microsoft/terminal

Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

25 of your 37 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Upstream (GitHub) caused delay on this scan — not Repobility.

GitHub API rate-limited (HTTP 403) — preflight skipped, fell back to direct git clone.
Clone from GitHub took 44.79s for a 73.2 MB repo slow.
Repobility's analysis ran in 14.13s after the clone landed.

https://github.com/microsoft/terminal · scanned 2026-06-05 06:04 UTC (10 hours, 12 minutes ago) · 10 languages

49 findings (35 legacy + 14 scanner) 11/13 scanners ran 100th percentile · Cpp · large (100-500K LoC) Scanner says 97 (lower by 28)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 10 hours, 12 minutes ago · v2 · 42 findings from 2 sources. Findings combine the legacy security pipeline AND the multi-layer engine (atlas, wiring, flows, ranked) AND verified AI agent contributions.

JSON

Score breakdown â 2026-05-18-v5

Component	Sub-score	Weight	Contribution
`structure_score`	65.0	0.15	9.75
`security_score`	100.0	0.25	25.00
`testing_score`	15.0	0.20	3.00
`documentation_score`	81.0	0.15	12.15
`practices_score`	79.0	0.15	11.85
`code_quality`	70.0	0.10	7.00
Overall		1.00	68.8

security_score may be inflated — optional security scanners were skipped on this fast scan

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 21 Medium 2 Low 6 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Legacy 35 9-layer 7 Crowd 0 Layer: Quality 18 Software 20 Api 1 Frontend 1 Security 1 Cicd 1

