mongodb/mongo

Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

228 of your 477 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Upstream (GitHub) caused delay on this scan — not Repobility.

GitHub API rate-limited (HTTP 403) — preflight skipped, fell back to direct git clone.
Clone from GitHub took 162.36s for a 205.0 MB repo slow.
Repobility's analysis ran in 381.6s after the clone landed.

https://github.com/mongodb/mongo · scanned 2026-06-05 18:45 UTC (4 days, 18 hours ago) · 10 languages

4815 raw signals (443 security + 4372 graph) 11/13 scanners ran 12th percentile · Javascript · huge (>500K LoC) System graph score 70 (lower by 4)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 4 days, 18 hours ago · v2 · 2222 actionable findings from 2 signal sources. 395 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

100.0% cov · 2096 findings

Score breakdown â 2026-05-18-v5

Component	Sub-score	Weight	Contribution
`structure_score`	85.0	0.15	12.75
`security_score`	100.0	0.25	25.00
`testing_score`	17.0	0.20	3.40
`documentation_score`	78.0	0.15	11.70
`practices_score`	54.0	0.15	8.10
`code_quality`	55.0	0.10	5.50
Overall		1.00	66.5

security_score may be inflated — optional security scanners were skipped on this fast scan

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 82 High 47 Medium 164 Low 368 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 126 System graph 2096 Crowd 0 Layer: Quality 1291 Security 140 Cicd 9 Software 84 Frontend 682 Network 7 Hardware 8 Api 1

