Scan timing: clone 2.53s · analysis 3.32s · 2.3 MB · GitHub preflight 400ms
https://github.com/Flux159/mcp-server-kubernetes
· scanned 2026-05-31 01:22 UTC (5 days, 8 hours ago)
· 10 languages
162 findings (48 legacy + 114 scanner) 94th percentile · Typescript · small (2-20K LoC) Scanner says 64 (higher by 24)
Last scanned 5 days, 8 hours ago · v2 · 106 findings from 2 sources. Findings combine the legacy security pipeline AND the multi-layer engine (atlas, wiring, flows, ranked) AND verified AI agent contributions.
| Component | Sub-score | Weight | Contribution |
|---|---|---|---|
structure_score |
100.0 | 0.15 | 15.00 |
security_score |
92.0 | 0.25 | 23.00 |
testing_score |
100.0 | 0.20 | 20.00 |
documentation_score |
78.0 | 0.15 | 11.70 |
practices_score |
82.0 | 0.15 | 12.30 |
code_quality |
57.1 | 0.10 | 5.71 |
| Overall | 1.00 | 87.7 |
All 362 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.
| Label | Layer | Status | Path |
|---|---|---|---|
getTimeoutValue |
software | healthy | tests/exec_in_pod.test.ts:getTimeoutValue |
formatTimeout |
software | healthy | tests/exec_in_pod.test.ts:formatTimeout |
buildExecCommand |
software | healthy | tests/exec_in_pod.test.ts:buildExecCommand |
processExecOutput |
software | healthy | tests/exec_in_pod.test.ts:processExecOutput |
sleep |
software | healthy | tests/prompts.test.ts:sleep |
isHelmAvailable |
software | healthy | tests/helm.test.ts:isHelmAvailable |
sleep |
software | healthy | tests/helm.test.ts:sleep |
to |
software | healthy | tests/helm.test.ts:to |
waitForClusterReadiness |
software | healthy | tests/helm.test.ts:waitForClusterReadiness |
mcpPost |
software | healthy | tests/dns-rebinding.test.ts:mcpPost |
makeListToolsRequest |
software | healthy | tests/dns-rebinding.test.ts:makeListToolsRequest |
saveEnvKeys |
software | healthy | tests/dns-rebinding.test.ts:saveEnvKeys |
restoreEnvKeys |
software | healthy | tests/dns-rebinding.test.ts:restoreEnvKeys |
waitForListening |
software | healthy | tests/dns-rebinding.test.ts:waitForListening |
to |
software | healthy | tests/cronjob.test.ts:to |
sleep |
software | healthy | tests/cronjob.test.ts:sleep |
generateRandomId |
software | healthy | tests/cronjob.test.ts:generateRandomId |
startSSEServerWithReturn |
software | healthy | tests/sse.test.ts:startSSEServerWithReturn |
to |
software | healthy | tests/set_current_context.test.ts:to |
sleep |
software | healthy | tests/set_current_context.test.ts:sleep |
sleep |
software | healthy | tests/kubectl-unified.test.ts:sleep |
to |
software | healthy | tests/kubectl-unified.test.ts:to |
retry |
software | healthy | tests/kubectl-unified.test.ts:retry |
sleep |
software | healthy | tests/service.test.ts:sleep |
generateRandomId |
software | healthy | tests/service.test.ts:generateRandomId |
generateRandomSHA |
software | healthy | tests/service.test.ts:generateRandomSHA |
parseServiceResponse |
software | healthy | tests/service.test.ts:parseServiceResponse |
parseListServicesResponse |
software | healthy | tests/service.test.ts:parseListServicesResponse |
parseUpdateServiceResponse |
software | healthy | tests/service.test.ts:parseUpdateServiceResponse |
parseDeleteServiceResponse |
software | healthy | tests/service.test.ts:parseDeleteServiceResponse |
to |
software | healthy | tests/current_context.test.ts:to |
sleep |
software | healthy | tests/current_context.test.ts:sleep |
sleep |
software | healthy | tests/namespace.test.ts:sleep |
sleep |
software | healthy | tests/kubectl-generic.test.ts:sleep |
to |
software | healthy | tests/kubectl-generic.test.ts:to |
retry |
software | healthy | tests/kubectl-generic.test.ts:retry |
connectWithEnv |
software | healthy | tests/tool_restriction_enforcement.test.ts:connectWithEnv |
list |
software | healthy | tests/tool_restriction_enforcement.test.ts:list |
to |
software | healthy | tests/contexts.test.ts:to |
sleep |
software | healthy | tests/contexts.test.ts:sleep |
