Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo
70 of your 156 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 6.1s · analysis 9.47s · 40.2 MB · GitHub API rate-limit (preflight)

rclone/rclone

https://github.com/rclone/rclone · scanned 2026-06-05 09:56 UTC (5 days, 16 hours ago) · 10 languages

491 raw signals (145 security + 346 graph) 11/13 scanners ran 67th percentile · Go · large (100-500K LoC) System graph score 64 (higher by 22)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 5 days, 16 hours ago · v2 · 190 actionable findings from 2 signal sources. 122 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
77.5
/100
Security checks
91
55 findings
System graph
64
100.0% cov · 135 findings
Critical
6
click to filter
Agents
6
0 votes
Crowd
0
reported
Score breakdown â 2026-05-18-v5
Component Sub-score Weight Contribution
structure_score 85.0 0.15 12.75
security_score 100.0 0.25 25.00
testing_score 80.0 0.20 16.00
documentation_score 77.0 0.15 11.55
practices_score 97.0 0.15 14.55
code_quality 70.0 0.10 7.00
Overall 1.00 86.8
security_score may be inflated — optional security scanners were skipped on this fast scan
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 6 High 21 Medium 102 Low 42 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 55 System graph 135 Crowd 0 Layer: Quality 52 Security 108 Cicd 13 Software 5 Api 1 Frontend 3 Network 1 Hardware 7

All 1952 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

LabelLayerStatusPath
.golangci.yml software healthy .golangci.yml
RELEASE.md software healthy RELEASE.md
README.md software healthy README.md
rclone.go software healthy rclone.go
MAINTAINERS.md software healthy MAINTAINERS.md
CONTRIBUTING.md software healthy CONTRIBUTING.md
MANUAL.html software healthy MANUAL.html
Dockerfile software healthy Dockerfile
go.mod software healthy go.mod
Makefile software healthy Makefile
MANUAL.md software healthy MANUAL.md
.markdownlint.yml software healthy .markdownlint.yml
CODE_OF_CONDUCT.md software healthy CODE_OF_CONDUCT.md
README.md software healthy docs/README.md
config.json software healthy docs/config.json
en.toml software healthy docs/i18n/en.toml
rclone.js software healthy docs/static/js/rclone.js
rclone.css software healthy docs/static/css/rclone.css
ftp.md software healthy docs/content/ftp.md
amazonclouddrive.md software healthy docs/content/amazonclouddrive.md
gofile.md software healthy docs/content/gofile.md
local.md software healthy docs/content/local.md
iclouddrive.md software healthy docs/content/iclouddrive.md
_index.md software healthy docs/content/_index.md
filtering.md software healthy docs/content/filtering.md
bisync.md software healthy docs/content/bisync.md
s3.md software healthy docs/content/s3.md
internetarchive.md software healthy docs/content/internetarchive.md
internxt.md software healthy docs/content/internxt.md
crypt.md software healthy docs/content/crypt.md
box.md software healthy docs/content/box.md
dropbox.md software healthy docs/content/dropbox.md
sponsor.md software healthy docs/content/sponsor.md
shade.md software healthy docs/content/shade.md
drive.md software healthy docs/content/drive.md
huaweidrive.md software healthy docs/content/huaweidrive.md
cache.md software healthy docs/content/cache.md
hasher.md software healthy docs/content/hasher.md
privacy.md software healthy docs/content/privacy.md
install.md software healthy docs/content/install.md
pikpak.md software healthy docs/content/pikpak.md
doi.md software healthy docs/content/doi.md
protondrive.md software healthy docs/content/protondrive.md
tiers.md software healthy docs/content/tiers.md
drime.md software healthy docs/content/drime.md
archive.md software healthy docs/content/archive.md
install.sh software healthy docs/content/install.sh
smb.md software healthy docs/content/smb.md
filescom.md software healthy docs/content/filescom.md
union.md software healthy docs/content/union.md

