https://github.com/golang/go
· scanned 2026-06-05 04:52 UTC (5 hours, 21 minutes ago)
· 10 languages
651 findings (117 legacy + 534 scanner) 11/13 scanners ran 33rd percentile · Go · huge (>500K LoC) Scanner says 72 (higher by 7)
Last scanned 5 hours, 21 minutes ago · v2 · 384 findings from 2 sources. Findings combine the legacy security pipeline AND the multi-layer engine (atlas, wiring, flows, ranked) AND verified AI agent contributions.
| Component | Sub-score | Weight | Contribution |
|---|---|---|---|
structure_score |
65.0 | 0.15 | 9.75 |
security_score |
100.0 | 0.25 | 25.00 |
testing_score |
85.0 | 0.20 | 17.00 |
documentation_score |
93.0 | 0.15 | 13.95 |
practices_score |
40.0 | 0.15 | 6.00 |
code_quality |
70.0 | 0.10 | 7.00 |
| Overall | 1.00 | 78.7 |
All 12379 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.
| Label | Layer | Status | Path |
|---|---|---|---|
README.md |
software | healthy | README.md |
CONTRIBUTING.md |
software | healthy | CONTRIBUTING.md |
SECURITY.md |
software | healthy | SECURITY.md |
sliceopt.go |
software | healthy | test/sliceopt.go |
convert5.go |
software | healthy | test/convert5.go |
sieve.go |
software | healthy | test/sieve.go |
embedfunc.go |
software | healthy | test/embedfunc.go |
live1.go |
software | healthy | test/live1.go |
prove.go |
software | healthy | test/prove.go |
goprint.go |
software | healthy | test/goprint.go |
linkname3.go |
software | healthy | test/linkname3.go |
escape_indir.go |
software | healthy | test/escape_indir.go |
strcopy.go |
software | healthy | test/strcopy.go |
import2.go |
software | healthy | test/import2.go |
struct0.go |
software | healthy | test/struct0.go |
escape_hash_maphash.go |
software | healthy | test/escape_hash_maphash.go |
indirect.go |
software | healthy | test/indirect.go |
convT2X.go |
software | healthy | test/convT2X.go |
nul1.go |
software | healthy | test/nul1.go |
torture.go |
software | healthy | test/torture.go |
switch4.go |
software | healthy | test/switch4.go |
append1.go |
software | healthy | test/append1.go |
shift1.go |
software | healthy | test/shift1.go |
indirect1.go |
software | healthy | test/indirect1.go |
escape4.go |
software | healthy | test/escape4.go |
blank1.go |
software | healthy | test/blank1.go |
assign.go |
software | healthy | test/assign.go |
funcdup.go |
software | healthy | test/funcdup.go |
blank.go |
software | healthy | test/blank.go |
recover5.go |
software | healthy | test/recover5.go |
stringrange.go |
software | healthy | test/stringrange.go |
linkmain_run.go |
software | healthy | test/linkmain_run.go |
sizeof.go |
software | healthy | test/sizeof.go |
shift3.go |
software | healthy | test/shift3.go |
rename1.go |
software | healthy | test/rename1.go |
unsafe_string_data.go |
software | healthy | test/unsafe_string_data.go |
alias3.go |
software | healthy | test/alias3.go |
escape_mutations.go |
software | healthy | test/escape_mutations.go |
method3.go |
software | healthy | test/method3.go |
cmp6.go |
software | healthy | test/cmp6.go |
escape_iface_data.go |
software | healthy | test/escape_iface_data.go |
init.go |
software | healthy | test/init.go |
escape3.go |
software | healthy | test/escape3.go |
slice3err.go |
software | healthy | test/slice3err.go |
convert4.go |
software | healthy | test/convert4.go |
runtime.go |
software | healthy | test/runtime.go |
append.go |
software | healthy | test/append.go |
escape_struct_return.go |
software | healthy | test/escape_struct_return.go |
makechan.go |
software | healthy | test/makechan.go |
reorder2.go |
software | healthy | test/reorder2.go |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
test |
software | healthy | test |
