jesseduffield/lazygit

Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

38 of your 118 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 5.89s · analysis 11.53s · 5.3 MB · GitHub API rate-limit (preflight)

https://github.com/jesseduffield/lazygit · scanned 2026-06-05 07:31 UTC (5 days, 22 hours ago) · 10 languages

184 raw signals (110 security + 74 graph) 42nd percentile · Go · large (100-500K LoC) System graph score 59 (higher by 13)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 5 days, 22 hours ago · v2 · 82 actionable findings from 2 signal sources. 65 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

77.8% cov · 15 findings

Score breakdown â 2026-05-18-v5

Component	Sub-score	Weight	Contribution
`structure_score`	85.0	0.15	12.75
`security_score`	30.0	0.25	7.50
`testing_score`	85.0	0.20	17.00
`documentation_score`	79.0	0.15	11.85
`practices_score`	100.0	0.15	15.00
`code_quality`	75.5	0.10	7.55
Overall		1.00	71.6

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 1 High 48 Medium 5 Low 14 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 67 System graph 15 Crowd 0 Layer: Cicd 6 Quality 21 Software 46 Api 1 Hardware 6 Frontend 1 Security 1

Exclude dismissed / FP Exclude test files

All 1234 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`.golangci.yml`	software	healthy	`.golangci.yml`
`README.md`	software	healthy	`README.md`
`CLAUDE.md`	software	healthy	`CLAUDE.md`
`CONTRIBUTING.md`	software	healthy	`CONTRIBUTING.md`
`Dockerfile`	software	healthy	`Dockerfile`
`main.go`	software	healthy	`main.go`
`CODE-OF-CONDUCT.md`	software	healthy	`CODE-OF-CONDUCT.md`
`.goreleaser.yml`	software	healthy	`.goreleaser.yml`
`go.mod`	software	healthy	`go.mod`
`Makefile`	software	healthy	`Makefile`
`VISION.md`	software	healthy	`VISION.md`
`AGENTS.md`	software	healthy	`AGENTS.md`
`record_demo.sh`	software	healthy	`demo/record_demo.sh`
`README.md`	software	healthy	`demo/README.md`
`config.yml`	software	healthy	`demo/config.yml`
`devcontainer.json`	software	healthy	`.devcontainer/devcontainer.json`
`Dockerfile`	software	healthy	`.devcontainer/Dockerfile`
`config.json`	software	healthy	`schema-master/config.json`
`README.md`	software	healthy	`test/README.md`
`config.yml`	software	healthy	`test/default_test_config/config.yml`
`README.md`	software	healthy	`docs/README.md`
`Custom_Command_Keybindings.md`	software	healthy	`docs/Custom_Command_Keybindings.md`
`Undoing.md`	software	healthy	`docs/Undoing.md`
`Range_Select.md`	software	healthy	`docs/Range_Select.md`
`Searching.md`	software	healthy	`docs/Searching.md`
`Config.md`	software	healthy	`docs/Config.md`
`Fixup_Commits.md`	software	healthy	`docs/Fixup_Commits.md`
`Custom_Pagers.md`	software	healthy	`docs/Custom_Pagers.md`
`Stacked_Branches.md`	software	healthy	`docs/Stacked_Branches.md`
`Keybindings_ja.md`	software	healthy	`docs/keybindings/Keybindings_ja.md`
`Keybindings_nl.md`	software	healthy	`docs/keybindings/Keybindings_nl.md`
`Custom_Keybindings.md`	software	healthy	`docs/keybindings/Custom_Keybindings.md`
`Keybindings_pl.md`	software	healthy	`docs/keybindings/Keybindings_pl.md`
`Keybindings_ru.md`	software	healthy	`docs/keybindings/Keybindings_ru.md`
`Keybindings_zh-TW.md`	software	healthy	`docs/keybindings/Keybindings_zh-TW.md`
`Keybindings_zh-CN.md`	software	healthy	`docs/keybindings/Keybindings_zh-CN.md`
`Keybindings_en.md`	software	healthy	`docs/keybindings/Keybindings_en.md`
`Keybindings_ko.md`	software	healthy	`docs/keybindings/Keybindings_ko.md`
`Keybindings_pt.md`	software	healthy	`docs/keybindings/Keybindings_pt.md`
`Profiling.md`	software	healthy	`docs/dev/Profiling.md`
`Find_Base_Commit_For_Fixup_Design.md`	software	healthy	`docs/dev/Find_Base_Commit_For_Fixup_Design.md`
`README.md`	software	healthy	`docs/dev/README.md`
`Codebase_Guide.md`	software	healthy	`docs/dev/Codebase_Guide.md`
`Integration_Tests.md`	software	healthy	`docs/dev/Integration_Tests.md`
`Busy.md`	software	healthy	`docs/dev/Busy.md`
`Demo_Recordings.md`	software	healthy	`docs/dev/Demo_Recordings.md`
`run_integration_tests.sh`	software	healthy	`scripts/run_integration_tests.sh`
`record_demo.sh`	software	healthy	`scripts/record_demo.sh`
`bisect.sh`	software	healthy	`scripts/bisect.sh`
`update_language_files.sh`	software	healthy	`scripts/update_language_files.sh`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`demo`	software	healthy	`demo`
`.devcontainer`	software	healthy	`.devcontainer`
`schema-master`	software	healthy	`schema-master`
`test`	software	healthy	`test`
`default_test_config`	software	healthy	`test/default_test_config`
`docs`	software	healthy	`docs`
`keybindings`	software	healthy	`docs/keybindings`
`dev`	software	healthy	`docs/dev`
`scripts`	software	healthy	`scripts`
`cmd`	software	healthy	`cmd`
`i18n`	software	healthy	`cmd/i18n`
`integration_test`	software	healthy	`cmd/integration_test`
`docs-master`	software	healthy	`docs-master`
`keybindings`	software	healthy	`docs-master/keybindings`
`dev`	software	healthy	`docs-master/dev`
`schema`	software	healthy	`schema`
`.github`	software	healthy	`.github`
`ISSUE_TEMPLATE`	software	healthy	`.github/ISSUE_TEMPLATE`
`workflows`	software	healthy	`.github/workflows`
`pkg`	software	healthy	`pkg`
`integration`	software	healthy	`pkg/integration`
`types`	software	healthy	`pkg/integration/types`
`tests`	software	healthy	`pkg/integration/tests`
`stash`	software	healthy	`pkg/integration/tests/stash`
`demo`	software	healthy	`pkg/integration/tests/demo`
`undo`	software	healthy	`pkg/integration/tests/undo`
`filter_by_path`	software	healthy	`pkg/integration/tests/filter_by_path`
`sync`	software	healthy	`pkg/integration/tests/sync`
`config`	software	healthy	`pkg/integration/tests/config`
`shell_commands`	software	healthy	`pkg/integration/tests/shell_commands`
`custom_commands`	software	healthy	`pkg/integration/tests/custom_commands`
`shared`	software	healthy	`pkg/integration/tests/shared`
`ui`	software	healthy	`pkg/integration/tests/ui`
`filter_by_author`	software	healthy	`pkg/integration/tests/filter_by_author`
`remote`	software	healthy	`pkg/integration/tests/remote`
`filter_and_search`	software	healthy	`pkg/integration/tests/filter_and_search`
`commit`	software	healthy	`pkg/integration/tests/commit`
`file`	software	healthy	`pkg/integration/tests/file`
`bisect`	software	healthy	`pkg/integration/tests/bisect`
`conflicts`	software	healthy	`pkg/integration/tests/conflicts`
`staging`	software	healthy	`pkg/integration/tests/staging`
`status`	software	healthy	`pkg/integration/tests/status`
`worktree`	software	healthy	`pkg/integration/tests/worktree`
`tag`	software	healthy	`pkg/integration/tests/tag`
`reflog`	software	healthy	`pkg/integration/tests/reflog`
`cherry_pick`	software	healthy	`pkg/integration/tests/cherry_pick`
`submodule`	software	healthy	`pkg/integration/tests/submodule`
`diff`	software	healthy	`pkg/integration/tests/diff`
`misc`	software	healthy	`pkg/integration/tests/misc`
`interactive_rebase`	software	healthy	`pkg/integration/tests/interactive_rebase`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`check-required-label`	cicd	healthy	`.github/workflows/check-required-label.yml`
`deploy`	cicd	healthy	`.github/workflows/sponsors.yml`
`codespell`	cicd	healthy	`.github/workflows/codespell.yml`
`unit-tests`	cicd	healthy	`.github/workflows/ci.yml`
`integration-tests`	cicd	healthy	`.github/workflows/ci.yml`
`build`	cicd	healthy	`.github/workflows/ci.yml`
`check-codebase`	cicd	healthy	`.github/workflows/ci.yml`
`lint`	cicd	healthy	`.github/workflows/ci.yml`
`upload-coverage`	cicd	healthy	`.github/workflows/ci.yml`
`check-for-fixups`	cicd	healthy	`.github/workflows/ci.yml`
`close_issue`	cicd	healthy	`.github/workflows/close-issues.yml`
`check-and-release`	cicd	healthy	`.github/workflows/release.yml`