isListToolsResponse |
software | healthy | tests/streaming_http.test.ts:isListToolsResponse |
mockHandler |
software | healthy | tests/telemetry-integration.test.ts:mockHandler |
sleep |
software | healthy | tests/port_forward.test.ts:sleep |
generateRandomSHA |
software | healthy | tests/port_forward.test.ts:generateRandomSHA |
sleep |
software | healthy | tests/kubectl-rollout.test.ts:sleep |
to |
software | healthy | tests/kubectl-rollout.test.ts:to |
retry |
software | healthy | tests/kubectl-rollout.test.ts:retry |
to |
software | healthy | tests/context-helper.ts:to |
asResponseSchema |
software | healthy | tests/context-helper.ts:asResponseSchema |
to |
software | healthy | tests/unit.test.ts:to |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
gemini-extension.json |
software | healthy | gemini-extension.json |
ADVANCED_README.md |
software | healthy | ADVANCED_README.md |
manifest.json |
software | healthy | manifest.json |
README.md |
software | healthy | README.md |
CLAUDE.md |
software | healthy | CLAUDE.md |
package.json |
software | healthy | package.json |
CONTRIBUTING.md |
software | healthy | CONTRIBUTING.md |
Dockerfile |
software | healthy | Dockerfile |
server.json |
software | healthy | server.json |
tsconfig.json |
software | healthy | tsconfig.json |
SECURITY.md |
software | healthy | SECURITY.md |
vitest.config.ts |
software | healthy | vitest.config.ts |
exec_in_pod.test.ts |
software | healthy | tests/exec_in_pod.test.ts |
prompts.test.ts |
software | healthy | tests/prompts.test.ts |
helm.test.ts |
software | healthy | tests/helm.test.ts |
dns-rebinding.test.ts |
software | healthy | tests/dns-rebinding.test.ts |
kubectl-context.unit.test.ts |
software | warning | tests/kubectl-context.unit.test.ts |
cronjob.test.ts |
software | healthy | tests/cronjob.test.ts |
non_destructive_tools.test.ts |
software | warning | tests/non_destructive_tools.test.ts |
sse.test.ts |
software | healthy | tests/sse.test.ts |
set_current_context.test.ts |
software | healthy | tests/set_current_context.test.ts |
kubectl-unified.test.ts |
software | healthy | tests/kubectl-unified.test.ts |
service.test.ts |
software | healthy | tests/service.test.ts |
helm-operations.test.ts |
software | warning | tests/helm-operations.test.ts |
current_context.test.ts |
software | healthy | tests/current_context.test.ts |
namespace.test.ts |
software | healthy | tests/namespace.test.ts |
kubectl-generic.test.ts |
software | healthy | tests/kubectl-generic.test.ts |
kubectl-flags-security.unit.test.ts |
software | warning | tests/kubectl-flags-security.unit.test.ts |
tool_restriction_enforcement.test.ts |
software | healthy | tests/tool_restriction_enforcement.test.ts |
node-management.test.ts |
software | warning | tests/node-management.test.ts |
contexts.test.ts |
software | healthy | tests/contexts.test.ts |
streaming_http.test.ts |
software | healthy | tests/streaming_http.test.ts |
telemetry-integration.test.ts |
software | healthy | tests/telemetry-integration.test.ts |
port_forward.test.ts |
software | healthy | tests/port_forward.test.ts |
kubectl-rollout.test.ts |
software | healthy | tests/kubectl-rollout.test.ts |
context-helper.ts |
software | healthy | tests/context-helper.ts |
unit.test.ts |
software | healthy | tests/unit.test.ts |
kubectl.test.ts |
software | healthy | tests/kubectl.test.ts |
auth.test.ts |
software | healthy | tests/auth.test.ts |
configmap.test.ts |
software | healthy | tests/configmap.test.ts |
kubectl-patch.test.ts |
software | healthy | tests/kubectl-patch.test.ts |
kubectl-reconnect.unit.test.ts |
software | warning | tests/kubectl-reconnect.unit.test.ts |
kubernetes-manager.test.ts |
software | healthy | tests/kubernetes-manager.test.ts |
telemetry-config.test.ts |
software | warning | tests/telemetry-config.test.ts |
kubectl-get-secrets.test.ts |
software | healthy | tests/kubectl-get-secrets.test.ts |
port-helper.ts |
