows/manual-e2e-validate.yml
manual-release-create.yml software healthy .github/workflows/manual-release-create.yml
cron-dependency-update.yml software healthy .github/workflows/cron-dependency-update.yml
auto-release-create.yml software healthy .github/workflows/auto-release-create.yml

LabelLayerStatusPath
tests software healthy tests
docker software healthy tests/docker
unit software healthy tests/unit
scripts software healthy scripts
.github software healthy .github
workflows software healthy .github/workflows

LabelLayerStatusPath
gha::manual-release-branch-prepare cicd healthy .github/workflows/manual-release-branch-prepare.yml
gha::auto-pull-request-create cicd healthy .github/workflows/auto-pull-request-create.yml
gha::manual-e2e-validate cicd healthy .github/workflows/manual-e2e-validate.yml
gha::manual-release-create cicd healthy .github/workflows/manual-release-create.yml
gha::cron-dependency-update cicd healthy .github/workflows/cron-dependency-update.yml
gha::auto-release-create cicd healthy .github/workflows/auto-release-create.yml

LabelLayerStatusPath
call cicd healthy .github/workflows/manual-release-branch-prepare.yml
call cicd healthy .github/workflows/auto-pull-request-create.yml
e2e cicd healthy .github/workflows/manual-e2e-validate.yml
call cicd healthy .github/workflows/manual-release-create.yml
call cicd healthy .github/workflows/cron-dependency-update.yml
call cicd healthy .github/workflows/auto-release-create.yml

LabelLayerStatusPath
read software healthy tests/unit/test_split_content_bytes.py:11
main software healthy tests/unit/test_split_content_bytes.py:16
take_prefix_by_bytes software healthy scripts/split_content_bytes.py:10
split_chunks software healthy scripts/split_content_bytes.py:26
main software healthy scripts/split_content_bytes.py:50

LabelLayerStatusPath
repobility-clone-jnnrnepz software healthy /tmp/repobility-clone-jnnrnepz

LabelLayerStatusPath
port:05 network healthy .github/dependabot.yml

LabelLayerStatusPath
image::Dockerfile hardware healthy Dockerfile
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/2368cd81-0e9f-4d73-a031-6ca41589207d/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/2368cd81-0e9f-4d73-a031-6ca41589207d/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.