Exclude dismissed / FP Exclude test files

All 74448 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`README.third_party.md`	software	healthy	`README.third_party.md`
`cspell.json`	software	healthy	`cspell.json`
`jsconfig.json`	software	healthy	`jsconfig.json`
`README.md`	software	healthy	`README.md`
`pnpm-lock.yaml`	software	healthy	`pnpm-lock.yaml`
`package.json`	software	healthy	`package.json`
`OWNERS.yml`	software	healthy	`OWNERS.yml`
`sbom.json`	software	healthy	`sbom.json`
`pyproject.toml`	software	healthy	`pyproject.toml`
`__init__.py`	software	healthy	`modules_poc/__init__.py`
`README.md`	software	healthy	`modules_poc/README.md`
`upload.py`	software	healthy	`modules_poc/upload.py`
`mod_diff.py`	software	healthy	`modules_poc/mod_diff.py`
`OWNERS.yml`	software	healthy	`modules_poc/OWNERS.yml`
`mod_scanner.py`	software	healthy	`modules_poc/mod_scanner.py`
`browse.py`	software	healthy	`modules_poc/browse.py`
`modules.yaml`	software	healthy	`modules_poc/modules.yaml`
`merge_decls.py`	software	healthy	`modules_poc/merge_decls.py`
`private_headers.py`	software	healthy	`modules_poc/private_headers.py`
`cindex.py`	software	healthy	`modules_poc/cindex.py`
`mod_mapping.py`	software	healthy	`modules_poc/mod_mapping.py`
`xdg-open-wrapper.sh`	software	healthy	`.devcontainer/xdg-open-wrapper.sh`
`initialize.sh`	software	healthy	`.devcontainer/initialize.sh`
`s3_artifact_utils.py`	software	healthy	`.devcontainer/s3_artifact_utils.py`
`toolchain.py`	software	healthy	`.devcontainer/toolchain.py`
`post-create.sh`	software	healthy	`.devcontainer/post-create.sh`
`evergreen_cli.py`	software	healthy	`.devcontainer/evergreen_cli.py`
`devcontainer.json`	software	healthy	`.devcontainer/devcontainer.json`
`Dockerfile`	software	healthy	`.devcontainer/Dockerfile`
`OWNERS.yml`	software	healthy	`.devcontainer/OWNERS.yml`
`test_wrapper.sh`	software	healthy	`bazel/test_wrapper.sh`
`bazelisk.py`	software	healthy	`bazel/bazelisk.py`
`README.md`	software	healthy	`bazel/README.md`
`gpg_signer.py`	software	healthy	`bazel/gpg_signer.py`
`workspace_status.py`	software	healthy	`bazel/workspace_status.py`
`run_under_working_dir.sh`	software	healthy	`bazel/run_under_working_dir.sh`
`OWNERS.yml`	software	healthy	`bazel/OWNERS.yml`
`lint.sh`	software	healthy	`bazel/lint.sh`
`crates.toml`	software	healthy	`bazel/crates.toml`
`merge_tidy_configs.py`	software	healthy	`bazel/merge_tidy_configs.py`
`cargo_bindeps.toml`	software	healthy	`bazel/cargo_bindeps.toml`
`remote_execution_containers_generator.py`	software	healthy	`bazel/platforms/remote_execution_containers_generator.py`
`win_allocator_shim.rs`	software	healthy	`bazel/rules_rust/win_allocator_shim.rs`
`generate_config_header.py`	software	healthy	`bazel/config/generate_config_header.py`
`generate_coverity_targets.py`	software	warning	`bazel/coverity/generate_coverity_targets.py`
`_ah_placeholder.h`	software	healthy	`bazel/auto_header/_ah_placeholder.h`
`ensure_fd.py`	software	healthy	`bazel/auto_header/ensure_fd.py`
`gen_all_headers.py`	software	healthy	`bazel/auto_header/gen_all_headers.py`
`auto_header.py`	software	healthy	`bazel/auto_header/auto_header.py`
`developer_workflow.md`	software	healthy	`bazel/docs/developer_workflow.md`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`main`	software	healthy	`modules_poc/upload.py:18`
`timestamp`	software	healthy	`modules_poc/upload.py:55`
`perr_exit`	software	healthy	`modules_poc/mod_diff.py:11`
`sorted_decls`	software	healthy	`modules_poc/mod_diff.py:34`
`print_decl_recursive`	software	healthy	`modules_poc/mod_diff.py:39`
`get_changed_files_git`	software	healthy	`modules_poc/mod_diff.py:86`
`main`	software	healthy	`modules_poc/mod_diff.py:113`
`perr`	software	healthy	`modules_poc/mod_scanner.py:44`
`perr_exit`	software	healthy	`modules_poc/mod_scanner.py:48`
`is_tu`	software	healthy	`modules_poc/mod_scanner.py:66`
`__init__`	software	healthy	`modules_poc/mod_scanner.py:848`
`normalize`	software	healthy	`modules_poc/mod_scanner.py:103`
`raw_parent`	software	healthy	`modules_poc/mod_scanner.py:152`
`normalized_parent`	software	healthy	`modules_poc/mod_scanner.py:161`
`normalized_parents`	software	healthy	`modules_poc/mod_scanner.py:171`
`raw_usr`	software	healthy	`modules_poc/mod_scanner.py:178`
`globalized_usr`	software	healthy	`modules_poc/mod_scanner.py:182`
`normalized_usr`	software	healthy	`modules_poc/mod_scanner.py:200`
`definition`	software	healthy	`modules_poc/mod_scanner.py:213`
`has_definition`	software	healthy	`modules_poc/mod_scanner.py:222`
`string_for_context`	software	healthy	`modules_poc/mod_scanner.py:226`
`__post_init__`	software	healthy	`modules_poc/mod_scanner.py:243`
`get_visibility`	software	healthy	`modules_poc/mod_scanner.py:255`
`try_extract_file_level_visibility`	software	healthy	`modules_poc/mod_scanner.py:358`
`make_vis_from`	software	healthy	`modules_poc/mod_scanner.py:401`
`def_or_decled`	software	healthy	`modules_poc/mod_scanner.py:433`
`from_cursor`	software	healthy	`modules_poc/mod_scanner.py:437`
`pretty_location`	software	healthy	`modules_poc/mod_scanner.py:465`
`fully_qualified`	software	healthy	`modules_poc/mod_scanner.py:486`
`add_decl`	software	healthy	`modules_poc/mod_scanner.py:511`
`find_decls`	software	healthy	`modules_poc/mod_scanner.py:570`
`is_local_decl`	software	healthy	`modules_poc/mod_scanner.py:598`
`find_usages`	software	healthy	`modules_poc/mod_scanner.py:634`
`ast`	software	healthy	`modules_poc/mod_scanner.py:801`
`mark`	software	healthy	`modules_poc/mod_scanner.py:851`
`parseTU`	software	healthy	`modules_poc/mod_scanner.py:860`
`dump_unused_inputs`	software	healthy	`modules_poc/mod_scanner.py:948`
`main`	software	healthy	`modules_poc/mod_scanner.py:962`
`parse`	software	healthy	`modules_poc/browse.py:54`
`loc`	software	healthy	`modules_poc/browse.py:41`
`__str__`	software	healthy	`modules_poc/browse.py:45`
`unknown_count`	software	healthy	`modules_poc/browse.py:199`
`fancy_kind`	software	healthy	`modules_poc/browse.py:163`
`style`	software	healthy	`modules_poc/browse.py:74`
`direct_usages`	software	healthy	`modules_poc/browse.py:149`
`transitive_usages`	software	healthy	`modules_poc/browse.py:153`
`fancy_visibility`	software	healthy	`modules_poc/browse.py:167`
`is_submodule_usage`	software	healthy	`modules_poc/browse.py:203`
`is_modified_since_scan`	software	healthy	`modules_poc/browse.py:207`
`add_decl_node`	software	healthy	`modules_poc/browse.py:215`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`DecoratedCursor`	software	healthy	`modules_poc/mod_scanner.py:76`
`GetVisibilityResult`	software	healthy	`modules_poc/mod_scanner.py:237`
`Decl`	software	healthy	`modules_poc/mod_scanner.py:414`
`Timer`	software	healthy	`modules_poc/mod_scanner.py:847`
`Loc`	software	healthy	`modules_poc/browse.py:30`
`LocAndContext`	software	healthy	`modules_poc/browse.py:49`
`HasUnknownCount`	software	healthy	`modules_poc/browse.py:59`
`Decl`	software	healthy	`modules_poc/browse.py:126`
`File`	software	healthy	`modules_poc/browse.py:191`
`CodePreview`	software	healthy	`modules_poc/browse.py:255`
`FilesTree`	software	healthy	`modules_poc/browse.py:321`
`Confirm`	software	healthy	`modules_poc/browse.py:551`
`ModularityApp`	software	healthy	`modules_poc/browse.py:612`
`Decl`	software	healthy	`modules_poc/merge_decls.py:21`
`Timer`	software	healthy	`modules_poc/merge_decls.py:101`
`NoSliceSequence`	software	healthy	`modules_poc/cindex.py:101`