Label	Layer	Status	Path
`gha::check-required-label`	cicd	healthy	`.github/workflows/check-required-label.yml`
`gha::sponsors`	cicd	healthy	`.github/workflows/sponsors.yml`
`gha::codespell`	cicd	healthy	`.github/workflows/codespell.yml`
`gha::ci`	cicd	healthy	`.github/workflows/ci.yml`
`gha::close-issues`	cicd	healthy	`.github/workflows/close-issues.yml`
`gha::release`	cicd	healthy	`.github/workflows/release.yml`

Label	Layer	Status	Path
`PR_FETCH_DEPTH`	cicd	healthy	`—`
`SPONSORS_TOKEN`	cicd	healthy	`—`
`SPONSORS_PR_TOKEN`	cicd	healthy	`—`
`CODACY_PROJECT_TOKEN`	cicd	healthy	`—`
`LAZYGIT_RELEASE_PAT`	cicd	healthy	`—`

Label	Layer	Status	Path
`password_literal::pkg/i18n/english.go`	security	healthy	`pkg/i18n/english.go`
`password_literal::pkg/commands/oscommands/cmd_obj_runner_te…`	security	healthy	`pkg/commands/oscommands/cmd_obj_runner_test.go`
`password_literal::pkg/commands/oscommands/cmd_obj_runner_te…`	security	healthy	`pkg/commands/oscommands/cmd_obj_runner_test.go`

Label	Layer	Status	Path
`image::Dockerfile`	hardware	healthy	`Dockerfile`
`image::.devcontainer/Dockerfile`	hardware	healthy	`.devcontainer/Dockerfile`

Label	Layer	Status	Path
`repobility-clone-c28g5ftl`	software	healthy	`/tmp/repobility-clone-c28g5ftl`

Label	Layer	Status	Path
`auth::pkg/integration/components/random.go`	security	healthy	`pkg/integration/components/random.go`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/7ad5c8a3-1176-48c4-89aa-016084d8a17d/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/7ad5c8a3-1176-48c4-89aa-016084d8a17d/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

jesseduffield/lazygit

Complete repo analysis

file 50+

directory 50+

job 12

pipeline 6

env_var 5

secret 3

container 2

repo 1

auth 1