https://github.com/apache/camel
· scanned 2026-06-05 13:39 UTC (5 days, 6 hours ago)
· 10 languages
1353 raw signals (129 security + 1224 graph) 11/13 scanners ran 91st percentile · Java · huge (>500K LoC) System graph score 72 (higher by 10)
Last scanned 5 days, 6 hours ago · v2 · 546 actionable findings from 2 signal sources. 195 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.
| Component | Sub-score | Weight | Contribution |
|---|---|---|---|
structure_score |
60.0 | 0.15 | 9.00 |
security_score |
100.0 | 0.25 | 25.00 |
testing_score |
85.0 | 0.20 | 17.00 |
documentation_score |
80.0 | 0.15 | 12.00 |
practices_score |
79.0 | 0.15 | 11.85 |
code_quality |
75.0 | 0.10 | 7.50 |
| Overall | 1.00 | 82.3 |
Showing 357 of 546 actionable findings. 741 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.
components/camel-ftp/src/main/java/org/apache/camel/component/file/remote/SftpOperations.java:303
Private key in repo
components/camel-pqc/src/main/java/org/apache/camel/component/pqc/lifecycle/KeyFormatConverter.java:146
Private key in repo
components/camel-amqp/src/main/java/org/apache/camel/component/amqp/AMQPComponent.java:121, 124 (2 hits)components/camel-crypto-pgp/src/main/java/org/apache/camel/converter/crypto/PGPDataFormat.java:43, 46 (2 hits)components/camel-crypto/src/main/java/org/apache/camel/component/crypto/DigitalSignatureConstants.java:36
components/camel-docker/src/main/java/org/apache/camel/component/docker/DockerConstants.java:92
components/camel-huawei/camel-huaweicloud-dms/src/main/java/org/apache/camel/component/huaweicloud/dms/constants/DMSProperties.java:32, 39 (2 hits)components/camel-ibm/camel-ibm-secrets-manager/src/main/java/org/apache/camel/component/ibm/secrets/manager/vault/IBMEventStreamReloadTriggerTask.java:146
components/camel-jetty-common/src/main/java/org/apache/camel/component/jetty/JettyHttpComponent.java:98, 99 (2 hits)components/camel-keycloak/src/main/java/org/apache/camel/component/keycloak/KeycloakConstants.java:66
components/camel-keycloak/src/main/java/org/apache/camel/component/keycloak/KeycloakProducer.java:72
components/camel-kubernetes/src/main/java/org/apache/camel/component/kubernetes/KubernetesConfiguration.java:501
components/camel-openstack/src/main/java/org/apache/camel/component/openstack/keystone/KeystoneConstants.java:38
components/camel-openstack/src/main/java/org/apache/camel/component/openstack/nova/NovaConstants.java:44
components/camel-salesforce/camel-salesforce-component/src/main/java/org/apache/camel/component/salesforce/SalesforceComponent.java:80
components/camel-sap-netweaver/src/main/java/org/apache/camel/component/sap/netweaver/NetWeaverProducer.java:81
components/camel-shiro/src/main/java/org/apache/camel/component/shiro/security/ShiroSecurityConstants.java:26
components/camel-smpp/src/main/java/org/apache/camel/component/smpp/SmppConfiguration.java:762, 795 (2 hits)components/camel-smpp/src/main/java/org/apache/camel/component/smpp/SmppConstants.java:237
components/camel-spring-parent/camel-spring-ldap/src/main/java/org/apache/camel/component/springldap/SpringLdapProducer.java:41
components/camel-zookeeper-master/src/main/java/org/apache/camel/component/zookeepermaster/ZookeeperGroupSupport.java:45
core/camel-api/src/main/java/org/apache/camel/support/jsse/KeyManagersParameters.java:158
core/camel-api/src/main/java/org/apache/camel/support/jsse/KeyStoreParameters.java:206
core/camel-core-model/src/main/java/org/apache/camel/model/app/SSLContextParametersDefinition.java:52, 53 (2 hits)core/camel-main/src/main/java/org/apache/camel/main/BaseMainSupport.java:2270
dsl/camel-jbang/camel-jbang-mcp/src/main/java/org/apache/camel/dsl/jbang/core/commands/mcp/HardenTools.java:237 (2 hits).github/actions/check-container-upgrade/check-container-versions.py:215, 228, 241, 320, 358, 399, 430, 464, +8 more (24 hits)dsl/camel-jbang/camel-jbang-container/Dockerfile:17dsl/camel-jbang/camel-jbang-core/src/main/resources/quarkus-docker/Dockerfile.jvm:35dsl/camel-jbang/camel-jbang-core/src/main/resources/quarkus-docker/Dockerfile.native:36dsl/camel-jbang/camel-jbang-core/src/main/resources/quarkus-docker/Dockerfile.native-micro:39test-infra/camel-test-infra-hivemq/src/main/resources/org/apache/camel/test/infra/hivemq/services/Dockerfile:19test-infra/camel-test-infra-smb/src/main/resources/org/apache/camel/test/infra/smb/services/Dockerfile:17.mvn/wrapper/maven-wrapper.jar:1
