Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo
30 of your 63 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 13.15s · analysis 8.94s · 33.9 MB · GitHub API rate-limit (preflight)

gohugoio/hugo

https://github.com/gohugoio/hugo · scanned 2026-06-05 07:03 UTC (6 days ago) · 10 languages

136 raw signals (52 security + 84 graph) 11/13 scanners ran 61st percentile · Go · large (100-500K LoC) System graph score 70 (higher by 14)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 6 days ago · v2 · 64 actionable findings from 2 signal sources. 30 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
80.2
/100
Security checks
90
25 findings
System graph
71
100.0% cov · 39 findings
Critical
1
click to filter
Agents
6
0 votes
Crowd
0
reported
Score breakdown â 2026-05-18-v5
Component Sub-score Weight Contribution
structure_score 85.0 0.15 12.75
security_score 100.0 0.25 25.00
testing_score 80.0 0.20 16.00
documentation_score 81.0 0.15 12.15
practices_score 79.0 0.15 11.85
code_quality 70.0 0.10 7.00
Overall 1.00 84.8
security_score may be inflated — optional security scanners were skipped on this fast scan
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 1 High 4 Medium 12 Low 30 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 25 System graph 39 Crowd 0 Layer: Quality 29 Cicd 4 Software 10 Api 1 Frontend 9 Hardware 5 Security 6

All 2795 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

LabelLayerStatusPath
check.sh software healthy check.sh
main_withdeploy_off_test.go software healthy main_withdeploy_off_test.go
README.md software healthy README.md
CLAUDE.md software healthy CLAUDE.md
CONTRIBUTING.md software healthy CONTRIBUTING.md
watchtestscripts.sh software healthy watchtestscripts.sh
Dockerfile software healthy Dockerfile
main.go software healthy main.go
magefile.go software healthy magefile.go
hugoreleaser.yaml software healthy hugoreleaser.yaml
go.mod software healthy go.mod
main_test.go software healthy main_test.go
main_withdeploy_test.go software healthy main_withdeploy_test.go
check_gofmt.sh software healthy check_gofmt.sh
merge-release.sh software healthy merge-release.sh
SECURITY.md software healthy SECURITY.md
pull-docs.sh software healthy pull-docs.sh
AGENTS.md software healthy AGENTS.md
bufpool_test.go software healthy bufferpool/bufpool_test.go
bufpool.go software healthy bufferpool/bufpool.go
test_helpers_test.go software healthy htesting/test_helpers_test.go
test_helpers.go software healthy htesting/test_helpers.go
checkers.go software healthy htesting/hqt/checkers.go
minifiers_test.go software healthy minifiers/minifiers_test.go
config_test.go software healthy minifiers/config_test.go
minifiers.go software healthy minifiers/minifiers.go
config.go software healthy minifiers/config.go
pagemenus.go software healthy navigation/pagemenus.go
menu.go software healthy navigation/menu.go
menu_cache.go software healthy navigation/menu_cache.go
menu_cache_test.go software healthy navigation/menu_cache_test.go
defaultConfigProvider_test.go software healthy config/defaultConfigProvider_test.go
configProvider.go software healthy config/configProvider.go
commonConfig.go software healthy config/commonConfig.go
namespace_test.go software healthy config/namespace_test.go
commonConfig_test.go software healthy config/commonConfig_test.go
configLoader.go software healthy config/configLoader.go
env_test.go software healthy config/env_test.go
namespace.go software healthy config/namespace.go
configProvider_test.go software healthy config/configProvider_test.go
env.go software healthy config/env.go
configLoader_test.go software healthy config/configLoader_test.go
defaultConfigProvider.go software healthy config/defaultConfigProvider.go
securityConfig.go software healthy config/security/securityConfig.go
securityConfig_test.go software healthy config/security/securityConfig_test.go
whitelist_test.go software healthy config/security/whitelist_test.go
whitelist.go software healthy config/security/whitelist.go
testconfig.go software healthy config/testconfig/testconfig.go
servicesConfig.go software healthy config/services/servicesConfig.go
servicesConfig_test.go software healthy config/services/servicesConfig_test.go

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
bufferpool software healthy bufferpool
htesting software healthy htesting
hqt software healthy htesting/hqt
minifiers software healthy minifiers
navigation software healthy navigation
config software healthy config
security software healthy config/security
testconfig software healthy config/testconfig
services software healthy config/services
allconfig software healthy config/allconfig
privacy software healthy config/privacy
.circleci software healthy .circleci
media software healthy media
testdata software healthy media/testdata
common software healthy common
rungroup software healthy common/rungroup
types software healthy common/types
hstring software healthy common/types/hstring
css software healthy common/types/css
hstrings software healthy common/hstrings
hdebug software healthy common/hdebug
text software healthy common/text
predicate software healthy common/predicate
herrors software healthy common/herrors
himage software healthy common/himage
loggers software healthy common/loggers
constants software healthy common/constants
paths software healthy common/paths
hstore software healthy common/hstore
hreflect software healthy common/hreflect
tasks software healthy common/tasks
htime software healthy common/htime
hmaps software healthy common/hmaps
collections software healthy common/collections
hiter software healthy common/hiter
hugo software healthy common/hugo
terminal software healthy common/terminal
hugio software healthy common/hugio
hashing software healthy common/hashing
hsync software healthy common/hsync
para software healthy common/para
urls software healthy common/urls
math software healthy common/math
hexec software healthy common/hexec
version software healthy common/version
internal software healthy internal
js software healthy internal/js
esbuild software healthy internal/js/esbuild
warpc software healthy internal/warpc
js software healthy internal/warpc/js