software | healthy | tests/port-helper.ts |
values.schema.json |
software | healthy | helm-chart/values.schema.json |
README.md |
software | healthy | helm-chart/README.md |
Chart.yaml |
software | healthy | helm-chart/Chart.yaml |
values.yaml |
software | healthy | helm-chart/values.yaml |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
tests |
software | healthy | tests |
helm-chart |
software | healthy | helm-chart |
templates |
software | healthy | helm-chart/templates |
tests |
software | healthy | helm-chart/templates/tests |
examples |
software | healthy | helm-chart/examples |
docs |
software | healthy | docs |
scripts |
software | healthy | scripts |
.github |
software | healthy | .github |
workflows |
software | healthy | .github/workflows |
src |
software | healthy | src |
security |
software | healthy | src/security |
models |
software | healthy | src/models |
config |
software | healthy | src/config |
middleware |
software | healthy | src/middleware |
resources |
software | healthy | src/resources |
utils |
software | healthy | src/utils |
tools |
software | healthy | src/tools |
prompts |
software | healthy | src/prompts |
| Label | Layer | Status | Path |
|---|---|---|---|
127.0.0.1 |
network | healthy | tests/dns-rebinding.test.ts |
10.96.0.0 |
network | healthy | helm-chart/values.yaml |
10.100.0.0 |
network | healthy | helm-chart/values.yaml |
172.20.0.0 |
network | healthy | helm-chart/values.yaml |
52.94.0.0 |
network | healthy | helm-chart/values.yaml |
54.239.0.0 |
network | healthy | helm-chart/values.yaml |
35.199.0.0 |
network | healthy | helm-chart/values.yaml |
199.36.153.8 |
network | healthy | helm-chart/values.yaml |
169.254.169.254 |
network | healthy | helm-chart/values.yaml |
10.0.0.0 |
network | healthy | helm-chart/values.yaml |
10.0.1.0 |
network | healthy | helm-chart/values.yaml |
203.0.113.0 |
network | healthy | helm-chart/values.yaml |
172.16.0.0 |
network | healthy | helm-chart/templates/networkpolicy-tests.yaml |
192.168.0.0 |
network | healthy | helm-chart/templates/networkpolicy-tests.yaml |
10.0.2.0 |
network | healthy | helm-chart/examples/secure-networkpolicy.yaml |
192.168.49.2 |
network | healthy | .github/workflows/cd.yml |
| Label | Layer | Status | Path |
|---|---|---|---|
image::Dockerfile |
hardware | healthy | Dockerfile |
k8s::ConfigMap::helm-chart/templates/configmap.yaml |
hardware | healthy | helm-chart/templates/configmap.yaml |
k8s::Secret::helm-chart/templates/configmap.yaml |
hardware | healthy | helm-chart/templates/configmap.yaml |
k8s::HorizontalPodAutoscaler::helm-chart/templates/hpa.yaml |
hardware | healthy | helm-chart/templates/hpa.yaml |
k8s::NetworkPolicy::helm-chart/templates/networkpolicy.yaml |
hardware | healthy | helm-chart/templates/networkpolicy.yaml |
k8s::NetworkPolicy::helm-chart/templates/networkpolicy-test… |
hardware | healthy | helm-chart/templates/networkpolicy-tests.yaml |
k8s::ServiceAccount::helm-chart/templates/serviceaccount.ya… |
hardware | healthy | helm-chart/templates/serviceaccount.yaml |
k8s::PodDisruptionBudget::helm-chart/templates/poddisruptio… |
hardware | healthy | helm-chart/templates/poddisruptionbudget.yaml |
k8s::ClusterRole::helm-chart/templates/rbac.yaml |
hardware | healthy | helm-chart/templates/rbac.yaml |
k8s::ClusterRoleBinding::helm-chart/templates/rbac.yaml |
hardware | healthy | helm-chart/templates/rbac.yaml |
k8s::ConfigMap::helm-chart/templates/tests/test-scripts-con… |
hardware | healthy | helm-chart/templates/tests/test-scripts-configmap.yaml |
k8s::ConfigMap::helm-chart/examples/custom-kubeconfig.yaml |
hardware | healthy | helm-chart/examples/custom-kubeconfig.yaml |
k8s::Secret::helm-chart/examples/custom-kubeconfig.yaml |
hardware | healthy | helm-chart/examples/custom-kubeconfig.yaml |
| Label | Layer | Status | Path |
|---|---|---|---|
port:80 |
network | healthy | tests/helm.test.ts |
port:81 |
network | healthy | tests/service.test.ts |
