https://github.com/screenpipe/screenpipe
· scanned 2026-06-16 00:06 UTC (2 months, 2 weeks ago)
569 raw signals (0 security + 569 graph)
Last scanned 2 months, 2 weeks ago · v1 · 453 actionable findings from 1 signal source. 116 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.
Showing 255 of 453 actionable findings. 569 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.
packages/ai-gateway/src/providers/vertex.ts:97
Private key in repo
apps/screenpipe-app-tauri/e2e/mock-updates/updater-harness.ts:24
apps/screenpipe-app-tauri/src-tauri/src/main.rs:1108
crates/screenpipe-core/src/pii_removal.rs:615, 631, 650 (3 hits)crates/screenpipe-core/src/sync/keys.rs:271, 272 (2 hits)crates/screenpipe-redact/src/pipeline.rs:381
packages/cli/npm-e2e/lib/registry.ts:77
packages/cli/screenpipe/scripts/postinstall.js:70
packages/cli/screenpipe/scripts/postinstall.sh:167
.devcontainer/Dockerfile:8, 71 (2 hits).github/workflows/gitleaks.yml:35
CI/CD securitySupply chainGithub actions
.github/workflows/style.yml:53
CI/CD securitySupply chainGithub actions
packages/e2e/src/suites/cli.ts:38
Exec used
packages/e2e/src/suites/models.ts:90
Exec used
.claude/skills/screenpipe-api/SKILL.md
VerificationClaude instruction
.claude/skills/screenpipe-logs/SKILL.md
VerificationClaude instruction
crates/screenpipe-core/assets/skills/screenpipe-api/SKILL.md
VerificationSkill file
crates/screenpipe-core/assets/skills/screenpipe-team/SKILL.md
VerificationSkill file
.github/workflows/e2e-test.yml:31, 55, 89, 98, 110, 164, 458, 467, +4 more (12 hits).github/workflows/release-enterprise.yml:44, 58, 77, 113, 186, 311, 321 (7 hits).github/workflows/ci.yml:51, 99, 107, 112, 266, 292 (6 hits).github/workflows/release-app.yml:257, 268, 308, 453, 1680 (5 hits).github/workflows/release-cli.yml:72, 275, 322, 497 (4 hits).github/workflows/sdk.yml:45, 49, 85, 89 (4 hits).github/workflows/e2e-macos.yml:39, 45, 80 (3 hits).github/workflows/windows-integration-test.yml:31, 39, 69 (3 hits).github/workflows/release-app.yml.github/workflows/release-cli.yml.github/workflows/release-mcp.yml.github/workflows/sdk-release.yml.github/workflows/sync-skills.ymlapps/screenpipe-app-tauri/e2e/mock-updates/updater-harness.ts:216
Cors wildcard
packages/ai-gateway/src/handlers/tinfoil-proxy.ts:158
Cors wildcard
packages/ai-gateway/src/utils/cors.ts:7
Cors wildcard
packages/screenpipe-mcp/src/http-server.ts:303
Cors wildcard
apps/screenpipe-app-tauri/app/layout.tsx:336
Dangerous innerhtml
apps/screenpipe-app-tauri/components/rewind/mermaid-diagram.tsx:192
Dangerous innerhtml
packages/screenpipe-mcp/ui/search.html:408
Direct innerhtml assignment
apps/screenpipe-app-tauri/lib/api.ts:44
Local storage auth token
apps/screenpipe-app-tauri/e2e/helpers/app-launcher.ts:5
Node child process
apps/screenpipe-app-tauri/e2e/helpers/seed-capture-activity.ts:5
Node child process
crates/screenpipe-core/assets/extensions/sub-agent.ts:69
Node child process
ee/sdk/index.js:20
Node child process
packages/cli/npm-e2e/lib/process.ts:5
Node child process
packages/cli/npm-e2e/lib/registry.ts:5
Node child process
packages/cli/npm-e2e/lib/utils.ts:5
Node child process
packages/cli/npm-e2e/setup.ts:5
Node child process
packages/cli/screenpipe/lib/cli.js:11
Node child process
packages/cli/screenpipe/lib/index.js:5
Node child process
packages/cli/screenpipe/scripts/postinstall.js:6
Node child process
packages/screenpipe-mcp/src/index.ts:61
Node child process
.devcontainer/Dockerfile:2
containersPinned dependencies
.github/workflows/release-cli.yml:69, 92, 243, 254, 480, 494, 598, 608, +4 more (12 hits).github/workflows/e2e-test.yml:77, 156, 246, 258, 489, 500, 549, 561 (8 hits).github/workflows/benchmark.yml:36, 58, 78, 100, 118, 124 (6 hits).github/workflows/release-enterprise.yml:49, 90, 297, 316, 333, 770 (6 hits).github/workflows/release-app.yml:262, 325, 342, 355, 373 (5 hits).github/workflows/eval-diarization.yml:133, 144, 440 (3 hits).github/workflows/windows-integration-test.yml:26, 255, 265 (3 hits).github/workflows/release-mcp.yml:20, 23 (2 hits)ee/sdk/examples/electron-app/package.json
LockfileReproducibilityGenerated repo pattern
packages/cli/screenpipe/package.json
LockfileReproducibilityGenerated repo pattern
packages/e2e/package.json
LockfileReproducibilityGenerated repo pattern
packages/cli/screenpipe/package.json
CI/CD securitySupply chainNpm
This page is publicly accessible at:
https://repobility.com/scan/24f6ba0f-7a84-402e-ba62-71c7a3781e03/
To check status programmatically (no auth required):
curl -s https://repobility.com/api/v1/public/scan/24f6ba0f-7a84-402e-ba62-71c7a3781e03/
Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.