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
foo software healthy media/testdata/resource.js:foo
Da software healthy internal/warpc/js/renderkatex.bundle.js:Da
Oa software healthy internal/warpc/js/renderkatex.bundle.js:Oa
Ha software healthy internal/warpc/js/renderkatex.bundle.js:Ha
Ar software healthy internal/warpc/js/renderkatex.bundle.js:Ar
Ja software healthy internal/warpc/js/renderkatex.bundle.js:Ja
Qa software healthy internal/warpc/js/renderkatex.bundle.js:Qa
Jt software healthy internal/warpc/js/renderkatex.bundle.js:Jt
i software healthy internal/warpc/js/renderkatex.bundle.js:i
B software healthy internal/warpc/js/renderkatex.bundle.js:B
De software healthy internal/warpc/js/renderkatex.bundle.js:De
nt software healthy internal/warpc/js/renderkatex.bundle.js:nt
ar software healthy internal/warpc/js/renderkatex.bundle.js:ar
L software healthy internal/warpc/js/renderkatex.bundle.js:L
Pr software healthy internal/warpc/js/renderkatex.bundle.js:Pr
L1 software healthy internal/warpc/js/renderkatex.bundle.js:L1
Vr software healthy internal/warpc/js/renderkatex.bundle.js:Vr
Ye software healthy internal/warpc/js/renderkatex.bundle.js:Ye
or software healthy internal/warpc/js/renderkatex.bundle.js:or
Ot software healthy internal/warpc/js/renderkatex.bundle.js:Ot
T0 software healthy internal/warpc/js/renderkatex.bundle.js:T0
m software healthy internal/warpc/js/renderkatex.bundle.js:m
Et software healthy internal/warpc/js/renderkatex.bundle.js:Et
$ software healthy internal/warpc/js/renderkatex.bundle.js:$
H software healthy internal/warpc/js/renderkatex.bundle.js:H
ia software healthy internal/warpc/js/renderkatex.bundle.js:ia
oa software healthy internal/warpc/js/renderkatex.bundle.js:oa
la software healthy internal/warpc/js/renderkatex.bundle.js:la
dr software healthy internal/warpc/js/renderkatex.bundle.js:dr
ua software healthy internal/warpc/js/renderkatex.bundle.js:ua
ca software healthy internal/warpc/js/renderkatex.bundle.js:ca
ma software healthy internal/warpc/js/renderkatex.bundle.js:ma
vr software healthy internal/warpc/js/renderkatex.bundle.js:vr
Ft software healthy internal/warpc/js/renderkatex.bundle.js:Ft
handler software healthy internal/warpc/js/renderkatex.bundle.js:handler
readInput software healthy internal/warpc/js/common.js:readInput
writeOutput software healthy internal/warpc/js/common.js:writeOutput
registerMagics software healthy docs/assets/js/alpinejs/magics/helpers.js:registerMagics
navStore software healthy docs/assets/js/alpinejs/stores/nav.js:navStore
isMediaDark software healthy docs/assets/js/alpinejs/stores/nav.js:isMediaDark
isDark software healthy docs/assets/js/alpinejs/stores/nav.js:isDark
initColorScheme software healthy docs/assets/js/alpinejs/stores/nav.js:initColorScheme
scrollToActive software healthy docs/assets/js/helpers/helpers.js:scrollToActive
bridgeTurboAndAlpine software healthy docs/assets/js/helpers/bridgeTurboAndAlpine.js:bridgeTurboA…
SPLIT_WORKS_WITH_OVERWRITTEN_EXEC software healthy livereload/livereload.js:SPLIT_WORKS_WITH_OVERWRITTEN_EXEC
maybeCallNative software healthy livereload/livereload.js:maybeCallNative
isArray software healthy livereload/livereload.js:isArray
keys software healthy livereload/livereload.js:keys
values software healthy livereload/livereload.js:values
entries software healthy livereload/livereload.js:entries

