Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

yourtablecloth/macSandbox

https://github.com/yourtablecloth/macSandbox · scanned 2026-06-16 01:07 UTC (2 months, 1 week ago)

13 raw signals (0 security + 13 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 1 week ago · v1 · 13 actionable findings from 1 signal source. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

66.7% cov · 13 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 0 Medium 8 Low 3 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 13 Crowd 0 Layer: Frontend 1 Security 1 Cicd 2 Quality 9

Exclude dismissed / FP Exclude test files

All 129 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`ARCHITECTURE.md`	software	healthy	`ARCHITECTURE.md`
`README.md`	software	healthy	`README.md`
`WSB-SUPPORT.md`	software	healthy	`WSB-SUPPORT.md`
`CLA.md`	software	healthy	`CLA.md`
`COMMERCIAL-LICENSE.md`	software	healthy	`COMMERCIAL-LICENSE.md`
`LICENSING.md`	software	healthy	`LICENSING.md`
`THIRD-PARTY-NOTICES.md`	software	healthy	`THIRD-PARTY-NOTICES.md`
`LICENSE`	software	healthy	`LICENSE`
`Package.swift`	software	healthy	`Package.swift`
`index.md`	software	healthy	`docs/index.md`
`_config.yml`	software	healthy	`docs/_config.yml`
`help.md`	software	healthy	`docs/help.md`
`bundle_dylibs.py`	software	healthy	`scripts/bundle_dylibs.py`
`update_lock.py`	software	healthy	`scripts/update_lock.py`
`package_app.sh`	software	healthy	`scripts/package_app.sh`
`fetch_gpl_sources.py`	software	healthy	`scripts/fetch_gpl_sources.py`
`apply_license_headers.py`	software	healthy	`scripts/apply_license_headers.py`
`bundle_qemu.py`	software	healthy	`scripts/bundle_qemu.py`
`build.sh`	software	healthy	`scripts/build.sh`
`qemu-bottles.lock.json`	software	healthy	`scripts/qemu-bottles.lock.json`
`make_assets.swift`	software	healthy	`scripts/make_assets.swift`
`release.yml`	software	healthy	`.github/workflows/release.yml`
`MacSandboxApp.swift`	software	healthy	`src/MacSandbox/MacSandboxApp.swift`
`ConsentStore.swift`	software	healthy	`src/MacSandbox/Core/ConsentStore.swift`
`WinPEDeployMediaBuilder.swift`	software	healthy	`src/MacSandbox/Core/WinPEDeployMediaBuilder.swift`
`SandboxPaths.swift`	software	healthy	`src/MacSandbox/Core/SandboxPaths.swift`
`BaselineBuilder.swift`	software	healthy	`src/MacSandbox/Core/BaselineBuilder.swift`
`SandboxRunner.swift`	software	healthy	`src/MacSandbox/Core/SandboxRunner.swift`
`RDPSession.swift`	software	healthy	`src/MacSandbox/Core/RDPSession.swift`
`WSBConfig.swift`	software	healthy	`src/MacSandbox/Core/WSBConfig.swift`
`L10n.swift`	software	healthy	`src/MacSandbox/Core/L10n.swift`
`VMConsole.swift`	software	healthy	`src/MacSandbox/Core/VMConsole.swift`
`Lifecycle.swift`	software	healthy	`src/MacSandbox/Core/Lifecycle.swift`
`UnattendBuilder.swift`	software	healthy	`src/MacSandbox/Core/UnattendBuilder.swift`
`OpenWSB.swift`	software	healthy	`src/MacSandbox/Core/OpenWSB.swift`
`GuestDrivers.swift`	software	healthy	`src/MacSandbox/Core/GuestDrivers.swift`
`AppOptions.swift`	software	healthy	`src/MacSandbox/Core/AppOptions.swift`
`LogBuffer.swift`	software	healthy	`src/MacSandbox/Core/LogBuffer.swift`
`SandboxModels.swift`	software	healthy	`src/MacSandbox/Core/SandboxModels.swift`
`SandboxConfig.swift`	software	healthy	`src/MacSandbox/Core/SandboxConfig.swift`
`DiskService.swift`	software	healthy	`src/MacSandbox/Core/DiskService.swift`
`QEMURuntime.swift`	software	healthy	`src/MacSandbox/Core/QEMURuntime.swift`
`BaselineAdmin.swift`	software	healthy	`src/MacSandbox/Core/BaselineAdmin.swift`
`QMPInput.swift`	software	healthy	`src/MacSandbox/Core/QMPInput.swift`
`en.md`	software	healthy	`src/MacSandbox/Terms/en.md`
`ja.md`	software	healthy	`src/MacSandbox/Terms/ja.md`
`es.md`	software	healthy	`src/MacSandbox/Terms/es.md`
`ko.md`	software	healthy	`src/MacSandbox/Terms/ko.md`
`fr.md`	software	healthy	`src/MacSandbox/Terms/fr.md`
`de.md`	software	healthy	`src/MacSandbox/Terms/de.md`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`deps`	software	healthy	`scripts/bundle_dylibs.py:18`
`main`	software	healthy	`scripts/bundle_dylibs.py:29`
`process`	software	healthy	`scripts/bundle_dylibs.py:42`
`fetch_formula`	software	healthy	`scripts/update_lock.py:72`
`extract_bottle_info`	software	healthy	`scripts/update_lock.py:87`
`_ghcr_token`	software	healthy	`scripts/update_lock.py:131`
`check_ghcr_availability`	software	healthy	`scripts/update_lock.py:146`
`main`	software	healthy	`scripts/update_lock.py:205`
`brew_available`	software	healthy	`scripts/fetch_gpl_sources.py:31`
`brew_cache_for`	software	healthy	`scripts/fetch_gpl_sources.py:35`
`upstream_basename`	software	healthy	`scripts/fetch_gpl_sources.py:45`
`installed_version`	software	healthy	`scripts/fetch_gpl_sources.py:51`
`main`	software	healthy	`scripts/fetch_gpl_sources.py:61`
`header_block`	software	healthy	`scripts/apply_license_headers.py:34`
`has_header`	software	healthy	`scripts/apply_license_headers.py:39`
`iter_files`	software	healthy	`scripts/apply_license_headers.py:44`
`main`	software	healthy	`scripts/apply_license_headers.py:54`
`log`	software	healthy	`scripts/bundle_qemu.py:61`
`run`	software	healthy	`scripts/bundle_qemu.py:66`
`sha256_file`	software	healthy	`scripts/bundle_qemu.py:70`
`load_lockfile`	software	healthy	`scripts/bundle_qemu.py:82`
`ghcr_url`	software	healthy	`scripts/bundle_qemu.py:94`
`ghcr_token`	software	healthy	`scripts/bundle_qemu.py:104`
`_download_ghcr`	software	healthy	`scripts/bundle_qemu.py:124`
`_download_brew_fetch`	software	healthy	`scripts/bundle_qemu.py:144`
`download_bottle`	software	healthy	`scripts/bundle_qemu.py:170`
`extract_bottle`	software	healthy	`scripts/bundle_qemu.py:252`
`collect_files`	software	healthy	`scripts/bundle_qemu.py:273`
`otool_deps`	software	healthy	`scripts/bundle_qemu.py:329`
`otool_id`	software	healthy	`scripts/bundle_qemu.py:344`
`needs_rewrite`	software	healthy	`scripts/bundle_qemu.py:353`
`is_relocatable_id`	software	healthy	`scripts/bundle_qemu.py:363`
`rewrite_dylib_paths`	software	healthy	`scripts/bundle_qemu.py:368`
`make_writable`	software	healthy	`scripts/bundle_qemu.py:375`
`rewrite_file`	software	healthy	`scripts/bundle_qemu.py:378`
`codesign_all`	software	healthy	`scripts/bundle_qemu.py:428`
`validate`	software	healthy	`scripts/bundle_qemu.py:459`
`print_summary`	software	healthy	`scripts/bundle_qemu.py:505`
`main`	software	healthy	`scripts/bundle_qemu.py:543`