`c_interop_string`	software	healthy	`modules_poc/cindex.py:110`
`TranslationUnitLoadError`	software	healthy	`modules_poc/cindex.py:161`
`TranslationUnitSaveError`	software	healthy	`modules_poc/cindex.py:173`
`CachedProperty`	software	healthy	`modules_poc/cindex.py:212`
`_CXString`	software	healthy	`modules_poc/cindex.py:241`
`SourceLocation`	software	healthy	`modules_poc/cindex.py:258`
`SourceRange`	software	healthy	`modules_poc/cindex.py:346`
`Diagnostic`	software	healthy	`modules_poc/cindex.py:396`
`RangeIterator`	software	healthy	`modules_poc/cindex.py:437`
`FixItIterator`	software	healthy	`modules_poc/cindex.py:453`
`ChildDiagnosticsIterator`	software	healthy	`modules_poc/cindex.py:474`
`FixIt`	software	healthy	`modules_poc/cindex.py:538`
`TokenGroup`	software	healthy	`modules_poc/cindex.py:553`
`BaseEnumeration`	software	healthy	`modules_poc/cindex.py:610`
`TokenKind`	software	healthy	`modules_poc/cindex.py:630`
`CursorKind`	software	healthy	`modules_poc/cindex.py:645`
`TemplateArgumentKind`	software	healthy	`modules_poc/cindex.py:1507`
`ExceptionSpecificationKind`	software	healthy	`modules_poc/cindex.py:1525`
`Cursor`	software	healthy	`modules_poc/cindex.py:1544`
`BinaryOperator`	software	healthy	`modules_poc/cindex.py:2196`
`StorageClass`	software	healthy	`modules_poc/cindex.py:2245`
`AvailabilityKind`	software	healthy	`modules_poc/cindex.py:2262`
`AccessSpecifier`	software	healthy	`modules_poc/cindex.py:2275`
`TypeKind`	software	healthy	`modules_poc/cindex.py:2289`
`RefQualifierKind`	software	healthy	`modules_poc/cindex.py:2415`
`LinkageKind`	software	healthy	`modules_poc/cindex.py:2423`
`TLSKind`	software	healthy	`modules_poc/cindex.py:2433`
`Type`	software	healthy	`modules_poc/cindex.py:2441`
`ArgumentsIterator`	software	healthy	`modules_poc/cindex.py:2460`
`ClangObject`	software	healthy	`modules_poc/cindex.py:2717`
`_CXUnsavedFile`	software	healthy	`modules_poc/cindex.py:2731`
`CompletionChunk`	software	healthy	`modules_poc/cindex.py:2765`
`Kind`	software	healthy	`modules_poc/cindex.py:2766`
`CompletionString`	software	healthy	`modules_poc/cindex.py:2857`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`modules_poc`	software	healthy	`modules_poc`
`.devcontainer`	software	healthy	`.devcontainer`
`bazel`	software	healthy	`bazel`
`platforms`	software	healthy	`bazel/platforms`
`rules_rust`	software	healthy	`bazel/rules_rust`
`config`	software	healthy	`bazel/config`
`coverity`	software	healthy	`bazel/coverity`
`auto_header`	software	healthy	`bazel/auto_header`
`docs`	software	healthy	`bazel/docs`
`architecture`	software	healthy	`bazel/docs/architecture`
`toolchains`	software	healthy	`bazel/toolchains`
`cc`	software	healthy	`bazel/toolchains/cc`
`mongo_wasm`	software	healthy	`bazel/toolchains/cc/mongo_wasm`
`mongo_linux`	software	healthy	`bazel/toolchains/cc/mongo_linux`
`install_rules`	software	healthy	`bazel/install_rules`
`symbol_checker`	software	healthy	`bazel/symbol_checker`
`remote_execution_container`	software	healthy	`bazel/remote_execution_container`
`wrapper_hook`	software	healthy	`bazel/wrapper_hook`
`mongot_extension_signing_key`	software	healthy	`bazel/mongot_extension_signing_key`
`db_contrib_tool`	software	healthy	`bazel/db_contrib_tool`
`format`	software	healthy	`bazel/format`
`resmoke`	software	healthy	`bazel/resmoke`
`multiversion`	software	healthy	`bazel/resmoke/multiversion`
`evergreen`	software	healthy	`evergreen`
`functions`	software	healthy	`evergreen/functions`
`security_reporting_scripts`	software	healthy	`evergreen/functions/security_reporting_scripts`
`jepsen_docker`	software	healthy	`evergreen/jepsen_docker`
`spawnhost`	software	healthy	`evergreen/spawnhost`
`do_jepsen_setup`	software	healthy	`evergreen/do_jepsen_setup`
`run_jstestfuzz`	software	healthy	`evergreen/run_jstestfuzz`
`debian`	software	healthy	`debian`
`docs`	software	healthy	`docs`
`antithesis`	software	healthy	`docs/antithesis`
`owners`	software	healthy	`docs/owners`
`testing`	software	healthy	`docs/testing`
`branching`	software	healthy	`docs/branching`
`evergreen-testing`	software	healthy	`docs/evergreen-testing`
`yaml_configuration`	software	healthy	`docs/evergreen-testing/yaml_configuration`
`devcontainer`	software	healthy	`docs/devcontainer`
`x509`	software	healthy	`x509`
`static`	software	healthy	`x509/static`
`etc`	software	healthy	`etc`
`rpm`	software	healthy	`rpm`
`tools`	software	healthy	`tools`
`flag_sync`	software	healthy	`tools/flag_sync`
`lint`	software	healthy	`tools/lint`
`jstests`	software	healthy	`jstests`
`query_golden_sharding`	software	healthy	`jstests/query_golden_sharding`
`expected_output`	software	healthy	`jstests/query_golden_sharding/expected_output`
`featureFlagSbeFull`	software	healthy	`jstests/query_golden_sharding/expected_output/featureFlagSb…`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`6.5.2.1`	network	healthy	`modules_poc/cindex.py`
`6.5.2.5`	network	healthy	`modules_poc/cindex.py`
`169.254.169.254`	network	healthy	`evergreen/spawnhost/download_archive_dist_test_debug.py`
`1.3.6.1`	network	healthy	`x509/mkcert.py`
`5.5.7.3`	network	healthy	`x509/mkcert.py`
`5.5.7.1`	network	healthy	`x509/mkcert.py`
`2.16.840.1`	network	healthy	`x509/mkcert.py`
`127.0.0.1`	network	healthy	`x509/apple_certs.json`
`192.0.2.0`	network	healthy	`jstests/auth/authentication_restrictions.js`
`172.23.55.11`	network	healthy	`jstests/auth/impersonation-deny.js`
`192.43.22.3`	network	healthy	`jstests/auth/impersonation-deny.js`
`192.0.2.1`	network	healthy	`jstests/auth/cluster_ip_allowlist_replset.js`
`1.1.1.1`	network	healthy	`jstests/auth/cluster_ip_allowlist.js`
`127.0.0.0`	network	healthy	`jstests/auth/cluster_ip_allowlist.js`
`127.0.0.5`	network	healthy	`jstests/auth/cluster_ip_allowlist.js`
`192.168.2.0`	network	healthy	`jstests/auth/authentication_restrictions_role.js`
`127.0.0.2`	network	healthy	`jstests/auth/authentication_restrictions_role.js`
`127.0.0.3`	network	healthy	`jstests/auth/authentication_restrictions_role.js`
`1.2.3.56`	network	healthy	`jstests/ssl/x509_custom.js`
`1.2.3.45`	network	healthy	`jstests/ssl/x509_custom.js`
`8.8.8.8`	network	healthy	`jstests/noPassthrough/architecture/max_conns_override_runti…`
`2.5.4.13`	network	healthy	`jstests/noPassthrough/libs/x509/main_certs.json`
`2.5.4.14`	network	healthy	`jstests/noPassthrough/libs/x509/main_certs.json`
`2.5.4.15`	network	healthy	`jstests/noPassthrough/libs/x509/main_certs.json`
`2.5.4.16`	network	healthy	`jstests/noPassthrough/libs/x509/main_certs.json`
`2.5.4.17`	network	healthy	`jstests/noPassthrough/libs/x509/main_certs.json`
`2.5.4.18`	network	healthy	`jstests/noPassthrough/libs/x509/main_certs.json`
`2.5.4.19`	network	healthy	`jstests/noPassthrough/libs/x509/main_certs.json`
`2.5.4.20`	network	healthy	`jstests/noPassthrough/libs/x509/main_certs.json`
`2.5.4.21`	network	healthy	`jstests/noPassthrough/libs/x509/main_certs.json`
`2.5.4.22`	network	healthy	`jstests/noPassthrough/libs/x509/main_certs.json`
`2.5.4.23`	network	healthy	`jstests/noPassthrough/libs/x509/main_certs.json`
`2.5.4.24`	network	healthy	`jstests/noPassthrough/libs/x509/main_certs.json`
`2.5.4.25`	network	healthy	`jstests/noPassthrough/libs/x509/main_certs.json`
`2.5.4.26`	network	healthy	`jstests/noPassthrough/libs/x509/main_certs.json`
`2.5.4.27`	network	healthy	`jstests/noPassthrough/libs/x509/main_certs.json`
