Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

romaine-life/infra-bootstrap

https://github.com/romaine-life/infra-bootstrap · scanned 2026-06-15 23:55 UTC (2 months, 3 weeks ago)

34 raw signals (0 security + 34 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 3 weeks ago · v1 · 21 actionable findings from 1 signal source. 13 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
68.2
/100
Security checks
68
0 findings
System graph
68
88.9% cov · 21 findings
Critical
0
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 0 High 1 Medium 10 Low 7 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 21 Crowd 0 Layer: Hardware 1 Frontend 1 Security 2 Cicd 4 Quality 13

All 307 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

LabelLayerStatusPath
k8s::Application::k8s/root-app.yaml hardware healthy k8s/root-app.yaml
k8s::Kustomization::k8s/argocd/kustomization.yaml hardware healthy k8s/argocd/kustomization.yaml
k8s::HTTPRoute::k8s/argocd/argocd-route.yaml hardware healthy k8s/argocd/argocd-route.yaml
k8s::Certificate::k8s/argocd/argocd-cert.yaml hardware healthy k8s/argocd/argocd-cert.yaml
k8s::ClusterSecretStore::k8s/argocd/argocd-secretstore.yaml hardware healthy k8s/argocd/argocd-secretstore.yaml
k8s::ExternalSecret::k8s/argocd/argocd-github-app-externals… hardware healthy k8s/argocd/argocd-github-app-externalsecret.yaml
k8s::PrometheusRule::k8s/argocd/argocd-alerts.yaml hardware healthy k8s/argocd/argocd-alerts.yaml
k8s::XListenerSet::k8s/argocd/argocd-xlistenerset.yaml hardware healthy k8s/argocd/argocd-xlistenerset.yaml
k8s::ClusterSecretStore::k8s/external-dns/templates/secrets… hardware healthy k8s/external-dns/templates/secretstore.yaml
k8s::ExternalSecret::k8s/external-dns/templates/azure-confi… hardware healthy k8s/external-dns/templates/azure-config-secret.yaml
k8s::Application::k8s/apps/my-homepage.yaml hardware healthy k8s/apps/my-homepage.yaml
k8s::Application::k8s/apps/fzt-frontend.yaml hardware healthy k8s/apps/fzt-frontend.yaml
k8s::Application::k8s/apps/auth.yaml hardware healthy k8s/apps/auth.yaml
k8s::Application::k8s/apps/kill-me.yaml hardware healthy k8s/apps/kill-me.yaml
k8s::Application::k8s/apps/argocd.yaml hardware healthy k8s/apps/argocd.yaml
k8s::Application::k8s/apps/tank-operator-sessions.yaml hardware healthy k8s/apps/tank-operator-sessions.yaml
k8s::Application::k8s/apps/external-secrets.yaml hardware healthy k8s/apps/external-secrets.yaml
k8s::Application::k8s/apps/ambience.yaml hardware healthy k8s/apps/ambience.yaml
k8s::Application::k8s/apps/tank-operator.yaml hardware healthy k8s/apps/tank-operator.yaml
k8s::Application::k8s/apps/cloudnative-pg.yaml hardware healthy k8s/apps/cloudnative-pg.yaml
k8s::Application::k8s/apps/loki.yaml hardware healthy k8s/apps/loki.yaml
k8s::Application::k8s/apps/reflector.yaml hardware healthy k8s/apps/reflector.yaml
k8s::Application::k8s/apps/monitoring.yaml hardware healthy k8s/apps/monitoring.yaml
k8s::Application::k8s/apps/chess-tactics.yaml hardware healthy k8s/apps/chess-tactics.yaml
k8s::Application::k8s/apps/mcp-grafana.yaml hardware healthy k8s/apps/mcp-grafana.yaml
k8s::Application::k8s/apps/landing-page.yaml hardware healthy k8s/apps/landing-page.yaml
k8s::Application::k8s/apps/nats.yaml hardware healthy k8s/apps/nats.yaml
k8s::Application::k8s/apps/mcp-azure-personal.yaml hardware healthy k8s/apps/mcp-azure-personal.yaml
k8s::Application::k8s/apps/diagrams.yaml hardware healthy k8s/apps/diagrams.yaml
k8s::Application::k8s/apps/cert-manager.yaml hardware healthy k8s/apps/cert-manager.yaml
k8s::Application::k8s/apps/glimmung.yaml hardware healthy k8s/apps/glimmung.yaml
k8s::Application::k8s/apps/mcp-auth.yaml hardware healthy k8s/apps/mcp-auth.yaml
k8s::Application::k8s/apps/mcp-k8s.yaml hardware healthy k8s/apps/mcp-k8s.yaml
k8s::Application::k8s/apps/external-dns.yaml hardware healthy k8s/apps/external-dns.yaml
k8s::Application::k8s/apps/void-drifter.yaml hardware healthy k8s/apps/void-drifter.yaml
k8s::Application::k8s/apps/mcp-argocd.yaml hardware healthy k8s/apps/mcp-argocd.yaml
k8s::Application::k8s/apps/mcp-tank-operator.yaml hardware healthy k8s/apps/mcp-tank-operator.yaml
k8s::Application::k8s/apps/envoy-gateway.yaml hardware healthy k8s/apps/envoy-gateway.yaml
k8s::Application::k8s/apps/mcp-glimmung.yaml hardware healthy k8s/apps/mcp-glimmung.yaml
k8s::Application::k8s/apps/llm-explorer.yaml hardware healthy k8s/apps/llm-explorer.yaml
k8s::Application::k8s/apps/mcp-github.yaml hardware healthy k8s/apps/mcp-github.yaml
k8s::ClusterSecretStore::k8s/nats/templates/secretstore.yaml hardware healthy k8s/nats/templates/secretstore.yaml
k8s::ExternalSecret::k8s/nats/templates/externalsecret.yaml hardware healthy k8s/nats/templates/externalsecret.yaml
k8s::ClusterIssuer::k8s/cert-manager/templates/cluster-issu… hardware healthy k8s/cert-manager/templates/cluster-issuer.yaml
k8s::ClusterSecretStore::k8s/external-secrets/templates/clu… hardware healthy k8s/external-secrets/templates/cluster-secret-store.yaml
k8s::Gateway::k8s/envoy-gateway/templates/gateway.yaml hardware healthy k8s/envoy-gateway/templates/gateway.yaml
k8s::GatewayClass::k8s/envoy-gateway/templates/gatewayclass… hardware healthy k8s/envoy-gateway/templates/gatewayclass.yaml
tf::github_repository::retired hardware healthy tofu/retired-repos.tf
tf::azuread_application::microsoft_login hardware healthy tofu/oauth.tf
tf::azuread_application_password::microsoft_login hardware healthy tofu/oauth.tf

