Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

ramc2012/TradeBot

https://github.com/ramc2012/TradeBot · scanned 2026-06-15 23:50 UTC (2 months, 3 weeks ago)

359 raw signals (0 security + 359 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 3 weeks ago · v1 · 344 actionable findings from 1 signal source. 15 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
52.7
/100
Security checks
53
0 findings
System graph
53
100.0% cov · 344 findings
Critical
0
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: severity: high × excluding tests × Reset all
Severity: Critical 0 High 72 Medium 22 Low 142 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 344 Crowd 0 Layer: Software 24 Frontend 36 Network 7 Hardware 7 Security 75 Quality 145 Api 50
Corpus Intelligence Cross-corpus context (cohort percentile, top patterns, fix plan) is shown only on repositories you own. Sign up and connect your repo to view it.
Scan summary Repository scanned at 52.7/100 with 100.0% coverage. It contains 9549 nodes across 30 cross-layer flows, written primarily in mixed languages. Engine surfaced 359 findings — concentrated in quality (160), security (75), api (50). Risk profile is high: 0 critical, 72 high, 22 medium. Recommended next step: open the quality layer findings first — that's where the highest-impact wins live.

Showing 67 of 344 actionable findings. 359 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

high System graph security auth conf 1.00 FastAPI DELETE `cancel_order` without auth dependency — backend/api/routers/trading.py:403
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/trading.py:403 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `cancel_task` without auth dependency — backend/api/routers/fo_data.py:318
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/fo_data.py:318 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_index_analytics_task` without auth dependency — backend/api/routers/fo_data.py:326
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/fo_data.py:326 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `rl_reset` without auth dependency — backend/api/routers/auction_intelligence.py:856
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/auction_intelligence.py:856 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `add_document` without auth dependency — backend/api/routers/rag.py:20
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/rag.py:20 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `add_trade_case` without auth dependency — backend/api/routers/rag.py:26
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/rag.py:26 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `analyze` without auth dependency — backend/api/routers/auction_intelligence.py:552
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/auction_intelligence.py:552 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `approve_proposal` without auth dependency — backend/api/routers/agent.py:30
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/agent.py:30 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `cbe_reset_paper` without auth dependency — backend/api/routers/cbe.py:140
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/cbe.py:140 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `chat` without auth dependency — backend/api/routers/agent.py:68
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/agent.py:68 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `close_strategy_agent_position` without auth dependency — backend/api/routers/trading.py:539
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/trading.py:539 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `connect_broker` without auth dependency — backend/api/routers/auth.py:1603
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/auth.py:1603 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `context_gate` without auth dependency — backend/api/routers/rag.py:69
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/rag.py:69 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `disconnect_broker` without auth dependency — backend/api/routers/auth.py:1634
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/auth.py:1634 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `fire_telegram_heartbeat` without auth dependency — backend/api/routers/notifications.py:25
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/notifications.py:25 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `fivepaisa_connect` without auth dependency — backend/api/routers/auth.py:1886
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/auth.py:1886 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `fo_risk_refresh` without auth dependency — backend/api/routers/market.py:537
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/market.py:537 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `fractal_market_profile_paper_proposal` without auth dependency — backend/api/routers/fractal_market_profile.py:35
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/fractal_market_profile.py:35 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `get_latest_ticks` without auth dependency — backend/api/routers/market.py:1229
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/market.py:1229 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `get_ltp` without auth dependency — backend/api/routers/market.py:1174
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/market.py:1174 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `icici_breeze_connect` without auth dependency — backend/api/routers/auth.py:1858
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/auth.py:1858 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `ingest_sniper_signal` without auth dependency — backend/api/routers/auction_intelligence.py:81
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/auction_intelligence.py:81 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `kill_switch` without auth dependency — backend/api/routers/trading.py:442
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/trading.py:442 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `paper_agent_run_once` without auth dependency — backend/api/routers/gann_tp_delta.py:108
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/gann_tp_delta.py:108 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `paper_proposal` without auth dependency — backend/api/routers/auction_intelligence.py:568
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/auction_intelligence.py:568 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `paper_proposal` without auth dependency — backend/api/routers/directional_options.py:44
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/directional_options.py:44 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `paper_proposal` without auth dependency — backend/api/routers/gann_tp_delta.py:76
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/gann_tp_delta.py:76 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `paper_run_once` without auth dependency — backend/api/routers/auction_intelligence.py:541
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/auction_intelligence.py:541 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `place_order` without auth dependency — backend/api/routers/trading.py:305
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/trading.py:305 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `refresh_learning_scores` without auth dependency — backend/api/routers/strategy.py:1303
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/strategy.py:1303 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `reject_proposal` without auth dependency — backend/api/routers/agent.py:38