`2.5.4.28`	network	healthy	`jstests/noPassthrough/libs/x509/main_certs.json`
`2.5.4.29`	network	healthy	`jstests/noPassthrough/libs/x509/main_certs.json`
`2.5.4.30`	network	healthy	`jstests/noPassthrough/libs/x509/main_certs.json`
`2.5.4.31`	network	healthy	`jstests/noPassthrough/libs/x509/main_certs.json`
`2.5.4.32`	network	healthy	`jstests/noPassthrough/libs/x509/main_certs.json`
`2.5.4.33`	network	healthy	`jstests/noPassthrough/libs/x509/main_certs.json`
`2.5.4.34`	network	healthy	`jstests/noPassthrough/libs/x509/main_certs.json`
`2.5.4.35`	network	healthy	`jstests/noPassthrough/libs/x509/main_certs.json`
`2.5.4.36`	network	healthy	`jstests/noPassthrough/libs/x509/main_certs.json`
`2.5.4.37`	network	healthy	`jstests/noPassthrough/libs/x509/main_certs.json`
`2.5.4.38`	network	healthy	`jstests/noPassthrough/libs/x509/main_certs.json`
`2.5.4.39`	network	healthy	`jstests/noPassthrough/libs/x509/main_certs.json`
`2.5.4.40`	network	healthy	`jstests/noPassthrough/libs/x509/main_certs.json`
`2.5.4.41`	network	healthy	`jstests/noPassthrough/libs/x509/main_certs.json`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`password_literal::evergreen/write_sast_report_env_file.sh`	security	healthy	`evergreen/write_sast_report_env_file.sh`
`password_literal::evergreen/functions/credentials_setup.sh`	security	healthy	`evergreen/functions/credentials_setup.sh`
`password_literal::jstests/concurrency/fsm_workloads/auth/au…`	security	healthy	`jstests/concurrency/fsm_workloads/auth/auth_create_user.js`
`password_literal::jstests/concurrency/fsm_workloads/auth/au…`	security	healthy	`jstests/concurrency/fsm_workloads/auth/auth_privilege_consi…`
`password_literal::jstests/concurrency/fsm_workloads/auth/au…`	security	healthy	`jstests/concurrency/fsm_workloads/auth/auth_drop_user.js`
`password_literal::jstests/auth/auth_pass_prompt.js`	security	healthy	`jstests/auth/auth_pass_prompt.js`
`password_literal::jstests/auth/auth_pass_prompt.js`	security	healthy	`jstests/auth/auth_pass_prompt.js`
`password_literal::jstests/auth/user_management_commands_mec…`	security	healthy	`jstests/auth/user_management_commands_mechanisms.js`
`password_literal::jstests/auth/user_management_commands_mec…`	security	healthy	`jstests/auth/user_management_commands_mechanisms.js`
`password_literal::jstests/auth/user_management_commands_mec…`	security	healthy	`jstests/auth/user_management_commands_mechanisms.js`
`password_literal::jstests/auth/sasl_mechanism_discovery.js`	security	healthy	`jstests/auth/sasl_mechanism_discovery.js`
`password_literal::jstests/auth/commands_user_defined_roles.…`	security	healthy	`jstests/auth/commands_user_defined_roles.js`
`password_literal::jstests/auth/commands_user_defined_roles.…`	security	healthy	`jstests/auth/commands_user_defined_roles.js`
`password_literal::jstests/auth/repl_auth_shell_mechanism.js`	security	healthy	`jstests/auth/repl_auth_shell_mechanism.js`
`password_literal::jstests/auth/read_command_max_time_ms_rep…`	security	healthy	`jstests/auth/read_command_max_time_ms_repl_set.js`
`password_literal::jstests/auth/profile_access.js`	security	healthy	`jstests/auth/profile_access.js`
`password_literal::jstests/auth/profile_access.js`	security	healthy	`jstests/auth/profile_access.js`
`password_literal::jstests/auth/profile_access.js`	security	healthy	`jstests/auth/profile_access.js`
`password_literal::jstests/auth/profile_access.js`	security	healthy	`jstests/auth/profile_access.js`
`password_literal::jstests/auth/profile_access.js`	security	healthy	`jstests/auth/profile_access.js`
`password_literal::jstests/auth/dbcheck.js`	security	healthy	`jstests/auth/dbcheck.js`
`password_literal::jstests/auth/dbcheck.js`	security	healthy	`jstests/auth/dbcheck.js`
`password_literal::jstests/auth/dbcheck.js`	security	healthy	`jstests/auth/dbcheck.js`
`password_literal::jstests/auth/dbcheck.js`	security	healthy	`jstests/auth/dbcheck.js`
`password_literal::jstests/auth/secondary_invalidation.js`	security	healthy	`jstests/auth/secondary_invalidation.js`
`password_literal::jstests/auth/secondary_invalidation.js`	security	healthy	`jstests/auth/secondary_invalidation.js`
`password_literal::jstests/auth/repl_auth.js`	security	healthy	`jstests/auth/repl_auth.js`
`password_literal::jstests/auth/repl_auth.js`	security	healthy	`jstests/auth/repl_auth.js`
`password_literal::jstests/auth/repl_auth.js`	security	healthy	`jstests/auth/repl_auth.js`
`password_literal::jstests/auth/killop_error_code.js`	security	healthy	`jstests/auth/killop_error_code.js`
`password_literal::jstests/auth/killop_error_code.js`	security	healthy	`jstests/auth/killop_error_code.js`
`password_literal::jstests/auth/killop_error_code.js`	security	healthy	`jstests/auth/killop_error_code.js`
`password_literal::jstests/auth/user_management_commands_lib…`	security	healthy	`jstests/auth/user_management_commands_lib.js`
`password_literal::jstests/auth/restore-role-can-drop-system…`	security	healthy	`jstests/auth/restore-role-can-drop-system-views-non-admin-d…`
`password_literal::jstests/auth/keyfile_auth_ensure_correct_…`	security	healthy	`jstests/auth/keyfile_auth_ensure_correct_username_change.js`
`password_literal::jstests/auth/change_stream_pre_image_coll…`	security	healthy	`jstests/auth/change_stream_pre_image_coll_role_auth.js`
`password_literal::jstests/auth/killop_own_ops.js`	security	healthy	`jstests/auth/killop_own_ops.js`
`password_literal::jstests/auth/killop_own_ops.js`	security	healthy	`jstests/auth/killop_own_ops.js`
`password_literal::jstests/auth/killop_own_ops.js`	security	healthy	`jstests/auth/killop_own_ops.js`
`password_literal::jstests/auth/killop_own_ops.js`	security	healthy	`jstests/auth/killop_own_ops.js`
`password_literal::jstests/auth/system_user_exception.js`	security	healthy	`jstests/auth/system_user_exception.js`
`password_literal::jstests/auth/default_max_time_ms_with_ten…`	security	healthy	`jstests/auth/default_max_time_ms_with_tenant.js`
`password_literal::jstests/auth/default_max_time_ms_with_ten…`	security	healthy	`jstests/auth/default_max_time_ms_with_tenant.js`
`password_literal::jstests/auth/default_max_time_ms_sharded.…`	security	healthy	`jstests/auth/default_max_time_ms_sharded.js`
`password_literal::jstests/auth/logout_reconnect.js`	security	healthy	`jstests/auth/logout_reconnect.js`
`password_literal::jstests/auth/rename.js`	security	healthy	`jstests/auth/rename.js`
`password_literal::jstests/auth/rename_system_buckets_collec…`	security	healthy	`jstests/auth/rename_system_buckets_collection.js`
`password_literal::jstests/auth/rename_system_buckets_collec…`	security	healthy	`jstests/auth/rename_system_buckets_collection.js`
`password_literal::jstests/auth/rename_system_buckets_collec…`	security	healthy	`jstests/auth/rename_system_buckets_collection.js`
`password_literal::jstests/auth/rename_system_buckets_collec…`	security	healthy	`jstests/auth/rename_system_buckets_collection.js`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`random_manual_migrations.js`	data	healthy	`jstests/concurrency/fsm_workload_modifiers/random_manual_mi…`
`agg_unionWith_chunk_migrations.js`	data	healthy	`jstests/concurrency/fsm_workloads/query/agg/agg_unionWith_c…`
`agg_with_chunk_migrations.js`	data	healthy	`jstests/concurrency/fsm_workloads/query/agg/agg_with_chunk_…`
`map_reduce_with_chunk_migrations.js`	data	healthy	`jstests/concurrency/fsm_workloads/query/map_reduce/map_redu…`
