Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo
42 of your 72 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

u-root/u-root

https://github.com/u-root/u-root · scanned 2026-06-05 17:20 UTC (4 days, 22 hours ago) · 10 languages

219 raw signals (67 security + 152 graph) 11/13 scanners ran 94th percentile · Go · medium (20-100K LoC) System graph score 61 (higher by 20)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 4 days, 22 hours ago · v2 · 71 actionable findings from 2 signal sources. 72 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
75.1
/100
Security checks
89
21 findings
System graph
61
88.9% cov · 50 findings
Critical
2
click to filter
Agents
6
0 votes
Crowd
0
reported
Score breakdown â 2026-05-18-v5
Component Sub-score Weight Contribution
structure_score 85.0 0.15 12.75
security_score 100.0 0.25 25.00
testing_score 80.0 0.20 16.00
documentation_score 61.0 0.15 9.15
practices_score 72.0 0.15 10.80
code_quality 80.0 0.10 8.00
Overall 1.00 81.7
security_score may be inflated — optional security scanners were skipped on this fast scan
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 2 High 5 Medium 22 Low 27 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 21 System graph 50 Crowd 0 Layer: Quality 19 Security 11 Software 15 Cicd 5 Api 1 Frontend 2 Network 4 Hardware 14

All 2066 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

LabelLayerStatusPath
.golangci.yml software healthy .golangci.yml
roadmap.md software healthy roadmap.md
uroot_test.go software healthy uroot_test.go
AI_POLICY.md software healthy AI_POLICY.md
README.md software healthy README.md
dependencies.go software healthy dependencies.go
CONTRIBUTING.md software healthy CONTRIBUTING.md
.mkuimage.yaml software healthy .mkuimage.yaml
u-root.go software healthy u-root.go
.vmtest.yaml software healthy .vmtest.yaml
go.mod software healthy go.mod
tricksandtips.md software healthy tricksandtips.md
SECURITY.md software healthy SECURITY.md
codecov.yml software healthy codecov.yml
README.md software healthy integration/README.md
helloworld.go software healthy integration/testcmd/helloworld/helloworld.go
netstat_test.go software healthy integration/generic-tests/netstat_test.go
multiboot_test.go software healthy integration/generic-tests/multiboot_test.go
fork_bomb_test.go software healthy integration/generic-tests/fork_bomb_test.go
traceroute_test.go software healthy integration/generic-tests/traceroute_test.go
uinit_test.go software healthy integration/generic-tests/uinit_test.go
netcat_test.go software healthy integration/generic-tests/netcat_test.go
pxeboot_test.go software healthy integration/generic-tests/pxeboot_test.go
dhclient_test.go software healthy integration/generic-tests/dhclient_test.go
uefiboot_test.go software healthy integration/generic-tests/uefiboot_test.go
brctl_test.go software healthy integration/generic-tests/brctl_test.go
io_test.go software healthy integration/generic-tests/io_test.go
esxi_boot_test.go software healthy integration/generic-tests/esxi_boot_test.go
main_test.go software healthy integration/generic-tests/main_test.go
kexec_test.go software healthy integration/generic-tests/kexec_test.go
ip_test.go software healthy integration/generic-tests/ip_test.go
tcz_test.go software healthy integration/generic-tests/tcz_test.go
tc_test.go software healthy integration/generic-tests/tc_test.go
wc.go software healthy integration/generic-tests/wc.go
universalpayload_arm64_test.go software healthy integration/generic-tests/universalpayload_arm64_test.go
universalpayload_amd64_test.go software healthy integration/generic-tests/universalpayload_amd64_test.go
gotest_test.go software healthy integration/gotests/gotest_test.go
io_linux_test.go software healthy integration/generic-tests-cpu/io_linux_test.go
ip_linux_test.go software healthy integration/generic-tests-cpu/ip_linux_test.go
kexec_linux_test.go software healthy integration/generic-tests-cpu/kexec_linux_test.go
config.yml software healthy .circleci/config.yml
README.md software healthy .circleci/images/README.md
builduploadall.sh software healthy .circleci/images/builduploadall.sh
Dockerfile software healthy .circleci/images/ovmf-amd64/Dockerfile
Dockerfile software healthy .circleci/images/kernel-arm64/Dockerfile
Dockerfile software healthy .circleci/images/multiboot-test-kernel-amd64/Dockerfile
Dockerfile software healthy .circleci/images/test-image-tamago/Dockerfile
Dockerfile software healthy .circleci/images/kernel-arm/Dockerfile
Dockerfile software healthy .circleci/images/upl-fit-amd64/Dockerfile
Dockerfile software healthy .circleci/images/ovmf-arm64/Dockerfile

