Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

ToolWarden/toolwarden-gateway

https://github.com/ToolWarden/toolwarden-gateway · scanned 2026-06-16 00:40 UTC (2 months, 1 week ago)

20 raw signals (0 security + 20 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 1 week ago · v1 · 20 actionable findings from 1 signal source. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
85.3
/100
Security checks
85
0 findings
System graph
85
77.8% cov · 20 findings
Critical
0
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 0 High 0 Medium 5 Low 13 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 20 Crowd 0 Layer: Frontend 7 Hardware 3 Security 2 Cicd 1 Quality 7

All 146 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

LabelLayerStatusPath
check software healthy test/smoke.ts:check
approver software healthy test/approvals.test.ts:approver
policy software healthy test/policy.test.ts:policy
ctx software healthy test/policy.test.ts:ctx
chain software healthy test/sync.test.ts:chain
body software healthy test/receipts.test.ts:body
receipt software healthy test/sink.test.ts:receipt
body software healthy test/sink.test.ts:body
batch software healthy test/sink.test.ts:batch
check software healthy test/smoke-http.ts:check
connect software healthy test/smoke-http.ts:connect
fakeCollector software healthy test/sdk.test.ts:fakeCollector
fetchImpl software healthy test/sdk.test.ts:fetchImpl
json software healthy test/sdk.test.ts:json
client software healthy test/sdk.test.ts:client
signedPolicy software healthy test/policy-source.test.ts:signedPolicy
source software healthy test/policy-source.test.ts:source
expandHome software healthy src/config.ts:expandHome
expandEnv software healthy src/config.ts:expandEnv
loadConfig software healthy src/config.ts:loadConfig
hashPayload software healthy src/receipts.ts:hashPayload
newReceiptId software healthy src/receipts.ts:newReceiptId
receiptHash software healthy src/receipts.ts:receiptHash
verifyChain software healthy src/receipts.ts:verifyChain
readReceipts software healthy src/receipts.ts:readReceipts
report software healthy src/doctor.ts:report
timed software healthy src/doctor.ts:timed
runDoctor software healthy src/doctor.ts:runDoctor
body software healthy src/doctor.ts:body
created software healthy src/approvals.ts:created
findMcpConfig software healthy src/init.ts:findMcpConfig
generateConfig software healthy src/init.ts:generateConfig
args software healthy src/init.ts:args
runInit software healthy src/init.ts:runInit
policyPayload software healthy src/policy-source.ts:policyPayload
sha256Hex software healthy src/policy-source.ts:sha256Hex
schedule software healthy src/policy-source.ts:schedule
body software healthy src/policy-source.ts:body
esc software healthy src/report.ts:esc
money software healthy src/report.ts:money
buildReport software healthy src/report.ts:buildReport
badge software healthy src/report.ts:badge
body software healthy src/sink.ts:body
usage software healthy src/cli.ts:usage
watchPolicy software healthy src/cli.ts:watchPolicy
flag software healthy src/cli.ts:flag
runGateway software healthy src/cli.ts:runGateway
shutdown software healthy src/cli.ts:shutdown
runServe software healthy src/cli.ts:runServe
receiptsFile software healthy src/cli.ts:receiptsFile

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
README.md software healthy README.md
pnpm-lock.yaml software healthy pnpm-lock.yaml
package.json software healthy package.json
Dockerfile software healthy Dockerfile
pnpm-workspace.yaml software healthy pnpm-workspace.yaml
tsconfig.json software healthy tsconfig.json
CHANGELOG.md software healthy CHANGELOG.md
smoke.ts software healthy test/smoke.ts
approvals.test.ts software healthy test/approvals.test.ts
policy.test.ts software healthy test/policy.test.ts
sync.test.ts software healthy test/sync.test.ts
receipts.test.ts software healthy test/receipts.test.ts
sink.test.ts software healthy test/sink.test.ts
smoke-http.ts software healthy test/smoke-http.ts
sdk.test.ts software healthy test/sdk.test.ts
policy-source.test.ts software healthy test/policy-source.test.ts
http-api.md software healthy docs/http-api.md
policy-reference.md software healthy docs/policy-reference.md
approvals-and-grants.md software healthy docs/approvals-and-grants.md
quickstart.md software healthy docs/quickstart.md
security-model.md software healthy docs/security-model.md
audit-verifier.html software healthy docs/audit-verifier.html
toolwarden.yaml software healthy examples/toolwarden.yaml
govern-free-tools.yaml software healthy examples/govern-free-tools.yaml
demo-server.ts software healthy examples/demo-server.ts
docker.yml software healthy .github/workflows/docker.yml
ci.yml software healthy .github/workflows/ci.yml
config.ts software healthy src/config.ts
receipts.ts software healthy src/receipts.ts
doctor.ts software healthy src/doctor.ts
approvals.ts software healthy src/approvals.ts
init.ts software healthy src/init.ts
policy-source.ts software healthy src/policy-source.ts
report.ts software healthy src/report.ts
index.ts software healthy src/index.ts
sink.ts software healthy src/sink.ts
cli.ts software healthy src/cli.ts
state.ts software healthy src/state.ts
policy.ts software healthy src/policy.ts
sync.ts software healthy src/sync.ts
glob.ts software healthy src/glob.ts
gateway.ts software healthy src/gateway.ts
serve.ts software healthy src/serve.ts
README.md software healthy sdk/README.md
package.json software healthy sdk/package.json
tsconfig.json software healthy sdk/tsconfig.json
index.ts software healthy sdk/src/index.ts

LabelLayerStatusPath
test software healthy test
docs software healthy docs
examples software healthy examples
.github software healthy .github
workflows software healthy .github/workflows
src software healthy src
sdk software healthy sdk
src software healthy sdk/src

LabelLayerStatusPath
ReceiptLog software healthy src/receipts.ts:ReceiptLog
CloudApprover software healthy src/approvals.ts:CloudApprover
PolicySource software healthy src/policy-source.ts:PolicySource
HeadConflictError software healthy src/sink.ts:HeadConflictError
ReceiptSink software healthy src/sink.ts:ReceiptSink
SpendState software healthy src/state.ts:SpendState
GatewayCore software healthy src/gateway.ts:GatewayCore
ToolWarden software healthy sdk/src/index.ts:ToolWarden

LabelLayerStatusPath
port:8484 network healthy README.md
port:8499 network healthy test/smoke-http.ts

LabelLayerStatusPath
gha::docker cicd healthy .github/workflows/docker.yml
gha::ci cicd healthy .github/workflows/ci.yml

LabelLayerStatusPath
publish cicd healthy .github/workflows/docker.yml
test cicd healthy .github/workflows/ci.yml

LabelLayerStatusPath
repobility-clone-0uhcq056 software healthy /tmp/repobility-clone-0uhcq056

LabelLayerStatusPath
127.0.0.1 network healthy test/approvals.test.ts

LabelLayerStatusPath
image::Dockerfile hardware healthy Dockerfile

LabelLayerStatusPath
GITHUB_TOKEN cicd healthy —
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/788ed33a-47cb-4d73-bdfe-8c8c8ecc8304/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/788ed33a-47cb-4d73-bdfe-8c8c8ecc8304/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.