Exclude dismissed / FP Exclude test files

All 1585 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`README.md`	software	healthy	`README.md`
`consolegit2gitfilters.json`	software	healthy	`consolegit2gitfilters.json`
`CONTRIBUTING.md`	software	healthy	`CONTRIBUTING.md`
`.wt.json`	software	healthy	`.wt.json`
`vcpkg.json`	software	healthy	`vcpkg.json`
`SUPPORT.md`	software	healthy	`SUPPORT.md`
`CODE_OF_CONDUCT.md`	software	healthy	`CODE_OF_CONDUCT.md`
`SECURITY.md`	software	healthy	`SECURITY.md`
`NOTICE.md`	software	healthy	`NOTICE.md`
`XamlStyler.json`	software	healthy	`XamlStyler.json`
`vcpkg.json`	software	healthy	`dep/vcpkg-overlay-ports/jsoncpp/vcpkg.json`
`vcpkg.json`	software	healthy	`dep/vcpkg-overlay-ports/fmt/vcpkg.json`
`conmsgl3.h`	software	healthy	`dep/Console/conmsgl3.h`
`csrmsg.h`	software	healthy	`dep/Console/csrmsg.h`
`winconp.h`	software	healthy	`dep/Console/winconp.h`
`ntcsrmsg.h`	software	healthy	`dep/Console/ntcsrmsg.h`
`conmsgl1.h`	software	healthy	`dep/Console/conmsgl1.h`
`conmsgl2.h`	software	healthy	`dep/Console/conmsgl2.h`
`condrv.h`	software	healthy	`dep/Console/condrv.h`
`conapi.h`	software	healthy	`dep/Console/conapi.h`
`ConIoSrv.h`	software	healthy	`dep/Console/ConIoSrv.h`
`ntcon.h`	software	healthy	`dep/Console/ntcon.h`
`ntlpcapi.h`	software	healthy	`dep/Console/ntlpcapi.h`
`ntcsrdll.h`	software	healthy	`dep/Console/ntcsrdll.h`
`ntioapi_x.h`	software	healthy	`dep/NT/ntioapi_x.h`
`winuserp.h`	software	healthy	`dep/Win32K/winuserp.h`
`ProjectTelemetry.h`	software	healthy	`dep/telemetry/ProjectTelemetry.h`
`README.md`	software	healthy	`res/README.md`
`README.md`	software	healthy	`res/fonts/README.md`
`README.md`	software	healthy	`oss/README.md`
`cgmanifest.json`	software	healthy	`oss/stb/cgmanifest.json`
`MAINTAINER_README.md`	software	healthy	`oss/stb/MAINTAINER_README.md`
`stb_rect_pack.h`	software	healthy	`oss/stb/stb_rect_pack.h`
`cgmanifest.json`	software	healthy	`oss/interval_tree/cgmanifest.json`
`IntervalTree.h`	software	healthy	`oss/interval_tree/IntervalTree.h`
`MAINTAINER_README.md`	software	healthy	`oss/interval_tree/MAINTAINER_README.md`
`cgmanifest.json`	software	healthy	`oss/pcg/cgmanifest.json`
`pcg_random.hpp`	software	healthy	`oss/pcg/include/pcg_random.hpp`
`cgmanifest.json`	software	healthy	`oss/xorg_apps_rgb/cgmanifest.json`
`MAINTAINER_README.md`	software	healthy	`oss/xorg_apps_rgb/MAINTAINER_README.md`
`cgmanifest.json`	software	healthy	`oss/chromium/cgmanifest.json`
`MAINTAINER_README.md`	software	healthy	`oss/chromium/MAINTAINER_README.md`
`clamped_math_impl.h`	software	healthy	`oss/chromium/base/numerics/clamped_math_impl.h`
`math_constants.h`	software	healthy	`oss/chromium/base/numerics/math_constants.h`
`safe_math.h`	software	healthy	`oss/chromium/base/numerics/safe_math.h`
`README.md`	software	healthy	`oss/chromium/base/numerics/README.md`
`safe_math_clang_gcc_impl.h`	software	healthy	`oss/chromium/base/numerics/safe_math_clang_gcc_impl.h`
`safe_conversions.h`	software	healthy	`oss/chromium/base/numerics/safe_conversions.h`
`safe_math_arm_impl.h`	software	healthy	`oss/chromium/base/numerics/safe_math_arm_impl.h`
`clamped_math.h`	software	healthy	`oss/chromium/base/numerics/clamped_math.h`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`dep`	software	healthy	`dep`
`vcpkg-overlay-ports`	software	healthy	`dep/vcpkg-overlay-ports`
`jsoncpp`	software	healthy	`dep/vcpkg-overlay-ports/jsoncpp`
`fmt`	software	healthy	`dep/vcpkg-overlay-ports/fmt`
`Console`	software	healthy	`dep/Console`
`NT`	software	healthy	`dep/NT`
`Win32K`	software	healthy	`dep/Win32K`
`telemetry`	software	healthy	`dep/telemetry`
`res`	software	healthy	`res`
`fonts`	software	healthy	`res/fonts`
`oss`	software	healthy	`oss`
`stb`	software	healthy	`oss/stb`
`interval_tree`	software	healthy	`oss/interval_tree`
`pcg`	software	healthy	`oss/pcg`
`include`	software	healthy	`oss/pcg/include`
`xorg_apps_rgb`	software	healthy	`oss/xorg_apps_rgb`
`chromium`	software	healthy	`oss/chromium`
`base`	software	healthy	`oss/chromium/base`
`numerics`	software	healthy	`oss/chromium/base/numerics`
`wyhash`	software	healthy	`oss/wyhash`
`doc`	software	healthy	`doc`
`cascadia`	software	healthy	`doc/cascadia`
`user-docs`	software	healthy	`doc/user-docs`
`specs`	software	healthy	`doc/specs`
`#1337 - Per-Profile Tab Colors`	software	healthy	`doc/specs/#1337 - Per-Profile Tab Colors`
`#605 - Search`	software	healthy	`doc/specs/#605 - Search`
`#5000 - Process Model 2.0`	software	healthy	`doc/specs/#5000 - Process Model 2.0`
`#1595 - Suggestions UI`	software	healthy	`doc/specs/#1595 - Suggestions UI`
`#1564 - Settings UI`	software	healthy	`doc/specs/#1564 - Settings UI`
`#16599 - Quick Fix`	software	healthy	`doc/specs/#16599 - Quick Fix`
`#885 - Terminal Settings Model`	software	healthy	`doc/specs/#885 - Terminal Settings Model`
`#11000 - Marks`	software	healthy	`doc/specs/#11000 - Marks`
`#4993 - Keyboard Selection`	software	healthy	`doc/specs/#4993 - Keyboard Selection`
`#1235 - Azure cloud shell connector`	software	healthy	`doc/specs/#1235 - Azure cloud shell connector`
`#4191 - Formatted Copy`	software	healthy	`doc/specs/#4191 - Formatted Copy`
`drafts`	software	healthy	`doc/specs/drafts`
`#642 - Buffer Exporting and Logging`	software	healthy	`doc/specs/drafts/#642 - Buffer Exporting and Logging`
`#3327 - Application Theming`	software	healthy	`doc/specs/drafts/#3327 - Application Theming`
`#2634 - Broadcast Input`	software	healthy	`doc/specs/drafts/#2634 - Broadcast Input`
`#1502 - Advanced Tab Switcher`	software	healthy	`doc/specs/#1502 - Advanced Tab Switcher`
`#492 - Default Terminal`	software	healthy	`doc/specs/#492 - Default Terminal`
`#2871 - Pane Navigation`	software	healthy	`doc/specs/#2871 - Pane Navigation`
`#6899 - Action IDs`	software	healthy	`doc/specs/#6899 - Action IDs`
`#1043 - Set the initial position of the Terminal`	software	healthy	`doc/specs/#1043 - Set the initial position of the Terminal`
`#6900 - Actions Page`	software	healthy	`doc/specs/#6900 - Actions Page`
`#653 - Quake Mode`	software	healthy	`doc/specs/#653 - Quake Mode`
`#1571 - New Tab Menu Customization`	software	healthy	`doc/specs/#1571 - New Tab Menu Customization`
`scratch`	software	healthy	`scratch`
`ScratchIslandApp`	software	healthy	`scratch/ScratchIslandApp`
`SampleApp`	software	healthy	`scratch/ScratchIslandApp/SampleApp`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`parse_yaml_files`	software	healthy	`doc/specs/#1595 - Suggestions UI/dump-workflows.py:6`
`main`	software	healthy	`doc/specs/#1595 - Suggestions UI/dump-workflows.py:32`
`initializeScript`	software	healthy	`tools/WindbgExtension.js:initializeScript`
`ServiceLocatorVar`	software	healthy	`tools/WindbgExtension.js:ServiceLocatorVar`
`write`	software	healthy	`src/tools/vttests/common.py:34`
`esc`	software	healthy	`src/tools/vttests/common.py:37`
`csi`	software	healthy	`src/tools/vttests/common.py:40`
`osc`	software	healthy	`src/tools/vttests/common.py:43`
`cup`	software	healthy	`src/tools/vttests/common.py:46`
`cupxy`	software	healthy	`src/tools/vttests/common.py:49`
`margins`	software	healthy	`src/tools/vttests/common.py:52`
`clear_all`	software	healthy	`src/tools/vttests/common.py:55`
`sgr`	software	healthy	`src/tools/vttests/common.py:59`
`sgr_n`	software	healthy	`src/tools/vttests/common.py:62`
`tbc`	software	healthy	`src/tools/vttests/common.py:76`
`ht`	software	healthy	`src/tools/vttests/common.py:83`
`cbt`	software	healthy	`src/tools/vttests/common.py:86`
`hts`	software	healthy	`src/tools/vttests/common.py:89`
`alt_buffer`	software	healthy	`src/tools/vttests/common.py:94`
`main_buffer`	software	healthy	`src/tools/vttests/common.py:97`
`flush`	software	healthy	`src/tools/vttests/common.py:100`
`set_color`	software	healthy	`src/tools/vttests/common.py:104`

