https://github.com/microsoft/vscode
· scanned 2026-06-05 04:35 UTC (1 week, 1 day ago)
· 10 languages
5328 raw signals (184 security + 5144 graph) 11/13 scanners ran 83rd percentile · Typescript · huge (>500K LoC) System graph score 44 (higher by 46)
Last scanned 1 week, 1 day ago · v2 · 2518 actionable findings from 2 signal sources. 213 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.
| Component | Sub-score | Weight | Contribution |
|---|---|---|---|
structure_score |
85.0 | 0.15 | 12.75 |
security_score |
100.0 | 0.25 | 25.00 |
testing_score |
100.0 | 0.20 | 20.00 |
documentation_score |
81.0 | 0.15 | 12.15 |
practices_score |
91.0 | 0.15 | 13.65 |
code_quality |
70.0 | 0.10 | 7.00 |
| Overall | 1.00 | 90.5 |
Showing 854 of 2518 actionable findings. 2731 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.
extensions/copilot/src/extension/chatSessions/vscode-node/copilotCLIShim.ts:109
extensions/copilot/src/extension/intents/node/promptOverride.ts:107
extensions/copilot/src/extension/context/node/resolvers/vscodeContext.ts:32extensions/copilot/src/extension/prompts/node/panel/referencesAtPosition.tsx:118extensions/copilot/src/extension/prompts/node/panel/workspace/visualFileTree.ts:135.eslint-plugin-local/code-no-reader-after-await.ts:10.eslint-plugin-local/code-no-runtime-import.ts:10extensions/copilot/.eslintplugin/no-runtime-import.ts:41extensions/copilot/src/extension/agents/vscode-node/exploreAgentProvider.ts:42extensions/copilot/src/extension/byok/common/geminiMessageConverter.ts:158extensions/copilot/src/extension/byok/vscode-node/customOAIProvider.ts:38extensions/copilot/src/extension/byok/vscode-node/geminiNativeProvider.ts:166extensions/copilot/src/extension/byok/vscode-node/openRouterProvider.ts:86build:1
llms.txt
humans.txt
robots.txt
sitemap.xml
.devcontainer/Dockerfile:1
containersPinned dependencies
extensions/copilot/.github/workflows/pr.yml:22, 25, 31, 61, 64, 77, 82, 87, +8 more (27 hits).github/workflows/chat-perf.yml:90, 95, 133, 142, 170, 189, 194, 218, +12 more (20 hits).github/workflows/pr.yml:25, 30, 39, 88, 186, 195, 231, 250, +10 more (18 hits)extensions/copilot/.github/workflows/ensure-node-modules-cache.yml:17, 22, 27, 51, 56, 61, 67 (14 hits).github/workflows/pr-node-modules.yml:16, 19, 28, 75, 95, 98, 107, 167, +5 more (13 hits)extensions/copilot/.github/workflows/copilot-setup-steps.yml:20, 25, 30, 36, 44 (10 hits).github/workflows/pr-darwin-test.yml:27, 32, 41, 94, 217, 228, 237 (7 hits).github/workflows/pr-linux-test.yml:27, 32, 63, 127, 390, 401, 410 (7 hits)extensions/copilot/src/extension/prompts/node/inline/pythonCookbookData.ts:62
Debug true
repo-level (2 hits)extensions/copilot/chat-lib/package.jsonextensions/copilot/package.jsonextensions/copilot/test/simulation/fixtures/codeMapper/package.jsonextensions/package.jsonpackage.jsonShowing first 300 of 854. Refine filters or use the findings page for deep search.
This page is publicly accessible at:
https://repobility.com/scan/962fd338-2a5d-4f18-8b09-1929989ac06a/
To check status programmatically (no auth required):
curl -s https://repobility.com/api/v1/public/scan/962fd338-2a5d-4f18-8b09-1929989ac06a/
Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.