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/agent.py:38 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `reset_commodity_paper_account` without auth dependency — backend/api/routers/commodity.py:95
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/commodity.py:95 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `reset_nse_paper_account` without auth dependency — backend/api/routers/trading.py:562
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/trading.py:562 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `reset_paper_account` without auth dependency — backend/api/routers/directional_options.py:76
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/directional_options.py:76 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `rl_cycle` without auth dependency — backend/api/routers/auction_intelligence.py:822
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/auction_intelligence.py:822 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `rl_train` without auth dependency — backend/api/routers/auction_intelligence.py:799
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/auction_intelligence.py:799 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `run_commodity_strategy_once` without auth dependency — backend/api/routers/commodity.py:130
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/commodity.py:130 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `run_india_live_market_ingestion` without auth dependency — backend/api/routers/sector_interaction.py:178
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/sector_interaction.py:178 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `run_ingestion` without auth dependency — backend/api/routers/sector_interaction.py:161
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/sector_interaction.py:161 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `run_scan` without auth dependency — backend/api/routers/agent.py:46
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/agent.py:46 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `run_strategy_agent_once` without auth dependency — backend/api/routers/trading.py:534
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/trading.py:534 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `save_credentials` without auth dependency — backend/api/routers/auth.py:1358
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/auth.py:1358 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `save_telegram_settings` without auth dependency — backend/api/routers/auth.py:1537
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/auth.py:1537 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `scan_cbe` without auth dependency — backend/api/routers/cbe.py:67
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/cbe.py:67 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `search` without auth dependency — backend/api/routers/rag.py:32
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/rag.py:32 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `seed_rag_documents` without auth dependency — backend/api/routers/sector_interaction.py:203
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/sector_interaction.py:203 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `send_telegram_test` without auth dependency — backend/api/routers/auth.py:1564
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/auth.py:1564 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `set_agent_mode` without auth dependency — backend/api/routers/agent.py:85
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/agent.py:85 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `set_mode` without auth dependency — backend/api/routers/trading.py:270
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/trading.py:270 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `shadow_backfill` without auth dependency — backend/api/routers/auction_intelligence.py:424
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/auction_intelligence.py:424 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `shadow_record_live` without auth dependency — backend/api/routers/auction_intelligence.py:400
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/auction_intelligence.py:400 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `start_backtest` without auth dependency — backend/api/routers/analysis.py:1379
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/analysis.py:1379 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `start_commodity_strategy_agent` without auth dependency — backend/api/routers/commodity.py:125
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/commodity.py:125 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `start_download` without auth dependency — backend/api/routers/fo_data.py:176
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/fo_data.py:176 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `start_index_analytics_download` without auth dependency — backend/api/routers/fo_data.py:207
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/fo_data.py:207 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `sync_nse_constituents` without auth dependency — backend/api/routers/sector_interaction.py:37
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/sector_interaction.py:37 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `telegram_discover_chats` without auth dependency — backend/api/routers/auth.py:1486
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/auth.py:1486 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `toggle_rule` without auth dependency — backend/api/routers/agent.py:79
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/agent.py:79 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `upstox_connect_manual` without auth dependency — backend/api/routers/auth.py:1764
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/auth.py:1764 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `validate_gate_a` without auth dependency — backend/api/routers/auction_intelligence.py:598
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/auction_intelligence.py:598 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `modify_order` without auth dependency — backend/api/routers/trading.py:394
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/trading.py:394 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `set_strategy_agent_auto_run` without auth dependency — backend/api/routers/trading.py:551
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/trading.py:551 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `update_commodity_kill_switch` without auth dependency — backend/api/routers/commodity.py:154
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/commodity.py:154 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `update_commodity_strategy_config` without auth dependency — backend/api/routers/commodity.py:135
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/commodity.py:135 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `update_kill_switch` without auth dependency — backend/api/routers/trading.py:469
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/trading.py:469 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `update_risk_config` without auth dependency — backend/api/routers/trading.py:585
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/trading.py:585 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `update_trading_calendar` without auth dependency — backend/api/routers/system.py:543
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
backend/api/routers/system.py:543 securityAuth fastapi unauth mutation
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/984235e8-c1fc-41f4-a258-1cd5cf78c131/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/984235e8-c1fc-41f4-a258-1cd5cf78c131/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.