typeparam |
software | healthy | test/typeparam |
issue48280.dir |
software | healthy | test/typeparam/issue48280.dir |
issue50598.dir |
software | healthy | test/typeparam/issue50598.dir |
issue47775.dir |
software | healthy | test/typeparam/issue47775.dir |
issue49667.dir |
software | healthy | test/typeparam/issue49667.dir |
select.dir |
software | healthy | test/typeparam/select.dir |
issue51423.dir |
software | healthy | test/typeparam/issue51423.dir |
orderedmapsimp.dir |
software | healthy | test/typeparam/orderedmapsimp.dir |
setsimp.dir |
software | healthy | test/typeparam/setsimp.dir |
issue48185b.dir |
software | healthy | test/typeparam/issue48185b.dir |
listimp.dir |
software | healthy | test/typeparam/listimp.dir |
mutualimp.dir |
software | healthy | test/typeparam/mutualimp.dir |
issue49524.dir |
software | healthy | test/typeparam/issue49524.dir |
stringerimp.dir |
software | healthy | test/typeparam/stringerimp.dir |
issue49536.dir |
software | healthy | test/typeparam/issue49536.dir |
issue48094.dir |
software | healthy | test/typeparam/issue48094.dir |
minimp.dir |
software | healthy | test/typeparam/minimp.dir |
issue48462.dir |
software | healthy | test/typeparam/issue48462.dir |
issue52117.dir |
software | healthy | test/typeparam/issue52117.dir |
issue48337a.dir |
software | healthy | test/typeparam/issue48337a.dir |
absdiffimp2.dir |
software | healthy | test/typeparam/absdiffimp2.dir |
issue50486.dir |
software | healthy | test/typeparam/issue50486.dir |
mapsimp.dir |
software | healthy | test/typeparam/mapsimp.dir |
issue50561.dir |
software | healthy | test/typeparam/issue50561.dir |
issue47514c.dir |
software | healthy | test/typeparam/issue47514c.dir |
issue51250a.dir |
software | healthy | test/typeparam/issue51250a.dir |
valimp.dir |
software | healthy | test/typeparam/valimp.dir |
issue50485.dir |
software | healthy | test/typeparam/issue50485.dir |
issue51836.dir |
software | healthy | test/typeparam/issue51836.dir |
recoverimp.dir |
software | healthy | test/typeparam/recoverimp.dir |
issue49027.dir |
software | healthy | test/typeparam/issue49027.dir |
issue48337b.dir |
software | healthy | test/typeparam/issue48337b.dir |
issue48454.dir |
software | healthy | test/typeparam/issue48454.dir |
issue48094b.dir |
software | healthy | test/typeparam/issue48094b.dir |
aliasimp.dir |
software | healthy | test/typeparam/aliasimp.dir |
issue50121.dir |
software | healthy | test/typeparam/issue50121.dir |
issue50481c.dir |
software | healthy | test/typeparam/issue50481c.dir |
mapimp.dir |
software | healthy | test/typeparam/mapimp.dir |
issue48716.dir |
software | healthy | test/typeparam/issue48716.dir |
issue50841.dir |
software | healthy | test/typeparam/issue50841.dir |
absdiffimp.dir |
software | healthy | test/typeparam/absdiffimp.dir |
dedup.dir |
software | healthy | test/typeparam/dedup.dir |
pairimp.dir |
software | healthy | test/typeparam/pairimp.dir |
issue49893.dir |
software | healthy | test/typeparam/issue49893.dir |
issue51367.dir |
software | healthy | test/typeparam/issue51367.dir |
issue49246.dir |
software | healthy | test/typeparam/issue49246.dir |
issue50552.dir |
software | healthy | test/typeparam/issue50552.dir |
issue48306.dir |
software | healthy | test/typeparam/issue48306.dir |
issue54302.dir |
software | healthy | test/typeparam/issue54302.dir |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
127.0.0.1 |
network | healthy | test/escape_slice.go |
4.3.9.2 |
network | healthy | src/archive/zip/writer.go |
7.4.1.4 |
network | healthy | src/crypto/tls/common.go |
4.4.2.2 |
network | healthy | src/crypto/tls/common.go |
4.2.11.2 |