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
integration software healthy integration
testcmd software healthy integration/testcmd
helloworld software healthy integration/testcmd/helloworld
generic-tests software healthy integration/generic-tests
gotests software healthy integration/gotests
generic-tests-cpu software healthy integration/generic-tests-cpu
.circleci software healthy .circleci
images software healthy .circleci/images
ovmf-amd64 software healthy .circleci/images/ovmf-amd64
kernel-arm64 software healthy .circleci/images/kernel-arm64
multiboot-test-kernel-amd64 software healthy .circleci/images/multiboot-test-kernel-amd64
test-image-tamago software healthy .circleci/images/test-image-tamago
kernel-arm software healthy .circleci/images/kernel-arm
upl-fit-amd64 software healthy .circleci/images/upl-fit-amd64
ovmf-arm64 software healthy .circleci/images/ovmf-arm64
upl-fit-arm64 software healthy .circleci/images/upl-fit-arm64
kernel-amd64 software healthy .circleci/images/kernel-amd64
uefipayload-amd64 software healthy .circleci/images/uefipayload-amd64
docs software healthy docs
securelaunch software healthy docs/securelaunch
fuzzing software healthy docs/fuzzing
src software healthy docs/src
transforms software healthy docs/src/transforms
scripts software healthy docs/src/scripts
success-stories software healthy docs/src/success-stories
shortcodes software healthy docs/src/shortcodes
_includes software healthy docs/src/_includes
partials software healthy docs/src/_includes/partials
scss software healthy docs/src/scss
layout software healthy docs/src/scss/layout
utilities software healthy docs/src/scss/utilities
blocks software healthy docs/src/scss/blocks
fonts software healthy docs/src/fonts
_data software healthy docs/src/_data
filters software healthy docs/src/filters
examples software healthy examples
uinit software healthy examples/uinit
tools software healthy tools
tinygo-buildstatus software healthy tools/tinygo-buildstatus
pkg software healthy tools/tinygo-buildstatus/pkg
testramfs software healthy tools/testramfs
cinema software healthy tools/testramfs/cinema
vpdbootmanager software healthy tools/vpdbootmanager
tinygobb software healthy tools/tinygobb
checklicenses software healthy tools/checklicenses
golang_patched_dce software healthy tools/golang_patched_dce
tinygoize software healthy tools/tinygoize
build_perf software healthy tools/build_perf
cmds software healthy cmds
exp software healthy cmds/exp

