Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo
26 of your 103 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 5.14s · analysis 6.14s · 3.5 MB · GitHub preflight 451ms

caddyserver/caddy

https://github.com/caddyserver/caddy · scanned 2026-06-05 08:02 UTC (5 days, 21 hours ago) · 10 languages

122 raw signals (98 security + 24 graph) 44th percentile · Go · medium (20-100K LoC) System graph score 83 (lower by 14)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 5 days, 21 hours ago · v2 · 82 actionable findings from 2 signal sources. 28 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
72.5
/100
Security checks
62
73 findings
System graph
83
100.0% cov · 9 findings
Critical
4
click to filter
Agents
6
0 votes
Crowd
0
reported
Score breakdown â 2026-05-18-v5
Component Sub-score Weight Contribution
structure_score 85.0 0.15 12.75
security_score 33.0 0.25 8.25
testing_score 85.0 0.20 17.00
documentation_score 65.0 0.15 9.75
practices_score 100.0 0.15 15.00
code_quality 63.6 0.10 6.36
Overall 1.00 69.1
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 4 High 49 Medium 3 Low 8 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 73 System graph 9 Crowd 0 Layer: Security 19 Quality 21 Software 38 Cicd 2 Api 1 Frontend 1

All 520 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

LabelLayerStatusPath
admin.go software healthy admin.go
usagepool.go software healthy usagepool.go
metrics.go software healthy metrics.go
.golangci.yml software healthy .golangci.yml
sigtrap_nonposix.go software healthy sigtrap_nonposix.go
logging.go software healthy logging.go
listen_unix_setopt.go software healthy listen_unix_setopt.go
storage.go software healthy storage.go
listen.go software healthy listen.go
context.go software healthy context.go
caddy_test.go software healthy caddy_test.go
listen_unix.go software healthy listen_unix.go
listeners_test.go software healthy listeners_test.go
context_test.go software healthy context_test.go
README.md software healthy README.md
filepath_windows.go software healthy filepath_windows.go
listen_reuseUnixSocket.go software healthy listen_reuseUnixSocket.go
filepath.go software healthy filepath.go
filesystem.go software healthy filesystem.go
duration_fuzz.go software healthy duration_fuzz.go
replacer.go software healthy replacer.go
admin_test.go software healthy admin_test.go
.pre-commit-config.yaml software healthy .pre-commit-config.yaml
.goreleaser.yml software healthy .goreleaser.yml
modules.go software healthy modules.go
go.mod software healthy go.mod
listen_reuseUnixSocket_windows.go software healthy listen_reuseUnixSocket_windows.go
listeners.go software healthy listeners.go
listen_unix_setopt_freebsd.go software healthy listen_unix_setopt_freebsd.go
replacer_fuzz.go software healthy replacer_fuzz.go
caddy.go software healthy caddy.go
replacer_test.go software healthy replacer_test.go
listeners_fuzz.go software healthy listeners_fuzz.go
modules_test.go software healthy modules_test.go
logging_test.go software healthy logging_test.go
AGENTS.md software healthy AGENTS.md
sigtrap.go software healthy sigtrap.go
sigtrap_posix.go software healthy sigtrap_posix.go
service_windows.go software healthy service_windows.go
load.go software healthy caddyconfig/load.go
configadapters.go software healthy caddyconfig/configadapters.go
httploader.go software healthy caddyconfig/httploader.go
serveroptions.go software healthy caddyconfig/httpcaddyfile/serveroptions.go
pkiapp.go software healthy caddyconfig/httpcaddyfile/pkiapp.go
tlsapp.go software healthy caddyconfig/httpcaddyfile/tlsapp.go
pkiapp_test.go software healthy caddyconfig/httpcaddyfile/pkiapp_test.go
addresses.go software healthy caddyconfig/httpcaddyfile/addresses.go
addresses_fuzz.go software healthy caddyconfig/httpcaddyfile/addresses_fuzz.go
builtins.go software healthy caddyconfig/httpcaddyfile/builtins.go
httptype.go software healthy caddyconfig/httpcaddyfile/httptype.go

