Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

StackVista/image-pipeline

https://github.com/StackVista/image-pipeline · scanned 2026-06-16 00:20 UTC (2 months, 2 weeks ago)

11 raw signals (0 security + 11 graph)

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 2 weeks ago · v1 · 11 actionable findings from 1 signal source. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all

All 92 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

LabelLayerStatusPath
cspell.json software healthy cspell.json
README.md software healthy README.md
mise.toml software healthy mise.toml
.goreleaser.yml software healthy .goreleaser.yml
summary_test.go software healthy evaluator/summary_test.go
trivy_test.go software healthy evaluator/trivy_test.go
evaluate.go software healthy evaluator/evaluate.go
sarif_test.go software healthy evaluator/sarif_test.go
image_test.go software healthy evaluator/image_test.go
sarif.go software healthy evaluator/sarif.go
grype.go software healthy evaluator/grype.go
exception_test.go software healthy evaluator/exception_test.go
README.md software healthy evaluator/README.md
finding.go software healthy evaluator/finding.go
main.go software healthy evaluator/main.go
exception.go software healthy evaluator/exception.go
exit_test.go software healthy evaluator/exit_test.go
grype_test.go software healthy evaluator/grype_test.go
image.go software healthy evaluator/image.go
evaluate_test.go software healthy evaluator/evaluate_test.go
go.mod software healthy evaluator/go.mod
finding_test.go software healthy evaluator/finding_test.go
summary.go software healthy evaluator/summary.go
trivy.go software healthy evaluator/trivy.go
trivy-kafka-fixture.json software healthy evaluator/testdata/trivy-kafka-fixture.json
grype-kafka-fixture.json software healthy evaluator/testdata/grype-kafka-fixture.json
repository.yaml software healthy vex/repository.yaml
trivy_zookeeper.json software healthy examples/trivy_zookeeper.json
grype_zookeeper_by_cve.json software healthy examples/grype_zookeeper_by_cve.json
grype_zookeeper_by_GHSA.json software healthy examples/grype_zookeeper_by_GHSA.json
exception.schema.json software healthy schemas/exception.schema.json
evaluator-release.yml software healthy .github/workflows/evaluator-release.yml
apply-oci-labels-ci.yml software healthy .github/workflows/apply-oci-labels-ci.yml
updatecli-ci.yml software healthy .github/workflows/updatecli-ci.yml
lint-workflows.yml software healthy .github/workflows/lint-workflows.yml
action-ci.yml software healthy .github/workflows/action-ci.yml
bump-upstream-pins.yml software healthy .github/workflows/bump-upstream-pins.yml
evaluator-ci.yml software healthy .github/workflows/evaluator-ci.yml
action.yml software healthy .github/actions/push-single-arch/action.yml
action.yml software healthy .github/actions/merge-multiarch/action.yml
action.yml software healthy .github/actions/apply-oci-labels/action.yml
Dockerfile software healthy .github/actions/apply-oci-labels/testdata/Dockerfile
action.yml software healthy .github/actions/scan-image/action.yml
README.md software healthy .github/actions/scan-image/README.md
Dockerfile software healthy .github/actions/scan-image/testdata/clean/Dockerfile

LabelLayerStatusPath
evaluator software healthy evaluator
testdata software healthy evaluator/testdata
vex software healthy vex
examples software healthy examples
schemas software healthy schemas
.github software healthy .github
workflows software healthy .github/workflows
actions software healthy .github/actions
push-single-arch software healthy .github/actions/push-single-arch
merge-multiarch software healthy .github/actions/merge-multiarch
apply-oci-labels software healthy .github/actions/apply-oci-labels
testdata software healthy .github/actions/apply-oci-labels/testdata
scan-image software healthy .github/actions/scan-image
testdata software healthy .github/actions/scan-image/testdata
clean software healthy .github/actions/scan-image/testdata/clean

LabelLayerStatusPath
goreleaser cicd healthy .github/workflows/evaluator-release.yml
smoke cicd healthy .github/workflows/apply-oci-labels-ci.yml
updatecli-diff cicd healthy .github/workflows/updatecli-ci.yml
zizmor cicd healthy .github/workflows/lint-workflows.yml
action-smoke cicd healthy .github/workflows/action-ci.yml
apply cicd healthy .github/workflows/bump-upstream-pins.yml
lint-and-test cicd healthy .github/workflows/evaluator-ci.yml
goreleaser-check cicd healthy .github/workflows/evaluator-ci.yml

LabelLayerStatusPath
gha::evaluator-release cicd healthy .github/workflows/evaluator-release.yml
gha::apply-oci-labels-ci cicd healthy .github/workflows/apply-oci-labels-ci.yml
gha::updatecli-ci cicd healthy .github/workflows/updatecli-ci.yml
gha::lint-workflows cicd healthy .github/workflows/lint-workflows.yml
gha::action-ci cicd healthy .github/workflows/action-ci.yml
gha::bump-upstream-pins cicd healthy .github/workflows/bump-upstream-pins.yml
gha::evaluator-ci cicd healthy .github/workflows/evaluator-ci.yml

LabelLayerStatusPath
2.1.5.1 network healthy examples/trivy_zookeeper.json
1.19.0.4 network healthy examples/trivy_zookeeper.json
4.1.12.1 network healthy examples/trivy_zookeeper.json
1.1.10.5 network healthy examples/trivy_zookeeper.json

LabelLayerStatusPath
port:256 network healthy .github/workflows/apply-oci-labels-ci.yml
port:18 network healthy .github/workflows/action-ci.yml
port:36 network healthy .github/workflows/action-ci.yml
port:906 network healthy .github/workflows/action-ci.yml

LabelLayerStatusPath
auth::.github/actions/merge-multiarch/action.yml security healthy .github/actions/merge-multiarch/action.yml
auth::README.md security healthy README.md
auth::.github/actions/push-single-arch/action.yml security healthy .github/actions/push-single-arch/action.yml

LabelLayerStatusPath
image::.github/actions/apply-oci-labels/testdata/Dockerfile hardware healthy .github/actions/apply-oci-labels/testdata/Dockerfile
image::.github/actions/scan-image/testdata/clean/Dockerfile hardware healthy .github/actions/scan-image/testdata/clean/Dockerfile

LabelLayerStatusPath
UPDATECLI_GH_APP_PRIVATE_KEY cicd healthy
GITHUB_TOKEN cicd healthy

LabelLayerStatusPath
repobility-clone-bswudtii software healthy /tmp/repobility-clone-bswudtii

LabelLayerStatusPath
kafka data healthy evaluator/README.md
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/33e32de5-a393-4f35-93e8-25e217843562/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/33e32de5-a393-4f35-93e8-25e217843562/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.