network | healthy | src/crypto/tls/key_schedule.go |
7.4.7.1 |
network | healthy | src/crypto/tls/key_agreement.go |
4.2.8.2 |
network | healthy | src/crypto/tls/key_agreement.go |
6.2.3.2 |
network | healthy | src/crypto/tls/conn.go |
4.2.11.1 |
network | healthy | src/crypto/tls/handshake_client.go |
1.2.3.4 |
network | healthy | src/crypto/tls/handshake_client_test.go |
4.4.2.1 |
network | healthy | src/crypto/tls/handshake_messages.go |
6.1.2.2 |
network | healthy | src/crypto/ecdh/ecdh.go |
3.1.5.1 |
network | healthy | src/crypto/internal/entropy/v1.0.0/entropy.go |
5.6.1.2 |
network | healthy | src/crypto/internal/fips140/ecdh/ecdh.go |
5.6.2.1 |
network | healthy | src/crypto/internal/fips140/ecdh/ecdh.go |
7.10.3.3 |
network | healthy | src/crypto/internal/fips140/ecdh/ecdh.go |
5.6.2.3 |
network | healthy | src/crypto/internal/fips140/ecdh/ecdh.go |
5.7.1.2 |
network | healthy | src/crypto/internal/fips140/ecdh/ecdh.go |
10.1.2.3 |
network | healthy | src/crypto/internal/fips140/ecdsa/hmacdrbg.go |
10.1.2.2 |
network | healthy | src/crypto/internal/fips140/ecdsa/hmacdrbg.go |
10.1.2.5 |
network | healthy | src/crypto/internal/fips140/ecdsa/hmacdrbg.go |
10.2.1.3 |
network | healthy | src/crypto/internal/fips140/drbg/ctrdrbg.go |
10.2.1.2 |
network | healthy | src/crypto/internal/fips140/drbg/ctrdrbg.go |
10.2.1.4 |
network | healthy | src/crypto/internal/fips140/drbg/ctrdrbg.go |
10.2.1.5 |
network | healthy | src/crypto/internal/fips140/drbg/ctrdrbg.go |
4.2.1.1 |
network | healthy | src/crypto/x509/x509.go |
2.1.1.1 |
network | healthy | src/crypto/x509/x509.go |
4.2.1.12 |
network | healthy | src/crypto/x509/x509.go |
1.3.6.1 |
network | healthy | src/crypto/x509/x509.go |
5.5.7.3 |
network | healthy | src/crypto/x509/x509.go |
4.2.2.1 |
network | healthy | src/crypto/x509/x509.go |
4.2.1.9 |
network | healthy | src/crypto/x509/x509.go |
4.2.1.4 |
network | healthy | src/crypto/x509/x509.go |
4.2.1.14 |
network | healthy | src/crypto/x509/x509.go |
4.2.1.6 |
network | healthy | src/crypto/x509/x509.go |
4.1.2.2 |
network | healthy | src/crypto/x509/x509.go |
4.2.1.2 |
network | healthy | src/crypto/x509/x509.go |
4.3.2.1 |
network | healthy | src/crypto/x509/verify_test.go |
4.10.1.1 |
network | healthy | src/crypto/x509/pkits_test.go |
4.10.1.2 |
network | healthy | src/crypto/x509/pkits_test.go |
4.10.1.3 |
network | healthy | src/crypto/x509/pkits_test.go |
0.1.2.3 |
network | healthy | src/crypto/x509/oid_test.go |
1.1.2.3 |
network | healthy | src/crypto/x509/oid_test.go |
2.6.2.3 |
network | healthy | src/crypto/x509/oid_test.go |
192.168.1.1 |
network | healthy | src/crypto/x509/x509_test.go |
192.168.0.0 |
network | healthy | src/crypto/x509/x509_test.go |
1.0.0.0 |
network | healthy | src/crypto/x509/x509_test.go |
2.5.4.42 |
network | healthy | src/crypto/x509/x509_test.go |
2.3.4.5 |
network | healthy | src/crypto/x509/x509_test.go |
4.1.311.21 |
network | healthy | src/crypto/x509/x509_test.go |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
goreposum |
software | healthy | lib/hg/goreposum.py:34 |
golookup |
software | healthy | lib/hg/goreposum.py:59 |
enosys |
software | healthy | lib/wasm/wasm_exec.js:enosys |
setInt64 |
software | healthy | lib/wasm/wasm_exec.js:setInt64 |
setInt32 |
software | healthy | lib/wasm/wasm_exec.js:setInt32 |
getInt64 |
software | healthy | lib/wasm/wasm_exec.js:getInt64 |
loadValue |
software | healthy | lib/wasm/wasm_exec.js:loadValue |
storeValue |
software | healthy | lib/wasm/wasm_exec.js:storeValue |
loadSlice |
software | healthy | lib/wasm/wasm_exec.js:loadSlice |
loadSliceOfValues |
software | healthy | lib/wasm/wasm_exec.js:loadSliceOfValues |
loadString |