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
README.md software healthy README.md
CLAUDE.md software healthy CLAUDE.md
.gitleaks.toml software healthy .gitleaks.toml
AGENTS.md software healthy AGENTS.md
package.json software healthy scripts/package.json
verify-cosmos.mjs software healthy scripts/verify-cosmos.mjs
check-nats-chart.mjs software healthy scripts/check-nats-chart.mjs
package-lock.json software healthy scripts/package-lock.json
migrate-cosmos.mjs software healthy scripts/migrate-cosmos.mjs
removed.tf software healthy tofu/removed.tf
retired-repos.tf software healthy tofu/retired-repos.tf
oauth.tf software healthy tofu/oauth.tf
osms-cicd.tf software healthy tofu/osms-cicd.tf
README.md software healthy tofu/README.md
agent-screenshots.tf software healthy tofu/agent-screenshots.tf
main.tf software healthy tofu/main.tf
acr.tf software healthy tofu/acr.tf
variables.tf software healthy tofu/variables.tf
imports.tf software healthy tofu/imports.tf
cosmos-serverless.tf software healthy tofu/cosmos-serverless.tf
dns.tf software healthy tofu/dns.tf
platform-keyvaults.tf software healthy tofu/platform-keyvaults.tf
budget.tf software healthy tofu/budget.tf
output.tf software healthy tofu/output.tf
loki-removed.tf software healthy tofu/loki-removed.tf
network.tf software healthy tofu/network.tf
aks.tf software healthy tofu/aks.tf
landing-page-cicd.tf software healthy tofu/landing-page-cicd.tf
keyvault.tf software healthy tofu/keyvault.tf
aks-system-pool-removed.tf software healthy tofu/aks-system-pool-removed.tf
provider.tf software healthy tofu/provider.tf
removed-app-identities.tf software healthy tofu/removed-app-identities.tf
infra-bootstrap-cicd.tf software healthy tofu/infra-bootstrap-cicd.tf
shared-providers.tf software healthy tofu/provider/shared-providers.tf
main.tf software healthy tofu/app/main.tf
outputs.tf software healthy tofu/app/outputs.tf
moved.tf software healthy tofu/app/moved.tf
main.tf software healthy tofu/app/web/main.tf
root-app.yaml software healthy k8s/root-app.yaml
kustomization.yaml software healthy k8s/argocd/kustomization.yaml
argocd-route.yaml software healthy k8s/argocd/argocd-route.yaml
argocd-cert.yaml software healthy k8s/argocd/argocd-cert.yaml
README.md software healthy k8s/argocd/README.md
argocd-secretstore.yaml software healthy k8s/argocd/argocd-secretstore.yaml
argocd-github-app-externalsecret.yaml software healthy k8s/argocd/argocd-github-app-externalsecret.yaml
values.yaml software healthy k8s/argocd/values.yaml
argocd-alerts.yaml software healthy k8s/argocd/argocd-alerts.yaml
argocd-xlistenerset.yaml software healthy k8s/argocd/argocd-xlistenerset.yaml
Chart.yaml software healthy k8s/external-dns/Chart.yaml
values.yaml software healthy k8s/external-dns/values.yaml