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
127.0.0.1 network healthy admin.go
1.2.3.4 network healthy replacer_test.go
1.1.1.1 network healthy caddyconfig/httpcaddyfile/options_test.go
8.8.8.8 network healthy caddyconfig/httpcaddyfile/options_test.go
9.9.9.9 network healthy caddyconfig/httpcaddyfile/options_test.go
192.168.1.1 network healthy caddyconfig/httpcaddyfile/httptype_test.go
10.0.0.1 network healthy caddytest/integration/proxyprotocol_test.go
127.0.0.0 network healthy caddytest/integration/proxyprotocol_test.go
192.168.0.0 network healthy internal/ranges.go
172.16.0.0 network healthy internal/ranges.go
10.0.0.0 network healthy internal/ranges.go
127.0.0.2 network healthy modules/caddytls/matchers_test.go
127.0.1.23 network healthy modules/caddytls/matchers_test.go
192.168.1.105 network healthy modules/caddytls/matchers_test.go
127.0.0.3 network healthy modules/caddytls/matchers_test.go
127.0.0.300 network healthy modules/caddytls/matchers_test.go
203.0.113.10 network healthy modules/caddytls/ech_dns_test.go
255.255.255.255 network healthy modules/logging/filters_test.go
255.255.0.0 network healthy modules/logging/filters_test.go
244.244.244.244 network healthy modules/logging/filters_test.go
244.244.0.0 network healthy modules/logging/filters_test.go
192.0.2.1 network healthy modules/caddyhttp/server_test.go
2.2.2.2 network healthy modules/caddyhttp/server_test.go
3.3.3.3 network healthy modules/caddyhttp/server_test.go
4.4.4.4 network healthy modules/caddyhttp/server_test.go
31.40.0.10 network healthy modules/caddyhttp/server_test.go
30.30.30.30 network healthy modules/caddyhttp/server_test.go
45.54.45.54 network healthy modules/caddyhttp/server_test.go
10.0.0.2 network healthy modules/caddyhttp/server_test.go
10.0.0.3 network healthy modules/caddyhttp/server_test.go
10.0.0.4 network healthy modules/caddyhttp/server_test.go
90.100.110.120 network healthy modules/caddyhttp/server_test.go
1.2.3.0 network healthy modules/caddyhttp/replacer.go
192.168.0.1 network healthy modules/caddyhttp/server.go
192.168.159.1 network healthy modules/caddyhttp/replacer_test.go
192.168.159.32 network healthy modules/caddyhttp/replacer_test.go
192.168.159.0 network healthy modules/caddyhttp/replacer_test.go
8.8.3.3 network healthy modules/caddyhttp/encode/encode.go
5.6.7.8 network healthy modules/caddyhttp/reverseproxy/headers_test.go
192.0.2.2 network healthy modules/caddyhttp/reverseproxy/dynamic_upstreams_test.go
192.0.2.3 network healthy modules/caddyhttp/reverseproxy/dynamic_upstreams_test.go
192.0.2.4 network healthy modules/caddyhttp/reverseproxy/dynamic_upstreams_test.go
192.0.2.5 network healthy modules/caddyhttp/reverseproxy/dynamic_upstreams_test.go
192.0.2.6 network healthy modules/caddyhttp/reverseproxy/dynamic_upstreams_test.go
192.0.2.7 network healthy modules/caddyhttp/reverseproxy/dynamic_upstreams_test.go
192.0.2.8 network healthy modules/caddyhttp/reverseproxy/dynamic_upstreams_test.go
192.0.2.9 network healthy modules/caddyhttp/reverseproxy/dynamic_upstreams_test.go
192.0.2.10 network healthy modules/caddyhttp/reverseproxy/dynamic_upstreams_test.go
192.0.2.11 network healthy modules/caddyhttp/reverseproxy/dynamic_upstreams_test.go
192.0.2.12 network healthy modules/caddyhttp/reverseproxy/dynamic_upstreams_test.go

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
caddyconfig software healthy caddyconfig
httpcaddyfile software healthy caddyconfig/httpcaddyfile
caddyfile software healthy caddyconfig/caddyfile
notify software healthy notify
caddytest software healthy caddytest
integration software healthy caddytest/integration
testdata software healthy caddytest/integration/testdata
internal software healthy internal
testmocks software healthy internal/testmocks
metrics software healthy internal/metrics
filesystems software healthy internal/filesystems
cmd software healthy cmd
caddy software healthy cmd/caddy
modules software healthy modules
internal software healthy modules/internal
network software healthy modules/internal/network
caddytls software healthy modules/caddytls
standardstek software healthy modules/caddytls/standardstek
distributedstek software healthy modules/caddytls/distributedstek
caddypki software healthy modules/caddypki
acmeserver software healthy modules/caddypki/acmeserver
standard software healthy modules/standard
filestorage software healthy modules/filestorage
caddyfs software healthy modules/caddyfs
logging software healthy modules/logging
caddyevents software healthy modules/caddyevents
eventsconfig software healthy modules/caddyevents/eventsconfig
metrics software healthy modules/metrics
caddyhttp software healthy modules/caddyhttp
intercept software healthy modules/caddyhttp/intercept
push software healthy modules/caddyhttp/push
encode software healthy modules/caddyhttp/encode
zstd software healthy modules/caddyhttp/encode/zstd
brotli software healthy modules/caddyhttp/encode/brotli
gzip software healthy modules/caddyhttp/encode/gzip
standard software healthy modules/caddyhttp/standard
reverseproxy software healthy modules/caddyhttp/reverseproxy
fastcgi software healthy modules/caddyhttp/reverseproxy/fastcgi
forwardauth software healthy modules/caddyhttp/reverseproxy/forwardauth
caddyauth software healthy modules/caddyhttp/caddyauth
templates software healthy modules/caddyhttp/templates
fileserver software healthy modules/caddyhttp/fileserver
testdata software healthy modules/caddyhttp/fileserver/testdata
foo.php.php software healthy modules/caddyhttp/fileserver/testdata/foo.php.php
headers software healthy modules/caddyhttp/headers
rewrite software healthy modules/caddyhttp/rewrite
requestbody software healthy modules/caddyhttp/requestbody
logging software healthy modules/caddyhttp/logging
tracing software healthy modules/caddyhttp/tracing
map software healthy modules/caddyhttp/map