Label	Layer	Status	Path
`docs`	software	healthy	`docs`
`scripts`	software	healthy	`scripts`
`.github`	software	healthy	`.github`
`workflows`	software	healthy	`.github/workflows`
`src`	software	healthy	`src`
`MacSandbox`	software	healthy	`src/MacSandbox`
`Core`	software	healthy	`src/MacSandbox/Core`
`Terms`	software	healthy	`src/MacSandbox/Terms`
`Views`	software	healthy	`src/MacSandbox/Views`
`CFreeRDP`	software	healthy	`src/CFreeRDP`
`include`	software	healthy	`src/CFreeRDP/include`

Label	Layer	Status	Path
`MACOS_CERT_PASSWORD`	cicd	healthy	`—`
`NOTARY_PASSWORD`	cicd	healthy	`—`
`NOTARY_APPLE_ID`	cicd	healthy	`—`
`MACOS_DEVELOPER_ID`	cicd	healthy	`—`
`MACOS_CERT_P12`	cicd	healthy	`—`
`NOTARY_TEAM_ID`	cicd	healthy	`—`

Label	Layer	Status	Path
`repobility-clone-qnae0kty`	software	healthy	`/tmp/repobility-clone-qnae0kty`

Label	Layer	Status	Path
`3.1.4.1`	network	healthy	`scripts/qemu-bottles.lock.json`

Label	Layer	Status	Path
`gha::release`	cicd	healthy	`.github/workflows/release.yml`

Label	Layer	Status	Path
`build`	cicd	healthy	`.github/workflows/release.yml`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/30869861-9b2f-4cb6-bdb2-28513b76c56b/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/30869861-9b2f-4cb6-bdb2-28513b76c56b/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

yourtablecloth/macSandbox

Complete repo analysis

file 50+

function 39

directory 11

env_var 6

repo 1

service 1

pipeline 1

job 1