`random_moveChunk_multi_update_delete_paused_migrations.js`	data	healthy	`jstests/concurrency/fsm_workloads/random_moveChunk/random_m…`
`internal_search_id_lookup_chunk_migration.js`	data	healthy	`jstests/with_mongot/search_mocked/internal_search_id_lookup…`
`subpipeline_storedSource_chunk_migration.js`	data	healthy	`jstests/with_mongot/e2e/sharding_no_passthrough/subpipeline…`
`create_event_from_chunk_migration.js`	data	healthy	`jstests/change_streams/create_event_from_chunk_migration.js`
`change_streams_lookup_preimage_with_chunk_migration.js`	data	healthy	`jstests/change_streams/change_streams_lookup_preimage_with_…`
`chunk_migration_critical_section_non_deprioritizable.js`	data	healthy	`jstests/noPassthrough/admission/execution_control/chunk_mig…`
`set_allow_migrations.js`	data	healthy	`jstests/noPassthrough/ddl/set_allow_migrations.js`
`set_allow_migrations_with_balancer.js`	data	healthy	`jstests/noPassthrough/ddl/set_allow_migrations_with_balance…`
`change_streams_collation_chunk_migration.js`	data	healthy	`jstests/noPassthrough/query/change_streams/change_streams_c…`
`implicitly_retry_on_migration_in_progress.js`	data	healthy	`jstests/libs/override_methods/implicitly_retry_on_migration…`
`migration_between_mixed_version_mongods.js`	data	healthy	`jstests/multiVersion/genericBinVersion/migration_between_mi…`
`migration_with_mixed_version_shards_and_disable_resumable_r…`	data	healthy	`jstests/multiVersion/genericBinVersion/migration_with_mixed…`
`migrations_with_mixed_fcv.js`	data	healthy	`jstests/multiVersion/genericSetFCVUsage/migrations_with_mix…`
`migration_fails_if_exists_in_rangedeletions.js`	data	healthy	`jstests/sharding/migration_fails_if_exists_in_rangedeletion…`
`migration_document_stores_new_chunk_version_format.js`	data	healthy	`jstests/sharding/migration_document_stores_new_chunk_versio…`
`test_stacked_migration_cleanup.js`	data	healthy	`jstests/sharding/test_stacked_migration_cleanup.js`
`retryable_update_one_by_id_chunk_migration.js`	data	healthy	`jstests/sharding/retryable_update_one_by_id_chunk_migration…`
`migration_ignore_interrupts_2.js`	data	healthy	`jstests/sharding/migration_ignore_interrupts_2.js`
`migration_ignore_interrupts_1.js`	data	healthy	`jstests/sharding/migration_ignore_interrupts_1.js`
`migration_coordinator_commit_failover.js`	data	healthy	`jstests/sharding/migration_coordinator_commit_failover.js`
`hash_crud_during_migration.js`	data	healthy	`jstests/sharding/hash_crud_during_migration.js`
`index_operations_abort_concurrent_outgoing_migrations.js`	data	healthy	`jstests/sharding/index_operations_abort_concurrent_outgoing…`
`replicate_record_ids_collection_migration.js`	data	healthy	`jstests/sharding/replicate_record_ids_collection_migration.…`
`balancer_should_return_random_migrations_failpoint.js`	data	healthy	`jstests/sharding/balancer_should_return_random_migrations_f…`
`migration_tracks_orphans.js`	data	healthy	`jstests/sharding/migration_tracks_orphans.js`
`migration_server_status.js`	data	healthy	`jstests/sharding/migration_server_status.js`
`migration_with_source_ops.js`	data	healthy	`jstests/sharding/migration_with_source_ops.js`
`migration_failure.js`	data	healthy	`jstests/sharding/migration_failure.js`
`block_chunk_migrations_without_hashed_shard_key_index.js`	data	healthy	`jstests/sharding/block_chunk_migrations_without_hashed_shar…`
`safe_secondary_reads_single_migration_waitForDelete.js`	data	healthy	`jstests/sharding/safe_secondary_reads_single_migration_wait…`
`merge_with_chunk_migrations.js`	data	healthy	`jstests/sharding/merge_with_chunk_migrations.js`
`hash_migration_oplog_filter.js`	data	healthy	`jstests/sharding/hash_migration_oplog_filter.js`
`migration_coordinator_abort_failover.js`	data	healthy	`jstests/sharding/migration_coordinator_abort_failover.js`
`migration_coordinator_killop_in_critical_section.js`	data	healthy	`jstests/sharding/migration_coordinator_killop_in_critical_s…`
`configsvr_set_allow_migrations.js`	data	healthy	`jstests/sharding/configsvr_set_allow_migrations.js`
`txn_lookup_hits_migration_conflict_all_colls_local.js`	data	healthy	`jstests/sharding/txn_lookup_hits_migration_conflict_all_col…`
`migration_coordinator_basic.js`	data	healthy	`jstests/sharding/migration_coordinator_basic.js`
`migration_critical_section_concurrency.js`	data	healthy	`jstests/sharding/migration_critical_section_concurrency.js`
`migration_sets_fromMigrate_flag.js`	data	healthy	`jstests/sharding/migration_sets_fromMigrate_flag.js`
`unfinished_migration_server_status.js`	data	healthy	`jstests/sharding/unfinished_migration_server_status.js`
`safe_secondary_reads_single_migration_suspend_range_deletio…`	data	healthy	`jstests/sharding/safe_secondary_reads_single_migration_susp…`
`resharding_stops_active_migrations.js`	data	healthy	`jstests/sharding/resharding_stops_active_migrations.js`
`chunk_migration_critical_section_retryable_findAndModify.js`	data	healthy	`jstests/sharding/chunk_migration_critical_section_retryable…`
`migration_recovers_unfinished_migrations.js`	data	healthy	`jstests/sharding/migration_recovers_unfinished_migrations.js`
`move_chunk_allowMigrations.js`	data	healthy	`jstests/sharding/move_chunk_allowMigrations.js`
`replicate_record_ids_chunk_migration.js`	data	healthy	`jstests/sharding/replicate_record_ids_chunk_migration.js`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`port:64`	network	healthy	`etc/extensions.yml`
`port:37692`	network	healthy	`etc/extensions.yml`
`port:27017`	network	healthy	`jstests/serial_run/srv-uri.js`
`port:8100`	network	healthy	`jstests/ocsp/lib/mock_ocsp.js`
`port:10000`	network	healthy	`jstests/libs/command_line/test_parsed_options.js`
`port:27019`	network	healthy	`jstests/httpinterface/sharding_configdb_on_default_ports.js`
`port:20000`	network	healthy	`buildscripts/antithesis/base_images/mongo_binaries/Dockerfi…`
`port:27018`	network	healthy	`buildscripts/antithesis/base_images/workload/Dockerfile`
`port:8080`	network	healthy	`buildscripts/resmokelib/testing/queryable_server.py`
`port:21`	network	healthy	`src/third_party/mozjs/extract/js/src/zydis/Zycore/moz.yaml`
`port:04`	network	healthy	`src/third_party/mozjs/extract/js/src/zydis/Zycore/moz.yaml`
`port:11`	network	healthy	`src/third_party/mozjs/extract/js/src/zydis/Zydis/moz.yaml`
`port:16`	network	healthy	`src/third_party/mozjs/extract/js/src/irregexp/moz.yaml`
`port:43`	network	healthy	`src/third_party/mozjs/extract/js/src/irregexp/moz.yaml`
`port:12`	network	healthy	`src/third_party/mozjs/extract/mfbt/double-conversion/moz.ya…`
`port:20`	network	healthy	`src/third_party/mozjs/extract/mfbt/double-conversion/moz.ya…`
`port:10`	network	healthy	`src/third_party/wiredtiger/test/evergreen_disagg.yml`
`port:15`	network	healthy	`src/third_party/wiredtiger/test/evergreen_disagg.yml`
`port:25000`	network	healthy	`src/third_party/wiredtiger/test/evergreen.yml`
`port:1000`	network	healthy	`src/third_party/wiredtiger/test/evergreen.yml`
`port:3000`	network	healthy	`src/third_party/wiredtiger/test/evergreen.yml`
`port:30000`	network	healthy	`src/third_party/wiredtiger/test/evergreen.yml`
`port:30`	network	healthy	`src/third_party/wiredtiger/test/evergreen.yml`
`port:45`	network	healthy	`src/third_party/wiredtiger/test/evergreen.yml`
`port:50000`	network	healthy	`src/third_party/wiredtiger/test/format/format_disagg_multi.…`
`port:256`	network	healthy	`src/third_party/zstandard/zstd/contrib/docker/Dockerfile`