Label	Layer	Status	Path
`spelling`	cicd	healthy	`.github/workflows/spelling2.yml`
`comment-push`	cicd	healthy	`.github/workflows/spelling2.yml`
`comment-pr`	cicd	healthy	`.github/workflows/spelling2.yml`
`update`	cicd	healthy	`.github/workflows/spelling2.yml`
`publish`	cicd	healthy	`.github/workflows/winget.yml`
`add-to-project`	cicd	healthy	`.github/workflows/addToProject.yml`

Label	Layer	Status	Path
`gha::spelling2`	cicd	healthy	`.github/workflows/spelling2.yml`
`gha::winget`	cicd	healthy	`.github/workflows/winget.yml`
`gha::addToProject`	cicd	healthy	`.github/workflows/addToProject.yml`

Label	Layer	Status	Path
`CHECK_SPELLING`	cicd	healthy	`—`
`ADD_TO_PROJECT_PAT`	cicd	healthy	`—`
`WINGET_TOKEN`	cicd	healthy	`—`

Label	Layer	Status	Path
`vps::azure`	hardware	healthy	`doc/cascadia/profiles.schema.json`
`vps::aws`	hardware	healthy	`.github/actions/spelling/config.json`

Label	Layer	Status	Path
`repobility-clone-2fnx60wt`	software	healthy	`/tmp/repobility-clone-2fnx60wt`

Label	Layer	Status	Path
`redis`	data	healthy	`.github/actions/spelling/config.json`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/8ce3c502-c9d3-4106-a87e-1640f4eb89f9/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/8ce3c502-c9d3-4106-a87e-1640f4eb89f9/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

microsoft/terminal

Complete repo analysis

file 50+

directory 50+

function 22

job 6

pipeline 3

env_var 3

vps 2

repo 1

database 1