Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo
25 of your 92 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 1.84s · analysis 27.25s · 1.6 MB · GitHub API rate-limit (preflight)

coder/code-server

https://github.com/coder/code-server · scanned 2026-06-05 07:33 UTC (5 days, 22 hours ago) · 10 languages

274 raw signals (82 security + 192 graph) 57th percentile · Typescript · small (2-20K LoC) System graph score 55 (higher by 15)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 5 days, 22 hours ago · v2 · 154 actionable findings from 2 signal sources. 24 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
63.7
/100
Security checks
72
58 findings
System graph
55
88.9% cov · 96 findings
Critical
5
click to filter
Agents
6
0 votes
Crowd
0
reported
Score breakdown â 2026-05-18-v5
Component Sub-score Weight Contribution
structure_score 100.0 0.15 15.00
security_score 47.5 0.25 11.88
testing_score 90.0 0.20 18.00
documentation_score 33.6 0.15 5.04
practices_score 89.0 0.15 13.35
code_quality 66.0 0.10 6.60
Overall 1.00 69.9
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 5 High 19 Medium 27 Low 70 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 58 System graph 96 Crowd 0 Layer: Quality 29 Security 11 Software 70 Cicd 5 Frontend 14 Api 25

All 505 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

LabelLayerStatusPath
fs software healthy test/unit/node/i18n.test.ts:fs
settings software healthy test/unit/node/update.test.ts:settings
provider software healthy test/unit/node/update.test.ts:provider
calls software healthy test/unit/node/constants.test.ts:calls
mockIsActive software healthy test/unit/node/heart.test.ts:mockIsActive
onError software healthy test/unit/node/socket.test.ts:onError
resolve software healthy test/unit/node/socket.test.ts:resolve
dataFromServerToClient software healthy test/unit/node/socket.test.ts:dataFromServerToClient
dataFromClientToServer software healthy test/unit/node/socket.test.ts:dataFromClientToServer
dataFromClientToProxy software healthy test/unit/node/socket.test.ts:dataFromClientToProxy
masterBall software healthy test/unit/node/app.test.ts:masterBall
codeServer software healthy test/unit/node/routes/login.test.ts:codeServer
codeServer software healthy test/unit/node/routes/static.test.ts:codeServer
commonTests software healthy test/unit/node/routes/static.test.ts:commonTests
createRequest software healthy test/unit/node/routes/errors.test.ts:createRequest
called software healthy test/unit/common/emitter.test.ts:called
onHelloWorld software healthy test/unit/common/emitter.test.ts:onHelloWorld
onGoodbyeWorld software healthy test/unit/common/emitter.test.ts:onGoodbyeWorld
for software healthy test/utils/runCodeServerCommand.ts:for
runCodeServerCommand software healthy test/utils/runCodeServerCommand.ts:runCodeServerCommand
mockLogger software healthy test/utils/helpers.ts:mockLogger
clean software healthy test/utils/helpers.ts:clean
tmpdir software healthy test/utils/helpers.ts:tmpdir
to software healthy test/utils/helpers.ts:to
useEnv software healthy test/utils/helpers.ts:useEnv
setValue software healthy test/utils/helpers.ts:setValue
resetValue software healthy test/utils/helpers.ts:resetValue
getAvailablePort software healthy test/utils/helpers.ts:getAvailablePort
idleTimer software healthy test/utils/helpers.ts:idleTimer
start software healthy test/utils/helpers.ts:start
getMaybeProxiedCodeServer software healthy test/utils/helpers.ts:getMaybeProxiedCodeServer
getMaybeProxiedPathname software healthy test/utils/helpers.ts:getMaybeProxiedPathname
listenOn software healthy test/utils/helpers.ts:listenOn
close software healthy test/utils/helpers.ts:close
setup software healthy test/utils/integration.ts:setup
write software healthy test/utils/wtfnode.ts:write
setup software healthy test/utils/wtfnode.ts:setup
wtfnodeDump software healthy test/utils/wtfnode.ts:wtfnodeDump
describe software healthy test/e2e/baseFixture.ts:describe
runTestExtensionTests software healthy test/e2e/extensions.test.ts:runTestExtensionTests
proc software healthy test/e2e/models/CodeServer.ts:proc
doFocus software healthy test/e2e/models/CodeServer.ts:doFocus
that software healthy test/e2e/models/CodeServer.ts:that
openThenWaitClose software healthy test/e2e/models/CodeServer.ts:openThenWaitClose
navigate software healthy test/e2e/models/CodeServer.ts:navigate
activate software healthy test/e2e/extensions/test-extension/extension.ts:activate
main software healthy ci/dev/watch.ts:main
createServer software healthy typings/httpolyglot/index.d.ts:createServer
makeEditorSessionManagerServer software healthy src/node/vscodeSocket.ts:makeEditorSessionManagerServer
checkMatch software healthy src/node/vscodeSocket.ts:checkMatch