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
scripts software healthy scripts
tofu software healthy tofu
provider software healthy tofu/provider
app software healthy tofu/app
web software healthy tofu/app/web
k8s software healthy k8s
argocd software healthy k8s/argocd
external-dns software healthy k8s/external-dns
templates software healthy k8s/external-dns/templates
apps software healthy k8s/apps
nats software healthy k8s/nats
templates software healthy k8s/nats/templates
cert-manager software healthy k8s/cert-manager
templates software healthy k8s/cert-manager/templates
cloudnative-pg software healthy k8s/cloudnative-pg
reflector software healthy k8s/reflector
external-secrets software healthy k8s/external-secrets
templates software healthy k8s/external-secrets/templates
envoy-gateway software healthy k8s/envoy-gateway
templates software healthy k8s/envoy-gateway/templates
.claude software healthy .claude
.github software healthy .github
workflows software healthy .github/workflows

LabelLayerStatusPath
lockfile-check cicd healthy .github/workflows/tofu-lockfile-check.yaml
auto-merge cicd healthy .github/workflows/auto-merge-dependabot.yaml
lockfile-update cicd healthy .github/workflows/tofu-lockfile-update.yaml
check-nats-chart cicd healthy .github/workflows/check-nats-chart.yaml
plan cicd healthy .github/workflows/tofu.yaml
apply cicd healthy .github/workflows/tofu.yaml
bootstrap cicd healthy .github/workflows/tofu.yaml
code-quality cicd healthy .github/workflows/lint.yaml

LabelLayerStatusPath
auth::k8s/argocd/argocd-github-app-externalsecret.yaml security healthy k8s/argocd/argocd-github-app-externalsecret.yaml
auth::k8s/reflector/values.yaml security healthy k8s/reflector/values.yaml
auth::AGENTS.md security healthy AGENTS.md
auth::k8s/argocd/values.yaml security healthy k8s/argocd/values.yaml
auth::CLAUDE.md security healthy CLAUDE.md
auth::k8s/argocd/argocd-route.yaml security healthy k8s/argocd/argocd-route.yaml
auth::.github/workflows/tofu.yaml security healthy .github/workflows/tofu.yaml

LabelLayerStatusPath
primaryKey software healthy scripts/verify-cosmos.mjs:primaryKey
countDocs software healthy scripts/verify-cosmos.mjs:countDocs
primaryKey software healthy scripts/migrate-cosmos.mjs:primaryKey
endpoint software healthy scripts/migrate-cosmos.mjs:endpoint
migrateOne software healthy scripts/migrate-cosmos.mjs:migrateOne
main software healthy scripts/migrate-cosmos.mjs:main

LabelLayerStatusPath
gha::tofu-lockfile-check cicd healthy .github/workflows/tofu-lockfile-check.yaml
gha::auto-merge-dependabot cicd healthy .github/workflows/auto-merge-dependabot.yaml
gha::tofu-lockfile-update cicd healthy .github/workflows/tofu-lockfile-update.yaml
gha::check-nats-chart cicd healthy .github/workflows/check-nats-chart.yaml
gha::tofu cicd healthy .github/workflows/tofu.yaml
gha::lint cicd healthy .github/workflows/lint.yaml

LabelLayerStatusPath
redis data healthy k8s/argocd/values.yaml
postgres data healthy k8s/nats/values.yaml

LabelLayerStatusPath
port:80 network healthy k8s/argocd/argocd-route.yaml
port:443 network healthy k8s/argocd/argocd-xlistenerset.yaml

LabelLayerStatusPath
repobility-clone-ep0o183v software healthy /tmp/repobility-clone-ep0o183v

LabelLayerStatusPath
envoy network healthy CLAUDE.md

LabelLayerStatusPath
vps::azure hardware healthy README.md

LabelLayerStatusPath
gpu (detected) hardware healthy CLAUDE.md

LabelLayerStatusPath
password_literal::.github/workflows/tofu.yaml security healthy .github/workflows/tofu.yaml

LabelLayerStatusPath
GITHUB_TOKEN cicd healthy —
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/6f6b037e-be03-45cf-9b5b-fe7297eb9a44/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/6f6b037e-be03-45cf-9b5b-fe7297eb9a44/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.