dsl/camel-jbang/camel-jbang-core/src/main/resources/maven-wrapper/maven-wrapper.jar:1
catalog/camel-route-parser/src/main/java/org/apache/camel/parser/helper/XmlLineNumberParser.java:107components/camel-cm-sms/src/main/java/org/apache/camel/component/cm/CMSenderOneMessageImpl.java:91components/camel-flatpack/src/main/java/org/apache/camel/component/flatpack/FlatpackConverter.java:76components/camel-google/camel-google-mail/src/main/java/org/apache/camel/component/google/mail/transform/GoogleMailDraftDataTypeTransformer.java:96
components/camel-ftp/src/main/java/org/apache/camel/component/file/remote/SftpComponent.java:43
.github/workflows/sonar-scan.yml:60, 107, 127, 157 (8 hits).github/workflows/check-container-versions.yml:46, 51, 370 (6 hits).github/workflows/pr-commenter.yml:40, 63, 72 (6 hits).github/workflows/security-scan.yml:35, 39, 47 (6 hits).github/workflows/pr-labeler.yml:40, 63 (4 hits).github/workflows/pr-id.yml:36 (2 hits)components/camel-javascript/src/main/java/org/apache/camel/language/js/JavaScriptExpression.java:62
Eval used
components/camel-javascript/src/main/java/org/apache/camel/language/js/JavaScriptLanguage.java:53
Eval used
components/camel-master/src/main/java/org/apache/camel/component/master/MasterConsumer.java:182
Eval used
components/camel-python/src/main/java/org/apache/camel/language/python/PythonExpression.java:59
Eval used
components/camel-python/src/main/java/org/apache/camel/language/python/PythonLanguage.java:82
Eval used
components/camel-smooks/src/main/java/org/apache/camel/component/smooks/routing/BeanRouterObserver.java:82
Eval used
components/camel-sql/src/main/java/org/apache/camel/component/sql/stored/CallableStatementWrapper.java:116
Eval used
core/camel-base-engine/src/main/java/org/apache/camel/impl/engine/DefaultRoute.java:711
Eval used
core/camel-core-languages/src/main/java/org/apache/camel/language/simple/SimpleExpressionParser.java:202
Eval used
core/camel-support/src/main/java/org/apache/camel/support/builder/ExpressionBuilder.java:2310
Eval used
core/camel-support/src/main/java/org/apache/camel/support/resume/AdapterHelper.java:40
Eval used
tooling/maven/camel-package-maven-plugin/src/main/java/org/apache/camel/maven/packaging/PrepareCamelJBangCommandsDocMojo.java:123
Eval used
tooling/maven/camel-package-maven-plugin/src/main/java/org/apache/camel/maven/packaging/PrepareCamelJBangDocMojo.java:120
Eval used
tooling/maven/camel-package-maven-plugin/src/main/java/org/apache/camel/maven/packaging/PrepareCamelMainDocMojo.java:119
Eval used
tooling/maven/camel-package-maven-plugin/src/main/java/org/apache/camel/maven/packaging/UpdateReadmeMojo.java:915
Eval used
components/camel-spring-parent/camel-spring-redis/src/main/java/org/apache/camel/component/redis/RedisClient.java:188
Exec used
components/camel-ocsf/src/main/script/generate-ocsf-schemas.py:442, 504, 586, 667 (4 hits).github/actions/check-container-upgrade/check-container-versions.py:823, 917, 1173 (3 hits).dockerignore
CI/CD securitycontainers
.dockerignore
CI/CD securitycontainers
.github/workflows/check-container-versions.yml.github/workflows/generate-sbom-main.yml.github/workflows/pr-cleanup-branches.yml.github/workflows/pr-update-branch.ymlcomponents/camel-as2/camel-as2-api/src/main/java/org/apache/camel/component/as2/api/AS2MicAlgorithm.java:33
Weak hash
components/camel-as2/camel-as2-api/src/main/java/org/apache/camel/component/as2/api/AS2SignatureAlgorithm.java:85
Weak hash
components/camel-as2/camel-as2-api/src/main/java/org/apache/camel/component/as2/api/AS2SignedDataGenerator.java:41
Weak hash