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
192.168.0.0 network healthy integration/generic-tests/netstat_test.go
255.255.255.0 network healthy integration/generic-tests/netstat_test.go
127.0.0.1 network healthy integration/generic-tests/netstat_test.go
192.168.0.1 network healthy integration/generic-tests/netstat_test.go
192.168.10.1 network healthy integration/generic-tests/traceroute_test.go
192.168.10.10 network healthy integration/generic-tests/traceroute_test.go
192.168.20.1 network healthy integration/generic-tests/traceroute_test.go
192.168.20.10 network healthy integration/generic-tests/traceroute_test.go
10.0.2.15 network healthy integration/generic-tests/traceroute_test.go
10.0.2.2 network healthy integration/generic-tests/traceroute_test.go
192.168.0.2 network healthy integration/generic-tests/netcat_test.go
192.168.1.1 network healthy integration/generic-tests/ip_test.go
192.168.2.0 network healthy integration/generic-tests/ip_test.go
192.168.2.1 network healthy integration/generic-tests/ip_test.go
192.168.2.2 network healthy integration/generic-tests/ip_test.go
10.0.0.1 network healthy integration/generic-tests/ip_test.go
192.168.2.3 network healthy integration/generic-tests/ip_test.go
172.16.0.1 network healthy integration/generic-tests/ip_test.go
192.168.3.1 network healthy integration/generic-tests/ip_test.go
172.17.0.1 network healthy integration/generic-tests/ip_test.go
192.168.1.2 network healthy integration/generic-tests/ip_test.go
192.168.1.5 network healthy integration/generic-tests/ip_test.go
192.168.1.6 network healthy integration/generic-tests/ip_test.go
192.168.1.7 network healthy integration/generic-tests/ip_test.go
255.255.255.255 network healthy integration/generic-tests/tcz_test.go
192.168.241.1 network healthy integration/generic-tests-cpu/ip_linux_test.go
192.168.242.0 network healthy integration/generic-tests-cpu/ip_linux_test.go
192.168.242.1 network healthy integration/generic-tests-cpu/ip_linux_test.go
192.168.242.2 network healthy integration/generic-tests-cpu/ip_linux_test.go
192.168.242.3 network healthy integration/generic-tests-cpu/ip_linux_test.go
192.168.243.1 network healthy integration/generic-tests-cpu/ip_linux_test.go
192.168.241.2 network healthy integration/generic-tests-cpu/ip_linux_test.go
192.168.241.5 network healthy integration/generic-tests-cpu/ip_linux_test.go
192.168.241.6 network healthy integration/generic-tests-cpu/ip_linux_test.go
192.168.241.7 network healthy integration/generic-tests-cpu/ip_linux_test.go
192.168.0.104 network healthy cmds/exp/tcpdump/main_test.go
140.82.121.4 network healthy cmds/exp/ssh/ssh_test.go
127.0.1.1 network healthy cmds/core/netcat/listen_test.go
127.0.2.1 network healthy cmds/core/netcat/listen_test.go
127.0.3.1 network healthy cmds/core/netcat/listen_test.go
127.0.3.2 network healthy cmds/core/netcat/listen_test.go
127.0.3.3 network healthy cmds/core/netcat/listen_test.go
127.0.4.1 network healthy cmds/core/netcat/listen_test.go
127.0.4.2 network healthy cmds/core/netcat/listen_test.go
127.0.4.3 network healthy cmds/core/netcat/listen_test.go
127.0.0.2 network healthy cmds/core/netcat/listen_test.go
127.0.0.3 network healthy cmds/core/netcat/listen_test.go
127.0.0.4 network healthy cmds/core/netcat/connect_test.go
1.1.1.1 network healthy cmds/core/ping/ping_test.go
192.168.1.0 network healthy cmds/core/ip/parsing_linux_test.go

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
port:256 network healthy .vmtest.yaml
port:4439 network healthy .vmtest.yaml
port:1133 network healthy .vmtest.yaml
port:0550 network healthy .vmtest.yaml
port:2222 network healthy cmds/exp/newsshd/newsshd_test.go
port:2022 network healthy cmds/exp/newsshd/newsshd_test.go
port:3333 network healthy cmds/exp/cmd2pkg/test/nested/nestedmod/cmd/p9ufs/main.go
port:80 network healthy cmds/exp/tcpdump/util_test.go
port:443 network healthy cmds/exp/tcpdump/util_test.go
port:8080 network healthy cmds/exp/tcpdump/util_test.go
port:22 network healthy cmds/exp/tcpdump/util_test.go
port:666 network healthy cmds/exp/tcpdump/util_test.go
port:69 network healthy pkg/tftp/tftp_test.go
port:3260 network healthy pkg/dhclient/iscsiuri.go