Label	Layer	Status	Path
`auth::jstests/noPassthrough/sharded_cluster_topology/standb…`	security	healthy	`jstests/noPassthrough/sharded_cluster_topology/standbyClust…`
`auth::buildscripts/resmokelib/setup_multiversion/setup_mult…`	security	healthy	`buildscripts/resmokelib/setup_multiversion/setup_multiversi…`
`auth::pyproject.toml`	security	healthy	`pyproject.toml`
`auth::jstests/auth/lib/commands_lib.js`	security	healthy	`jstests/auth/lib/commands_lib.js`
`auth::buildscripts/client/jiraclient.py`	security	healthy	`buildscripts/client/jiraclient.py`
`auth::buildscripts/mongosymb.py`	security	healthy	`buildscripts/mongosymb.py`
`auth::jstests/replsets/all_commands_downgrading_to_upgraded…`	security	healthy	`jstests/replsets/all_commands_downgrading_to_upgraded.js`
`auth::jstests/sharding/all_commands_direct_shard_connection…`	security	healthy	`jstests/sharding/all_commands_direct_shard_connection_auth.…`
`auth::evergreen/external_auth_oidc_teardown.sh`	security	healthy	`evergreen/external_auth_oidc_teardown.sh`
`auth::buildscripts/debugsymb_mapper.py`	security	healthy	`buildscripts/debugsymb_mapper.py`
`auth::src/mongo/shell/session.js`	security	healthy	`src/mongo/shell/session.js`
`auth::evergreen/external_auth_azure_teardown.sh`	security	healthy	`evergreen/external_auth_azure_teardown.sh`
`auth::buildscripts/util/oauth.py`	security	healthy	`buildscripts/util/oauth.py`
`auth::buildscripts/monitor_mongo_fork_10gen.py`	security	healthy	`buildscripts/monitor_mongo_fork_10gen.py`
`auth::evergreen/external_auth_gcp_teardown.sh`	security	healthy	`evergreen/external_auth_gcp_teardown.sh`

