Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo
59 of your 284 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 3.13s · analysis 50.9s · 5.1 MB · GitHub preflight 409ms

sipcapture/homer

https://github.com/sipcapture/homer · scanned 2026-06-05 19:25 UTC (1 week ago) · 10 languages

487 raw signals (271 security + 216 graph) 6th percentile · Go · large (100-500K LoC)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 1 week ago · v2 · 229 actionable findings from 2 signal sources. 150 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
51.3
/100
Security checks
46
145 findings
System graph
57
100.0% cov · 84 findings
Critical
3
click to filter
Agents
6
0 votes
Crowd
0
reported
Score breakdown â 2026-05-18-v5
Component Sub-score Weight Contribution
structure_score 65.0 0.15 9.75
security_score 14.6 0.25 3.65
testing_score 80.0 0.20 16.00
documentation_score 81.6 0.15 12.24
practices_score 77.0 0.15 11.55
code_quality 36.7 0.10 3.67
Overall 1.00 56.9
Severity distribution — click a segment to filter
Active filters: severity: critical × excluding tests × Reset all
Severity: Critical 3 High 96 Medium 33 Low 43 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 145 System graph 84 Crowd 0 Layer: Security 11 Software 129 Cicd 11 Quality 48 Frontend 23 Hardware 5 Api 2
Scan summary Quality grade C (57/100). Dimensions: security 15, maintainability 65. 271 findings (146 security). 109,342 lines analyzed.

Showing 3 of 229 actionable findings. 379 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

critical Security checks security secrets conf 0.95 9 occurrences Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
Gitleaks detected a committed secret or credential pattern.
5 files, 9 locations
src/config/env_test.go:99, 180, 638, 746 (4 hits)
examples/homer-writer-rustfs.json:101, 142 (2 hits)
examples/docker/docker-compose.yaml:197
examples/docker/docker-compose_s3direct.yaml:185
src/config/config.go:734
critical System graph security Secrets conf 1.00 Possible secret in src/cli/wizard_cmd.go
Detected pattern matching password_literal. Rotate the credential and move to a secret manager.
src/cli/wizard_cmd.go:417
critical System graph security Secrets conf 1.00 Possible secret in src/system/webmessages/webmessages.go
Detected pattern matching password_literal. Rotate the credential and move to a secret manager.
src/system/webmessages/webmessages.go:52
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/9a6b9d51-b227-4aae-8dc9-80771afa4e9d/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/9a6b9d51-b227-4aae-8dc9-80771afa4e9d/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.