LabelLayerStatusPath
image::.circleci/images/ovmf-amd64/Dockerfile hardware healthy .circleci/images/ovmf-amd64/Dockerfile
image::.circleci/images/kernel-arm64/Dockerfile hardware healthy .circleci/images/kernel-arm64/Dockerfile
image::.circleci/images/multiboot-test-kernel-amd64/Dockerf… hardware healthy .circleci/images/multiboot-test-kernel-amd64/Dockerfile
image::.circleci/images/test-image-tamago/Dockerfile hardware healthy .circleci/images/test-image-tamago/Dockerfile
image::.circleci/images/kernel-arm/Dockerfile hardware healthy .circleci/images/kernel-arm/Dockerfile
image::.circleci/images/upl-fit-amd64/Dockerfile hardware healthy .circleci/images/upl-fit-amd64/Dockerfile
image::.circleci/images/ovmf-arm64/Dockerfile hardware healthy .circleci/images/ovmf-arm64/Dockerfile
image::.circleci/images/upl-fit-arm64/Dockerfile hardware healthy .circleci/images/upl-fit-arm64/Dockerfile
image::.circleci/images/kernel-amd64/Dockerfile hardware healthy .circleci/images/kernel-amd64/Dockerfile
image::.circleci/images/uefipayload-amd64/Dockerfile hardware healthy .circleci/images/uefipayload-amd64/Dockerfile
image::tools/golang_patched_dce/Dockerfile hardware healthy tools/golang_patched_dce/Dockerfile

LabelLayerStatusPath
golangci cicd healthy .github/workflows/golangci-lint.yml
analyze cicd healthy .github/workflows/codeql-analysis.yml
linters cicd healthy .github/workflows/go.yml
build cicd healthy .github/workflows/go.yml
badbuild cicd healthy .github/workflows/go.yml
multi-os-arch cicd healthy .github/workflows/go.yml
build-image cicd healthy .github/workflows/test-images.yml
Fuzzing cicd healthy .github/workflows/cifuzz.yml
test cicd healthy .github/workflows/tests.yml
build cicd healthy .github/workflows/homepage.yml
build cicd healthy .github/workflows/tinygo.yml

LabelLayerStatusPath
gha::golangci-lint cicd healthy .github/workflows/golangci-lint.yml
gha::codeql-analysis cicd healthy .github/workflows/codeql-analysis.yml
gha::go cicd healthy .github/workflows/go.yml
gha::test-images cicd healthy .github/workflows/test-images.yml
gha::cifuzz cicd healthy .github/workflows/cifuzz.yml
gha::tests cicd healthy .github/workflows/tests.yml
gha::homepage cicd healthy .github/workflows/homepage.yml
gha::tinygo cicd healthy .github/workflows/tinygo.yml
circleci cicd healthy .circleci/config.yml

LabelLayerStatusPath
insertCss software healthy docs/src/transforms/css-purge-inline.js:insertCss
startOffsetPercent software healthy docs/src/scripts/homeHeroAnimation.js:startOffsetPercent
below software healthy docs/src/scripts/homeHeroAnimation.js:below
segment software healthy docs/src/_data/global.js:segment
markdown software healthy docs/src/filters/markdown-filter.js:markdown

LabelLayerStatusPath
GITHUB_TOKEN cicd healthy —
REGISTRY cicd healthy —

LabelLayerStatusPath
repobility-clone-kpld9syy software healthy /tmp/repobility-clone-kpld9syy

LabelLayerStatusPath
password_literal::cmds/exp/ssh/utils_plan9.go security healthy cmds/exp/ssh/utils_plan9.go
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/2fcec4ea-77dc-4b3f-ba33-9dc1ecd00739/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/2fcec4ea-77dc-4b3f-ba33-9dc1ecd00739/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.