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
127.0.0.1 network healthy config/security/securityConfig_test.go
127.1.2.3 network healthy config/security/securityConfig_test.go
10.0.0.1 network healthy config/security/securityConfig_test.go
172.16.0.1 network healthy config/security/securityConfig_test.go
192.168.1.1 network healthy config/security/securityConfig_test.go
169.254.169.254 network healthy config/security/securityConfig_test.go
93.184.216.34 network healthy config/security/securityConfig_test.go
1.2.1.1 network healthy markup/goldmark/toc_integration_test.go
4.12.1.3 network healthy tpl/internal/go_templates/htmltemplate/escape.go
22.1.3.31 network healthy livereload/livereload.js
9.4.2.3 network healthy livereload/livereload.js
19.1.3.6 network healthy livereload/livereload.js
21.2.5.8 network healthy livereload/livereload.js
21.2.5.11 network healthy livereload/livereload.js
21.2.5.6 network healthy livereload/livereload.js
21.2.5.9 network healthy livereload/livereload.js
21.2.5.3 network healthy livereload/livereload.js
25.1.2.1 network healthy livereload/livereload.js
19.1.2.2 network healthy livereload/livereload.js
15.2.3.5 network healthy livereload/livereload.js
19.1.2.7 network healthy livereload/livereload.js
15.2.3.4 network healthy livereload/livereload.js
19.1.2.9 network healthy livereload/livereload.js
15.2.3.2 network healthy livereload/livereload.js
19.1.2.14 network healthy livereload/livereload.js
15.2.3.14 network healthy livereload/livereload.js
22.1.3.7 network healthy livereload/livereload.js
15.4.4.20 network healthy livereload/livereload.js
22.1.2.1 network healthy livereload/livereload.js
22.1.3.4 network healthy livereload/livereload.js
22.1.3.13 network healthy livereload/livereload.js
22.1.3.29 network healthy livereload/livereload.js
22.1.3.30 network healthy livereload/livereload.js
22.1.5.2 network healthy livereload/livereload.js
9.4.4.6 network healthy livereload/livereload.js
9.4.4.7 network healthy livereload/livereload.js
22.1.3.15 network healthy livereload/livereload.js
15.4.4.19 network healthy livereload/livereload.js
19.1.2.6 network healthy livereload/livereload.js
21.1.3.7 network healthy livereload/livereload.js
21.1.3.27 network healthy livereload/livereload.js
21.1.5.2 network healthy livereload/livereload.js
19.4.1.1 network healthy livereload/livereload.js
19.4.2.2 network healthy livereload/livereload.js
19.4.2.3 network healthy livereload/livereload.js
19.4.2.4 network healthy livereload/livereload.js
19.4.2.6 network healthy livereload/livereload.js
19.4.2.8 network healthy livereload/livereload.js
19.4.2.9 network healthy livereload/livereload.js
19.4.2.10 network healthy livereload/livereload.js

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
analyze cicd healthy docs/.github/workflows/codeql-analysis.yml
markdownlint cicd healthy docs/.github/workflows/lint.yml
spellcheck cicd healthy docs/.github/workflows/lint.yml
template-formatting cicd healthy docs/.github/workflows/lint.yml
stale cicd healthy docs/.github/workflows/stale.yml
test cicd healthy .github/workflows/test.yml
build cicd healthy .github/workflows/image.yml
stale cicd healthy .github/workflows/stale.yml

LabelLayerStatusPath
gha::codeql-analysis cicd healthy docs/.github/workflows/codeql-analysis.yml
gha::lint cicd healthy docs/.github/workflows/lint.yml
gha::stale cicd healthy docs/.github/workflows/stale.yml
gha::test cicd healthy .github/workflows/test.yml
gha::image cicd healthy .github/workflows/image.yml
gha::stale cicd healthy .github/workflows/stale.yml
circleci cicd healthy .circleci/config.yml

LabelLayerStatusPath
to software healthy docs/assets/js/head-early.js:to
LRUCache software healthy docs/assets/js/helpers/lrucache.js:LRUCache
as software healthy livereload/livereload.js:as
as software healthy livereload/livereload.min.js:as

LabelLayerStatusPath
vps::aws hardware healthy go.mod
vps::azure hardware healthy go.mod
vps::gcp hardware healthy go.mod
vps::ec2 hardware healthy go.mod

LabelLayerStatusPath
port:1313 network healthy Dockerfile
port:1234 network healthy transform/livereloadinject/livereloadinject_test.go
port:35729 network healthy livereload/livereload.js

LabelLayerStatusPath
envoy network healthy go.mod
caddy network healthy tpl/transform/transform_test.go

LabelLayerStatusPath
REGISTRY_IMAGE cicd healthy —
GITHUB_TOKEN cicd healthy —

LabelLayerStatusPath
repobility-clone-kde4mvu5 software healthy /tmp/repobility-clone-kde4mvu5

LabelLayerStatusPath
sqs data healthy hugoreleaser.yaml

LabelLayerStatusPath
image::Dockerfile hardware healthy Dockerfile

LabelLayerStatusPath
generic_api_key::docs/assets/js/main.js security healthy docs/assets/js/main.js

LabelLayerStatusPath
auth::go.mod security healthy go.mod
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/6516291b-a7ba-402f-8700-eb9126778b1e/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/6516291b-a7ba-402f-8700-eb9126778b1e/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.