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
docs software healthy docs
i18n software healthy docs/i18n
static software healthy docs/static
js software healthy docs/static/js
css software healthy docs/static/css
content software healthy docs/content
commands software healthy docs/content/commands
oracleobjectstorage software healthy docs/content/oracleobjectstorage
layouts software healthy docs/layouts
partials software healthy docs/layouts/partials
shortcodes software healthy docs/layouts/shortcodes
section software healthy docs/layouts/section
backends software healthy docs/layouts/backends
chrome software healthy docs/layouts/chrome
_default software healthy docs/layouts/_default
fstest software healthy fstest
mockdir software healthy fstest/mockdir
test_all software healthy fstest/test_all
testserver software healthy fstest/testserver
init.d software healthy fstest/testserver/init.d
seafile software healthy fstest/testserver/init.d/seafile
images software healthy fstest/testserver/images
test-sftp-openssh software healthy fstest/testserver/images/test-sftp-openssh
test-hdfs software healthy fstest/testserver/images/test-hdfs
mockfs software healthy fstest/mockfs
testy software healthy fstest/testy
runs software healthy fstest/runs
fstests software healthy fstest/fstests
mockobject software healthy fstest/mockobject
cmd software healthy cmd
copyurl software healthy cmd/copyurl
about software healthy cmd/about
listremotes software healthy cmd/listremotes
dedupe software healthy cmd/dedupe
archive software healthy cmd/archive
list software healthy cmd/archive/list
files software healthy cmd/archive/files
extract software healthy cmd/archive/extract
create software healthy cmd/archive/create
rmdir software healthy cmd/rmdir
touch software healthy cmd/touch
sync software healthy cmd/sync
mkdir software healthy cmd/mkdir
purge software healthy cmd/purge
deletefile software healthy cmd/deletefile
cachestats software healthy cmd/cachestats
lsd software healthy cmd/lsd
reveal software healthy cmd/reveal
config software healthy cmd/config
lsf software healthy cmd/lsf

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
auth::backend/zoho/zoho.go security healthy backend/zoho/zoho.go
auth::cmd/config/config.go security healthy cmd/config/config.go
auth::backend/box/box.go security healthy backend/box/box.go
auth::go.mod security healthy go.mod
auth::backend/drive/drive.go security healthy backend/drive/drive.go
auth::backend/webdav/odrvcookie/fetch.go security healthy backend/webdav/odrvcookie/fetch.go
auth::backend/sharefile/sharefile.go security healthy backend/sharefile/sharefile.go
auth::backend/yandex/yandex.go security healthy backend/yandex/yandex.go
auth::backend/onedrive/onedrive.go security healthy backend/onedrive/onedrive.go
auth::lib/jwtutil/jwtutil.go security healthy lib/jwtutil/jwtutil.go
auth::lib/rest/rest.go security healthy lib/rest/rest.go
auth::lib/oauthutil/rc_test.go security healthy lib/oauthutil/rc_test.go
auth::backend/putio/fs.go security healthy backend/putio/fs.go
auth::fs/backend_config.go security healthy fs/backend_config.go
auth::backend/iclouddrive/api/session.go security healthy backend/iclouddrive/api/session.go
auth::lib/oauthutil/oauthutil.go security healthy lib/oauthutil/oauthutil.go
auth::backend/internxt/auth.go security healthy backend/internxt/auth.go
auth::backend/huaweidrive/huaweidrive.go security healthy backend/huaweidrive/huaweidrive.go
auth::backend/pcloud/pcloud.go security healthy backend/pcloud/pcloud.go
auth::backend/azurefiles/azurefiles.go security healthy backend/azurefiles/azurefiles.go
auth::backend/mailru/mailru.go security healthy backend/mailru/mailru.go
auth::backend/shade/shade.go security healthy backend/shade/shade.go
auth::backend/filefabric/filefabric.go security healthy backend/filefabric/filefabric.go
auth::backend/premiumizeme/premiumizeme.go security healthy backend/premiumizeme/premiumizeme.go
auth::backend/internxt/internxt.go security healthy backend/internxt/internxt.go
auth::backend/hidrive/hidrive.go security healthy backend/hidrive/hidrive.go
auth::backend/pikpak/helper.go security healthy backend/pikpak/helper.go
auth::backend/hidrive/helpers.go security healthy backend/hidrive/helpers.go
auth::backend/dropbox/dropbox.go security healthy backend/dropbox/dropbox.go
auth::backend/pikpak/api/types.go security healthy backend/pikpak/api/types.go
auth::backend/huaweidrive/huaweidrive_test.go security healthy backend/huaweidrive/huaweidrive_test.go
auth::backend/jottacloud/jottacloud.go security healthy backend/jottacloud/jottacloud.go
auth::backend/pikpak/pikpak.go security healthy backend/pikpak/pikpak.go