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
golangci cicd healthy .github/workflows/lint.yml
govulncheck cicd healthy .github/workflows/lint.yml
dependency-review cicd healthy .github/workflows/lint.yml
spam-detection cicd healthy .github/workflows/ai.yml
release cicd healthy .github/workflows/release_published.yml
analysis cicd healthy .github/workflows/scorecard.yml
test cicd healthy .github/workflows/ci.yml
s390x-test cicd healthy .github/workflows/ci.yml
goreleaser-check cicd healthy .github/workflows/ci.yml
create-proposal cicd healthy .github/workflows/release-proposal.yml
verify-tag cicd healthy .github/workflows/release.yml
release cicd healthy .github/workflows/release.yml
build cicd healthy .github/workflows/cross-build.yml
check-approvals cicd healthy .github/workflows/auto-release-pr.yml
handle-pr-closed cicd healthy .github/workflows/auto-release-pr.yml

LabelLayerStatusPath
gha::lint cicd healthy .github/workflows/lint.yml
gha::ai cicd healthy .github/workflows/ai.yml
gha::release_published cicd healthy .github/workflows/release_published.yml
gha::scorecard cicd healthy .github/workflows/scorecard.yml
gha::ci cicd healthy .github/workflows/ci.yml
gha::release-proposal cicd healthy .github/workflows/release-proposal.yml
gha::release cicd healthy .github/workflows/release.yml
gha::cross-build cicd healthy .github/workflows/cross-build.yml
gha::auto-release-pr cicd healthy .github/workflows/auto-release-pr.yml

LabelLayerStatusPath
GEMFURY_PUSH_TOKEN cicd healthy —
REPO_DISPATCH_TOKEN cicd healthy —
GITHUB_TOKEN cicd healthy —
S390X_SSH_KEY cicd healthy —
CLOUDSMITH_API_KEY cicd healthy —
SIGNING_KEYS cicd healthy —
CI_USER cicd healthy —
SCORECARD_TOKEN cicd healthy —
MAINTAINER_LOGINS cicd healthy —

LabelLayerStatusPath
caddy network healthy admin.go
loadbalancer network healthy modules/caddyhttp/reverseproxy/reverseproxy.go
nginx network healthy modules/caddyhttp/reverseproxy/fastcgi/fastcgi.go

LabelLayerStatusPath
port:1234 network healthy listeners_test.go
port:80 network healthy modules/caddyhttp/reverseproxy/addresses.go
port:443 network healthy modules/caddyhttp/reverseproxy/addresses.go

LabelLayerStatusPath
auth::caddytest/integration/forwardauth_test.go security healthy caddytest/integration/forwardauth_test.go
auth::modules/logging/filters.go security healthy modules/logging/filters.go
auth::go.mod security healthy go.mod

LabelLayerStatusPath
password_literal::modules/caddyhttp/caddyauth/command.go security healthy modules/caddyhttp/caddyauth/command.go
password_literal::modules/caddyhttp/caddyauth/command.go security healthy modules/caddyhttp/caddyauth/command.go

LabelLayerStatusPath
repobility-clone-32g3ejk6 software healthy /tmp/repobility-clone-32g3ejk6

LabelLayerStatusPath
mysql data healthy go.mod

LabelLayerStatusPath
vps::aws hardware healthy go.mod
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/96e9c385-5af1-4b53-9a84-1cd7e3c12f32/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/96e9c385-5af1-4b53-9a84-1cd7e3c12f32/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.