port:443 |
network | healthy | tests/service.test.ts |
port:3001 |
network | healthy | helm-chart/values.yaml |
port:4317 |
network | healthy | helm-chart/values.yaml |
port:8080 |
network | healthy | helm-chart/values.yaml |
port:53 |
network | healthy | helm-chart/templates/networkpolicy.yaml |
port:8200 |
network | healthy | helm-chart/examples/custom-kubeconfig.yaml |
port:6443 |
network | healthy | helm-chart/examples/generic-kubeconfig.yaml |
port:3000 |
network | healthy | src/utils/sse.ts |
| Label | Layer | Status | Path |
|---|---|---|---|
POST /mcp |
api | healthy | src/utils/streamable-http.ts |
GET /mcp |
api | healthy | src/utils/streamable-http.ts |
DELETE /mcp |
api | healthy | src/utils/streamable-http.ts |
GET /health |
api | healthy | src/utils/streamable-http.ts |
GET /ready |
api | healthy | src/utils/streamable-http.ts |
GET /sse |
api | healthy | src/utils/sse.ts |
POST /messages |
api | healthy | src/utils/sse.ts |
| Label | Layer | Status | Path |
|---|---|---|---|
k8s::Deployment::helm-chart/templates/deployment.yaml |
hardware | healthy | helm-chart/templates/deployment.yaml |
k8s::Pod::helm-chart/templates/tests/test-connectivity.yaml |
hardware | healthy | helm-chart/templates/tests/test-connectivity.yaml |
k8s::Pod::helm-chart/templates/tests/test-mcp-tools.yaml |
hardware | healthy | helm-chart/templates/tests/test-mcp-tools.yaml |
k8s::Pod::helm-chart/templates/tests/test-kubeconfig.yaml |
hardware | healthy | helm-chart/templates/tests/test-kubeconfig.yaml |
| Label | Layer | Status | Path |
|---|---|---|---|
auth::src/utils/auth.ts |
security | healthy | src/utils/auth.ts |
auth::helm-chart/examples/aws-irsa-example.yaml |
security | healthy | helm-chart/examples/aws-irsa-example.yaml |
auth::.github/workflows/cd.yml |
security | healthy | .github/workflows/cd.yml |
auth::helm-chart/examples/custom-kubeconfig.yaml |
security | healthy | helm-chart/examples/custom-kubeconfig.yaml |
| Label | Layer | Status | Path |
|---|---|---|---|
KubectlSequencer |
software | healthy | vitest.config.ts:KubectlSequencer |
CustomError |
software | healthy | tests/telemetry-integration.test.ts:CustomError |
KubernetesManager |
software | healthy | src/utils/kubernetes-manager.ts:KubernetesManager |
| Label | Layer | Status | Path |
|---|---|---|---|
vps::aws |
hardware | healthy | tests/kubectl-context.unit.test.ts |
vps::gcp |
hardware | healthy | helm-chart/values.schema.json |
vps::azure |
hardware | healthy | helm-chart/examples/url-kubeconfig.yaml |
| Label | Layer | Status | Path |
|---|---|---|---|
GITHUB_TOKEN |
cicd | healthy | — |
DOCKER_HUB_TOKEN |
cicd | healthy | — |
DOCKER_HUB_USERNAME |
cicd | healthy | — |
| Label | Layer | Status | Path |
|---|---|---|---|
nginx |
network | healthy | tests/helm.test.ts |
loadbalancer |
network | healthy | tests/service.test.ts |
| Label | Layer | Status | Path |
|---|---|---|---|
/mcp |
frontend | healthy | tests/dns-rebinding.test.ts |
/ |
frontend | healthy | src/config/container-templates.ts |
| Label | Layer | Status | Path |
|---|---|---|---|
gha::cd |
cicd | healthy | .github/workflows/cd.yml |
gha::ci |
cicd | healthy | .github/workflows/ci.yml |
| Label | Layer | Status | Path |
|---|---|---|---|
deploy |
cicd | healthy | .github/workflows/cd.yml |
test |
cicd | healthy | .github/workflows/ci.yml |
| Label | Layer | Status | Path |
|---|---|---|---|
repobility-clone-sox10p5s |
software | healthy | /tmp/repobility-clone-sox10p5s |
| Label | Layer | Status | Path |
|---|---|---|---|
ingress::helm-chart/templates/ingress.yaml |
network | healthy | helm-chart/templates/ingress.yaml |
This page is publicly accessible at:
https://repobility.com/scan/72e4dbc6-fe29-4402-b534-7a8611204b36/
To check status programmatically (no auth required):
curl -s https://repobility.com/api/v1/public/scan/72e4dbc6-fe29-4402-b534-7a8611204b36/
Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.