LabelLayerStatusPath
activateTocLink software healthy docs/static/js/rclone.js:activateTocLink
centerTocLink software healthy docs/static/js/rclone.js:centerTocLink
suppressAndActivate software healthy docs/static/js/rclone.js:suppressAndActivate
makeColgroup software healthy docs/static/js/rclone.js:makeColgroup
updateArrows software healthy docs/static/js/rclone.js:updateArrows
scrollTo software healthy docs/static/js/rclone.js:scrollTo
on_search software healthy docs/static/js/rclone.js:on_search
setUpClass software healthy librclone/python/test_rclone.py:16
tearDownClass software healthy librclone/python/test_rclone.py:23
test_rpc software healthy librclone/python/test_rclone.py:28
test_rpc_error software healthy librclone/python/test_rclone.py:32
__init__ software healthy librclone/python/rclone.py:63
rpc software healthy librclone/python/rclone.py:74
close software healthy librclone/python/rclone.py:92
build software healthy librclone/python/rclone.py:99
enosys software healthy fs/rc/js/wasm_exec.js:enosys
setInt64 software healthy fs/rc/js/wasm_exec.js:setInt64
getInt64 software healthy fs/rc/js/wasm_exec.js:getInt64
loadValue software healthy fs/rc/js/wasm_exec.js:loadValue
storeValue software healthy fs/rc/js/wasm_exec.js:storeValue
loadSlice software healthy fs/rc/js/wasm_exec.js:loadSlice
loadSliceOfValues software healthy fs/rc/js/wasm_exec.js:loadSliceOfValues
loadString software healthy fs/rc/js/wasm_exec.js:loadString
msec software healthy fs/rc/js/wasm_exec.js:msec
strPtr software healthy fs/rc/js/wasm_exec.js:strPtr

LabelLayerStatusPath
DOCKERHUB_USERNAME cicd healthy —
REPO_NAME cicd healthy —
GITHUB_TOKEN cicd healthy —
PLATFORM cicd healthy —
RCLONE_CONFIG_PASS cicd healthy —
WINGET_TOKEN cicd healthy —
ANNOTATIONS cicd healthy —
DOCKERHUB_TOKEN cicd healthy —
DOCKER_HUB_USER cicd healthy —
CACHE_NAME cicd healthy —
TAGS cicd healthy —
DOCKER_HUB_PASSWORD cicd healthy —
NOTIFY_ACTION_TOKEN cicd healthy —

LabelLayerStatusPath
password_literal::fstest/testserver/images/test-hdfs/run.sh security healthy fstest/testserver/images/test-hdfs/run.sh
password_literal::lib/http/middleware_test.go security healthy lib/http/middleware_test.go
password_literal::lib/http/middleware_test.go security healthy lib/http/middleware_test.go
password_literal::lib/http/middleware_test.go security healthy lib/http/middleware_test.go
password_literal::lib/http/middleware_test.go security healthy lib/http/middleware_test.go
password_literal::backend/sftp/sftp.go security healthy backend/sftp/sftp.go
password_literal::backend/seafile/webapi.go security healthy backend/seafile/webapi.go
password_literal::backend/iclouddrive/iclouddrive.go security healthy backend/iclouddrive/iclouddrive.go
password_literal::fs/config/crypt.go security healthy fs/config/crypt.go
password_literal::fs/config/ui.go security healthy fs/config/ui.go
password_literal::fs/config/ui.go security healthy fs/config/ui.go
password_literal::fs/config/ui.go security healthy fs/config/ui.go

