Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

yuzutech/kroki

https://github.com/yuzutech/kroki · scanned 2026-06-16 01:10 UTC (2 months, 1 week ago)

200 raw signals (0 security + 200 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 1 week ago · v1 · 173 actionable findings from 1 signal source. 27 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

88.9% cov · 173 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 48 Medium 24 Low 56 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 173 Crowd 0 Layer: Frontend 44 Hardware 8 Security 66 Cicd 3 Quality 52

Exclude dismissed / FP Exclude test files

Corpus Intelligence Cross-corpus context (cohort percentile, top patterns, fix plan) is shown only on repositories you own. Sign up and connect your repo to view it.

Scan summary Repository scanned at 63.2/100 with 88.9% coverage. It contains 12830 nodes across 0 cross-layer flows, written primarily in mixed languages. Engine surfaced 200 findings — concentrated in security (66), quality (52), frontend (44). Risk profile is high: 0 critical, 48 high, 36 medium. Recommended next step: open the security layer findings first — that's where the highest-impact wins live.

Showing 128 of 173 actionable findings. 200 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

high System graph hardware Supply chain conf 1.00 Dockerfile pipes a remote installer into a shell

Executing downloaded code during image build gives the remote endpoint build-time code execution. Prefer pinned packages or verify downloaded installers by checksum/signature.

server/ops/docker/Dockerfile:25 containersRemote installer

high System graph cicd CI/CD security conf 1.00 GitHub Action tracks a moving branch

aquasecurity/trivy-action@master can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA.

.github/workflows/cve-scan.yml:17 CI/CD securitySupply chainGithub actions

high System graph security security conf 1.00 Insecure pattern 'eval_used' in diagrams.net/assets/mxgraph/mxClient.js:36

Found a known-risky pattern (eval_used). Review and replace if possible.

diagrams.net/assets/mxgraph/mxClient.js:36 Eval used

high System graph security security conf 1.00 Insecure pattern 'eval_used' in diagrams.net/assets/mxgraph/src/util/mxUtils.js:396

Found a known-risky pattern (eval_used). Review and replace if possible.

diagrams.net/assets/mxgraph/src/util/mxUtils.js:396 Eval used

high System graph security security conf 1.00 Insecure pattern 'new_function_used' in diagrams.net/assets/math4/es5/core.js:1