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
renovate.json software healthy renovate.json
install.sh software healthy install.sh
package.json software healthy package.json
package-lock.json software healthy package-lock.json
.prettierrc.yaml software healthy .prettierrc.yaml
tsconfig.json software healthy tsconfig.json
CHANGELOG.md software healthy CHANGELOG.md
playwright.config.ts software warning test/playwright.config.ts
package.json software healthy test/package.json
package-lock.json software healthy test/package-lock.json
tsconfig.json software healthy test/tsconfig.json
installExtension.test.ts software warning test/integration/installExtension.test.ts
help.test.ts software warning test/integration/help.test.ts
helpers.test.ts software warning test/unit/helpers.test.ts
http.test.ts software warning test/unit/node/http.test.ts
i18n.test.ts software healthy test/unit/node/i18n.test.ts
main.test.ts software warning test/unit/node/main.test.ts
update.test.ts software healthy test/unit/node/update.test.ts
constants.test.ts software healthy test/unit/node/constants.test.ts
heart.test.ts software healthy test/unit/node/heart.test.ts
wrapper.test.ts software warning test/unit/node/wrapper.test.ts
util.test.ts software warning test/unit/node/util.test.ts
vscodeSocket.test.ts software warning test/unit/node/vscodeSocket.test.ts
proxy.test.ts software warning test/unit/node/proxy.test.ts
socket.test.ts software healthy test/unit/node/socket.test.ts
app.test.ts software healthy test/unit/node/app.test.ts
settings.test.ts software warning test/unit/node/settings.test.ts
cli.test.ts software warning test/unit/node/cli.test.ts
health.test.ts software warning test/unit/node/routes/health.test.ts
login.test.ts software healthy test/unit/node/routes/login.test.ts
static.test.ts software healthy test/unit/node/routes/static.test.ts
vscode.test.ts software warning test/unit/node/routes/vscode.test.ts
errors.test.ts software healthy test/unit/node/routes/errors.test.ts
http.test.ts software warning test/unit/common/http.test.ts
util.test.ts software warning test/unit/common/util.test.ts
emitter.test.ts software healthy test/unit/common/emitter.test.ts
runCodeServerCommand.ts software healthy test/utils/runCodeServerCommand.ts
cssStub.ts software warning test/utils/cssStub.ts
helpers.ts software healthy test/utils/helpers.ts
constants.ts software warning test/utils/constants.ts
httpserver.ts software healthy test/utils/httpserver.ts
integration.ts software healthy test/utils/integration.ts
globalE2eSetup.ts software warning test/utils/globalE2eSetup.ts
wtfnode.ts software healthy test/utils/wtfnode.ts
globalUnitSetup.ts software warning test/utils/globalUnitSetup.ts
login.test.ts software warning test/e2e/login.test.ts
appName.test.ts software warning test/e2e/appName.test.ts
logout.test.ts software warning test/e2e/logout.test.ts
baseFixture.ts software healthy test/e2e/baseFixture.ts
routes.test.ts software warning test/e2e/routes.test.ts

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
test software healthy test
integration software healthy test/integration
unit software healthy test/unit
node software healthy test/unit/node
routes software healthy test/unit/node/routes
common software healthy test/unit/common
utils software healthy test/utils
e2e software healthy test/e2e
models software healthy test/e2e/models
extensions software healthy test/e2e/extensions
test-extension software healthy test/e2e/extensions/test-extension
docs software healthy docs
ci software healthy ci
helm-chart software healthy ci/helm-chart
templates software healthy ci/helm-chart/templates
tests software healthy ci/helm-chart/templates/tests
release-image software healthy ci/release-image
steps software healthy ci/steps
dev software healthy ci/dev
.github software healthy .github
ISSUE_TEMPLATE software healthy .github/ISSUE_TEMPLATE
workflows software healthy .github/workflows
typings software healthy typings
httpolyglot software healthy typings/httpolyglot
src software healthy src
node software healthy src/node
i18n software healthy src/node/i18n
locales software healthy src/node/i18n/locales
routes software healthy src/node/routes
common software healthy src/common
browser software healthy src/browser
pages software healthy src/browser/pages