Label	Layer	Status	Path
`image::.devcontainer/Dockerfile`	hardware	healthy	`.devcontainer/Dockerfile`
`image::buildscripts/antithesis/base_images/mongo_binaries/D…`	hardware	healthy	`buildscripts/antithesis/base_images/mongo_binaries/Dockerfi…`
`image::buildscripts/antithesis/base_images/workload/Dockerf…`	hardware	healthy	`buildscripts/antithesis/base_images/workload/Dockerfile`
`image::src/third_party/wiredtiger/.devcontainer/Dockerfile`	hardware	healthy	`src/third_party/wiredtiger/.devcontainer/Dockerfile`
`image::src/third_party/zstandard/zstd/contrib/docker/Docker…`	hardware	healthy	`src/third_party/zstandard/zstd/contrib/docker/Dockerfile`
`wiredtiger`	hardware	healthy	`src/third_party/wiredtiger/tools/antithesis/docker-compose.…`

Label	Layer	Status	Path
`grpc::Greeter`	api	healthy	`src/mongo/transport/grpc/core_test.proto`
`grpc::TraceService`	api	healthy	`src/third_party/opentelemetry-proto/opentelemetry/proto/col…`
`grpc::LogsService`	api	healthy	`src/third_party/opentelemetry-proto/opentelemetry/proto/col…`
`grpc::MetricsService`	api	healthy	`src/third_party/opentelemetry-proto/opentelemetry/proto/col…`
`grpc::ProfilesService`	api	healthy	`src/third_party/opentelemetry-proto/opentelemetry/proto/col…`

