Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

alibaba/open-code-review

https://github.com/alibaba/open-code-review · scanned 2026-07-23 19:36 UTC (4 days, 21 hours ago)

56 raw signals (0 security + 56 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 4 days, 21 hours ago · v3 · last Δ +0.3 (diff) · 53 actionable findings from 1 signal source. 3 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
57.1
/100
Security checks
57
0 findings
System graph
57
70.0% cov · 53 findings
Critical
0
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 0 High 0 Medium 30 Low 19 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 53 Crowd 0 Layer: Software 1 Frontend 2 Security 16 Quality 16 Cicd 5 Dependencies 13

Last 3 scans of this repo. Each new scan persists a full payload — historical comparison is exact, not lossy.

v1
Jul 23 10:55
v2
Jul 23 18:40
v3
Jul 23 19:36
Diff: previous → latest scan
Score Δ
0.30
Gaps added
4
Gaps resolved
9
Edges changed
+0 / -0
New gaps in latest scan:
  • Debug logging residue appears in source files low
  • Placeholder or mock-heavy implementation detected medium
  • Critical user flow still appears backed by mock or placeholder data medium
  • Agent instructions exist but release-hardening basics are missing medium
Gaps resolved since last scan:
  • Possible secret in cmd/opencodereview/provider_tui_test.go
  • Debug logging residue appears in source files
  • Placeholder or mock-heavy implementation detected
  • Critical user flow still appears backed by mock or placeholder data
  • Agent instructions exist but release-hardening basics are missing
v#IDStatusScoreGapsNodesCommitStarted
v scan_task_8aff78186484d566ef0d70c42b25b89f ok 57.1 56 1186 3355bae Jul 23 19:36
v scan_task_eb62046a1f91b3079f709c398bc446e4 ok 56.8 61 1186 3355bae Jul 23 18:40
v scan_task_f480d65304282a08ef1f80427eeb8005 ok 53.0 70 1186 6f4e875 Jul 23 10:55
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/7a95775b-2115-4cb8-8ad8-5f2b7f7a74f6/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/7a95775b-2115-4cb8-8ad8-5f2b7f7a74f6/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.