LabelLayerStatusPath
audit cicd healthy .github/workflows/security.yaml
trivy-scan-repo cicd healthy .github/workflows/security.yaml
codeql-analyze cicd healthy .github/workflows/security.yaml
test cicd healthy .github/workflows/scripts.yaml
lint cicd healthy .github/workflows/scripts.yaml
update cicd healthy .github/workflows/update.yaml
ubuntu cicd healthy .github/workflows/installer.yaml
alpine cicd healthy .github/workflows/installer.yaml
macos cicd healthy .github/workflows/installer.yaml
package-linux cicd healthy .github/workflows/release.yaml
package-macos cicd healthy .github/workflows/release.yaml
npm cicd healthy .github/workflows/publish.yaml
aur cicd healthy .github/workflows/publish.yaml
docker cicd healthy .github/workflows/publish.yaml
repo cicd healthy .github/workflows/publish.yaml
trivy-scan-image cicd healthy .github/workflows/trivy-docker.yaml
changes cicd healthy .github/workflows/build.yaml
prettier cicd healthy .github/workflows/build.yaml
doctoc cicd healthy .github/workflows/build.yaml
lint-helm cicd healthy .github/workflows/build.yaml
lint-ts cicd healthy .github/workflows/build.yaml
lint-actions cicd healthy .github/workflows/build.yaml
test-unit cicd healthy .github/workflows/build.yaml
build cicd healthy .github/workflows/build.yaml
test-e2e cicd healthy .github/workflows/build.yaml
test-e2e-proxy cicd healthy .github/workflows/build.yaml

LabelLayerStatusPath
HttpServer software healthy test/utils/httpserver.ts:HttpServer
Context software healthy test/e2e/models/CodeServer.ts:Context
CodeServer software healthy test/e2e/models/CodeServer.ts:CodeServer
CodeServerPage software healthy test/e2e/models/CodeServer.ts:CodeServerPage
Watcher software healthy ci/dev/watch.ts:Watcher
EditorSessionManager software healthy src/node/vscodeSocket.ts:EditorSessionManager
EditorSessionManagerClient software healthy src/node/vscodeSocket.ts:EditorSessionManagerClient
UpdateProvider software healthy src/node/update.ts:UpdateProvider
SocketProxyProvider software healthy src/node/socket.ts:SocketProxyProvider
Optional software healthy src/node/cli.ts:Optional
OptionalString software healthy src/node/cli.ts:OptionalString
Heart software healthy src/node/heart.ts:Heart
WebsocketRouter software healthy src/node/wsRouter.ts:WebsocketRouter
SettingsProvider software healthy src/node/settings.ts:SettingsProvider
ProcessError software healthy src/node/wrapper.ts:ProcessError
Process software healthy src/node/wrapper.ts:Process
ChildProcess software healthy src/node/wrapper.ts:ChildProcess
ParentProcess software healthy src/node/wrapper.ts:ParentProcess
RateLimiter software healthy src/node/routes/login.ts:RateLimiter
Emitter software healthy src/common/emitter.ts:Emitter
HttpError software healthy src/common/http.ts:HttpError

LabelLayerStatusPath
GET / api healthy src/node/routes/login.ts
GET /manifest.json api healthy src/node/routes/vscode.ts
POST /mint-key api healthy src/node/routes/vscode.ts
GET /check api healthy src/node/routes/update.ts
GET /robots.txt api healthy src/node/routes/index.ts
USE / api healthy src/node/routes/index.ts
ALL /proxy/:port{/*path} api healthy src/node/routes/index.ts
GET /proxy/:port{/*path} api healthy src/node/routes/index.ts
ALL /absproxy/:port{/*path} api healthy src/node/routes/index.ts
GET /absproxy/:port{/*path} api healthy src/node/routes/index.ts
USE /_static api healthy src/node/routes/index.ts
USE /healthz api healthy src/node/routes/index.ts
USE /login api healthy src/node/routes/index.ts
USE /logout api healthy src/node/routes/index.ts
ALL /login api healthy src/node/routes/index.ts
ALL /logout api healthy src/node/routes/index.ts
USE /update api healthy src/node/routes/index.ts