Label	Layer	Status	Path
`ANY /`	api	healthy	`src/third_party/mock_ocsp_responder/mock_ocsp_responder.py`
`ANY /status/`	api	healthy	`src/third_party/mock_ocsp_responder/mock_ocsp_responder.py`
`ANY /status/<path:u_path>`	api	healthy	`src/third_party/mock_ocsp_responder/mock_ocsp_responder.py`
`ANY /status`	api	healthy	`src/third_party/mock_ocsp_responder/mock_ocsp_responder.py`

Label	Layer	Status	Path
`mongodb`	data	healthy	`pnpm-lock.yaml`
`clickhouse`	data	healthy	`sbom.json`
`sqlite`	data	healthy	`jstests/ocsp/lib/ocsp_helpers.js`
`postgresql`	data	healthy	`buildscripts/tests/sbom_linter/spdx.schema.json`

Label	Layer	Status	Path
`vps::aws`	hardware	healthy	`pyproject.toml`
`vps::ec2`	hardware	healthy	`evergreen/bazel_compile.sh`
`vps::azure`	hardware	healthy	`evergreen/external_auth_azure_setup.sh`
`vps::gcp`	hardware	healthy	`evergreen/external_auth_gcp_teardown.sh`

Label	Layer	Status	Path
`build`	cicd	healthy	`src/third_party/wiredtiger/test/3rdparty/testtools-2.7.1/.g…`
`success`	cicd	healthy	`src/third_party/wiredtiger/test/3rdparty/testtools-2.7.1/.g…`
`add-comment`	cicd	healthy	`src/third_party/wiredtiger/.github/workflows/pr_checklist.y…`
`check`	cicd	healthy	`src/third_party/wiredtiger/.github/workflows/pr_title_check…`

Label	Layer	Status	Path
`gha::test`	cicd	healthy	`src/third_party/wiredtiger/test/3rdparty/testtools-2.7.1/.g…`
`gha::pr_checklist`	cicd	healthy	`src/third_party/wiredtiger/.github/workflows/pr_checklist.y…`
`gha::pr_title_checker`	cicd	healthy	`src/third_party/wiredtiger/.github/workflows/pr_title_check…`

Label	Layer	Status	Path
`kafka`	data	healthy	`pyproject.toml`
`pubsub`	data	healthy	`buildscripts/resmokeconfig/suites/streams_aspio_pubsub.yml`

Label	Layer	Status	Path
`envoy`	network	healthy	`jstests/with_mongot/mongotmock/mongot_cursor_retries_on_net…`
`loadbalancer`	network	healthy	`jstests/noPassthrough/network/connection_establishment_rate…`

Label	Layer	Status	Path
`repobility-clone-4q422_jl`	software	healthy	`/tmp/repobility-clone-4q422_jl`

Label	Layer	Status	Path
`gpu (detected)`	hardware	healthy	`jstests/core/timeseries/query/timeseries_computed_field.js`

Label	Layer	Status	Path
`GITHUB_TOKEN`	cicd	healthy	`—`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/45d72c0d-64be-4ed4-87e7-e4892f4ee018/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/45d72c0d-64be-4ed4-87e7-e4892f4ee018/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

mongodb/mongo

Complete repo analysis

file 50+

function 50+

class 50+

directory 50+

service 50+

secret 50+

migration 50+

port 26

auth 15

container 6

grpc 5

endpoint 4

database 4

vps 4

job 4

pipeline 3

queue 2

load_balancer 2

repo 1

gpu 1

env_var 1