components/camel-aws/camel-aws2-s3/src/main/java/org/apache/camel/component/aws2/s3/AWS2S3Constants.java:64
Weak hash
components/camel-aws/camel-aws2-sqs/src/main/java/org/apache/camel/component/aws2/sqs/Sqs2Constants.java:33
Weak hash
components/camel-azure/camel-azure-storage-blob/src/main/java/org/apache/camel/component/azure/storage/blob/BlobConstants.java:42
Weak hash
components/camel-azure/camel-azure-storage-datalake/src/main/java/org/apache/camel/component/azure/storage/datalake/DataLakeConstants.java:86
Weak hash
components/camel-crypto-pgp/src/main/java/org/apache/camel/converter/crypto/PGPKeyAccessDataFormat.java:156
Weak hash
components/camel-file/src/main/java/org/apache/camel/component/file/GenericFileEndpoint.java:171
Weak hash
components/camel-huawei/camel-huaweicloud-obs/src/main/java/org/apache/camel/component/huaweicloud/obs/constants/OBSHeaders.java:32
Weak hash
components/camel-ibm/camel-ibm-cos/src/main/java/org/apache/camel/component/ibm/cos/IBMCOSConstants.java:45
Weak hash
components/camel-snmp/src/main/java/org/apache/camel/component/snmp/SnmpAuthProtocolType.java:20
Weak hash
components/camel-snmp/src/main/java/org/apache/camel/component/snmp/SnmpEndpoint.java:79
Weak hash
components/camel-snmp/src/main/java/org/apache/camel/component/snmp/SnmpHelper.java:151
Weak hash
components/camel-xmlsecurity/src/main/java/org/apache/camel/component/xmlsecurity/api/XAdESSignatureProperties.java:1165
Weak hash
components/camel-xmlsecurity/src/main/java/org/apache/camel/component/xmlsecurity/processor/XmlSignerProcessor.java:177
Weak hash
core/camel-api/src/main/java/org/apache/camel/support/jsse/BaseSSLContextParameters.java:65
Weak hash
core/camel-core-model/src/main/java/org/apache/camel/model/dataformat/XMLSecurityDataFormat.java:74
Weak hash
catalog/camel-route-parser/src/main/java/org/apache/camel/parser/model/RestVerbDetails.java:22, 29, 46, 69, 81 (5 hits)catalog/camel-route-parser/src/main/java/org/apache/camel/parser/model/RestServiceDetails.java:23, 30, 47, 82 (4 hits)catalog/camel-route-parser/src/main/java/org/apache/camel/parser/model/RestConfigurationDetails.java:37, 38, 62 (3 hits)catalog/camel-report-maven-plugin/src/main/java/org/apache/camel/maven/htmlxlsx/model/EipAttribute.java:23, 31 (2 hits)catalog/camel-route-parser/src/main/java/org/apache/camel/parser/helper/CamelJavaTreeParserHelper.java:198, 214 (2 hits)catalog/camel-route-parser/src/main/java/org/apache/camel/parser/model/CamelNodeDetails.java:74, 98 (2 hits)catalog/camel-route-parser/src/main/java/org/apache/camel/parser/model/CamelRouteDetails.java:10, 28 (2 hits)catalog/camel-route-parser/src/main/java/org/apache/camel/parser/model/LanguageExpressionDetails.java:12, 42 (2 hits)coverage:1
dsl/camel-jbang/camel-jbang-container/Dockerfile:17
containersPinned dependencies
components/camel-ai/camel-huggingface/src/main/resources/org/apache/camel/component/huggingface/tasks/automatic_speech_recognition.py:26components/camel-ai/camel-huggingface/src/main/resources/org/apache/camel/component/huggingface/tasks/question_answering.py:26components/camel-ai/camel-huggingface/src/main/resources/org/apache/camel/component/huggingface/tasks/sentence_embeddings.py:26components/camel-ai/camel-huggingface/src/main/resources/org/apache/camel/component/huggingface/tasks/text_to_image.py:27components/camel-ai/camel-huggingface/src/main/resources/org/apache/camel/component/huggingface/tasks/text_to_speech.py:27.github/actions/check-container-upgrade/check-container-versions.py:292
components/camel-ocsf/src/main/script/generate-ocsf-schemas.py:195
.github/actions/check-container-upgrade/check-container-versions.py:888
Showing first 300 of 357. Refine filters or use the findings page for deep search.
This page is publicly accessible at:
https://repobility.com/scan/7e4234ad-4abb-4259-8494-dff56e34ed2c/
To check status programmatically (no auth required):
curl -s https://repobility.com/api/v1/public/scan/7e4234ad-4abb-4259-8494-dff56e34ed2c/
Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.