LabelLayerStatusPath
build_docker_volume_plugin cicd healthy .github/workflows/build_publish_docker_plugin.yml
notify cicd healthy .github/workflows/notify.yml
publish cicd healthy .github/workflows/winget.yml
build-image cicd healthy .github/workflows/build_publish_docker_image.yml
merge-image cicd healthy .github/workflows/build_publish_docker_image.yml
build cicd healthy .github/workflows/build.yml
lint cicd healthy .github/workflows/build.yml
android cicd healthy .github/workflows/build.yml

LabelLayerStatusPath
image::Dockerfile hardware healthy Dockerfile
image::fstest/testserver/images/test-sftp-openssh/Dockerfile hardware healthy fstest/testserver/images/test-sftp-openssh/Dockerfile
image::fstest/testserver/images/test-hdfs/Dockerfile hardware healthy fstest/testserver/images/test-hdfs/Dockerfile
image::contrib/docker-plugin/managed/Dockerfile hardware healthy contrib/docker-plugin/managed/Dockerfile
db hardware healthy fstest/testserver/init.d/seafile/docker-compose.yml
memcached hardware healthy fstest/testserver/init.d/seafile/docker-compose.yml
seafile hardware healthy fstest/testserver/init.d/seafile/docker-compose.yml

LabelLayerStatusPath
has software healthy docs/static/js/rclone.js:has
TestRclone software healthy librclone/python/test_rclone.py:11
RcloneRPCString software healthy librclone/python/rclone.py:24
RcloneRPCResult software healthy librclone/python/rclone.py:35
RcloneException software healthy librclone/python/rclone.py:42
Rclone software healthy librclone/python/rclone.py:57

LabelLayerStatusPath
vps::azure hardware healthy go.mod
vps::aws hardware healthy go.mod
vps::ec2 hardware healthy go.mod
vps::digitalocean hardware healthy fstest/test_all/config.yaml
vps::linode hardware healthy backend/s3/provider/Linode.yaml
vps::hetzner hardware healthy backend/s3/provider/Hetzner.yaml

LabelLayerStatusPath
1.2.3.4 network healthy cmd/serve/dlna/dlna.go
127.0.0.1 network healthy cmd/serve/proxy/proxy_test.go
1.42.0.6 network healthy cmd/version/version.go
1.42.0.5 network healthy cmd/version/version.go
131.0.0.0 network healthy backend/linkbox/linkbox.go

LabelLayerStatusPath
gha::build_publish_docker_plugin cicd healthy .github/workflows/build_publish_docker_plugin.yml
gha::notify cicd healthy .github/workflows/notify.yml
gha::winget cicd healthy .github/workflows/winget.yml
gha::build_publish_docker_image cicd healthy .github/workflows/build_publish_docker_image.yml
gha::build cicd healthy .github/workflows/build.yml

LabelLayerStatusPath
port:8080 network healthy contrib/docker/docker-compose.webdav-server.yml
port:80 network healthy backend/qingstor/qingstor.go
port:21 network healthy backend/ftp/ftp.go
port:443 network healthy backend/seafile/pacer.go

LabelLayerStatusPath
mongodb data healthy go.mod
mariadb data healthy fstest/testserver/init.d/seafile/docker-compose.yml
mysql data healthy fstest/testserver/init.d/seafile/docker-compose.yml

LabelLayerStatusPath
nginx network healthy backend/http/http_internal_test.go
caddy network healthy backend/http/http_internal_test.go

LabelLayerStatusPath
repobility-clone-ozg26sxm software healthy /tmp/repobility-clone-ozg26sxm
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/5a00e5cd-458d-444c-b328-c6d9527644dc/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/5a00e5cd-458d-444c-b328-c6d9527644dc/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.