LabelLayerStatusPath
password_literal::test/unit/node/util.test.ts security healthy test/unit/node/util.test.ts
password_literal::test/unit/node/util.test.ts security healthy test/unit/node/util.test.ts
password_literal::test/unit/node/util.test.ts security healthy test/unit/node/util.test.ts
password_literal::test/unit/node/util.test.ts security healthy test/unit/node/util.test.ts
password_literal::test/unit/node/util.test.ts security healthy test/unit/node/util.test.ts
password_literal::test/unit/node/util.test.ts security healthy test/unit/node/util.test.ts
password_literal::test/unit/node/util.test.ts security healthy test/unit/node/util.test.ts
password_literal::test/unit/node/util.test.ts security healthy test/unit/node/util.test.ts
password_literal::test/unit/node/util.test.ts security healthy test/unit/node/util.test.ts
password_literal::test/unit/node/util.test.ts security healthy test/unit/node/util.test.ts
password_literal::test/unit/node/util.test.ts security healthy test/unit/node/util.test.ts
password_literal::test/unit/node/util.test.ts security healthy test/unit/node/util.test.ts
password_literal::test/utils/constants.ts security healthy test/utils/constants.ts
password_literal::ci/helm-chart/templates/secrets.yaml security healthy ci/helm-chart/templates/secrets.yaml
password_literal::ci/helm-chart/templates/secrets.yaml security healthy ci/helm-chart/templates/secrets.yaml
password_literal::src/node/cli.ts security healthy src/node/cli.ts

LabelLayerStatusPath
DOCKER_USERNAME cicd healthy —
NPM_TOKEN cicd healthy —
GITHUB_TOKEN cicd healthy —
VERSION cicd healthy —
CODECOV_TOKEN cicd healthy —
TAG cicd healthy —
DOCKER_PASSWORD cicd healthy —
HOMEBREW_GITHUB_API_TOKEN cicd healthy —
VSCODE_CACHE_VERSION cicd healthy —

LabelLayerStatusPath
port:8080 network healthy test/unit/node/main.test.ts
port:5678 network healthy test/unit/node/app.test.ts
port:8081 network healthy test/unit/node/cli.test.ts
port:8082 network healthy test/unit/node/cli.test.ts
port:3000 network healthy test/unit/node/cli.test.ts
port:8000 network healthy test/unit/node/cli.test.ts
port:25565 network healthy ci/helm-chart/values.yaml
port:06 network healthy .github/dependabot.yaml

LabelLayerStatusPath
gha::security cicd healthy .github/workflows/security.yaml
gha::scripts cicd healthy .github/workflows/scripts.yaml
gha::update cicd healthy .github/workflows/update.yaml
gha::installer cicd healthy .github/workflows/installer.yaml
gha::release cicd healthy .github/workflows/release.yaml
gha::publish cicd healthy .github/workflows/publish.yaml
gha::trivy-docker cicd healthy .github/workflows/trivy-docker.yaml
gha::build cicd healthy .github/workflows/build.yaml

LabelLayerStatusPath
/aaa frontend healthy test/unit/node/vscodeSocket.test.ts
/bbb frontend healthy test/unit/node/vscodeSocket.test.ts
/session?filePath= frontend healthy src/node/vscodeSocket.ts
/add-session frontend healthy src/node/vscodeSocket.ts
/ frontend healthy src/node/main.ts

LabelLayerStatusPath
127.0.0.1 network healthy test/unit/node/http.test.ts
1.2.3.4 network healthy test/unit/node/app.test.ts
192.169.0.1 network healthy test/unit/node/cli.test.ts
123.123.123.123 network healthy test/unit/node/cli.test.ts

LabelLayerStatusPath
image::ci/release-image/Dockerfile hardware healthy ci/release-image/Dockerfile
k8s::PersistentVolumeClaim::ci/helm-chart/templates/pvc.yaml hardware healthy ci/helm-chart/templates/pvc.yaml
k8s::ServiceAccount::ci/helm-chart/templates/serviceaccount… hardware healthy ci/helm-chart/templates/serviceaccount.yaml
k8s::Secret::ci/helm-chart/templates/secrets.yaml hardware healthy ci/helm-chart/templates/secrets.yaml

LabelLayerStatusPath
vps::gcp hardware healthy package.json
vps::aws hardware healthy ci/helm-chart/values.yaml
vps::azure hardware healthy .github/workflows/release.yaml

LabelLayerStatusPath
caddy network healthy .github/workflows/build.yaml
nginx network healthy src/node/http.ts

LabelLayerStatusPath
k8s::Deployment::ci/helm-chart/templates/deployment.yaml hardware healthy ci/helm-chart/templates/deployment.yaml
k8s::Pod::ci/helm-chart/templates/tests/test-connection.yaml hardware healthy ci/helm-chart/templates/tests/test-connection.yaml

LabelLayerStatusPath
repobility-clone-u39ax4sw software healthy /tmp/repobility-clone-u39ax4sw

LabelLayerStatusPath
ingress::ci/helm-chart/templates/ingress.yaml network healthy ci/helm-chart/templates/ingress.yaml

LabelLayerStatusPath
auth::test/e2e/github.test.ts security healthy test/e2e/github.test.ts
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/8618e285-16c4-4629-8ab9-901d19f88409/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/8618e285-16c4-4629-8ab9-901d19f88409/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.