software | healthy | lib/wasm/wasm_exec.js:loadString |
testCallExport |
software | healthy | lib/wasm/wasm_exec.js:testCallExport |
msec |
software | healthy | lib/wasm/wasm_exec.js:msec |
strPtr |
software | healthy | lib/wasm/wasm_exec.js:strPtr |
openURL |
software | healthy | misc/chrome/gophertool/popup.js:openURL |
addLinks |
software | healthy | misc/chrome/gophertool/popup.js:addLinks |
urlForInput |
software | healthy | misc/chrome/gophertool/gopher.js:urlForInput |
t |
software | healthy | src/internal/trace/traceviewer/static/webcomponents.min.js:t |
read_runtime_const |
software | healthy | src/runtime/runtime-gdb.py:33 |
__init__ |
software | healthy | src/runtime/runtime-gdb.py:665 |
len |
software | healthy | src/runtime/runtime-gdb.py:88 |
cap |
software | healthy | src/runtime/runtime-gdb.py:92 |
__getitem__ |
software | healthy | src/runtime/runtime-gdb.py:95 |
display_hint |
software | dead | src/runtime/runtime-gdb.py:437 |
to_string |
software | dead | src/runtime/runtime-gdb.py:440 |
children |
software | dead | src/runtime/runtime-gdb.py:299 |
group_slots |
software | healthy | src/runtime/runtime-gdb.py:176 |
paramtypematch |
software | healthy | src/runtime/runtime-gdb.py:308 |
makematcher |
software | healthy | src/runtime/runtime-gdb.py:315 |
matcher |
software | dead | src/runtime/runtime-gdb.py:316 |
pc_to_int |
software | healthy | src/runtime/runtime-gdb.py:331 |
is_iface |
software | healthy | src/runtime/runtime-gdb.py:358 |
is_eface |
software | healthy | src/runtime/runtime-gdb.py:365 |
lookup_type |
software | healthy | src/runtime/runtime-gdb.py:372 |
iface_commontype |
software | healthy | src/runtime/runtime-gdb.py:387 |
iface_dtype |
software | healthy | src/runtime/runtime-gdb.py:398 |
iface_dtype_name |
software | healthy | src/runtime/runtime-gdb.py:420 |
ifacematcher |
software | dead | src/runtime/runtime-gdb.py:459 |
invoke |
software | dead | src/runtime/runtime-gdb.py:668 |
linked_list |
software | dead | src/runtime/runtime-gdb.py:526 |
find_goroutine |
software | healthy | src/runtime/runtime-gdb.py:555 |
invoke_per_goid |
software | healthy | src/runtime/runtime-gdb.py:637 |
| Label | Layer | Status | Path |
|---|---|---|---|
password_literal::test/escape_slice.go |
security | healthy | test/escape_slice.go |
password_literal::src/internal/exportdata/exportdata.go |
security | healthy | src/internal/exportdata/exportdata.go |
password_literal::src/internal/testenv/testenv_test.go |
security | healthy | src/internal/testenv/testenv_test.go |
password_literal::src/internal/testenv/testenv_test.go |
security | healthy | src/internal/testenv/testenv_test.go |
password_literal::src/cmd/internal/moddeps/moddeps_test.go |
security | healthy | src/cmd/internal/moddeps/moddeps_test.go |
password_literal::src/cmd/internal/testdir/testdir_test.go |
security | healthy | src/cmd/internal/testdir/testdir_test.go |
password_literal::src/cmd/internal/testdir/testdir_test.go |
security | healthy | src/cmd/internal/testdir/testdir_test.go |
password_literal::src/cmd/cgo/internal/testplugin/plugin_te… |
security | healthy | src/cmd/cgo/internal/testplugin/plugin_test.go |
password_literal::src/cmd/go/internal/base/env.go |
security | healthy | src/cmd/go/internal/base/env.go |
password_literal::src/cmd/go/internal/auth/gitauth_test.go |
security | healthy | src/cmd/go/internal/auth/gitauth_test.go |
password_literal::src/cmd/go/internal/auth/gitauth_test.go |
security | healthy | src/cmd/go/internal/auth/gitauth_test.go |
password_literal::src/cmd/go/internal/auth/gitauth_test.go |
security | healthy | src/cmd/go/internal/auth/gitauth_test.go |
password_literal::src/cmd/go/internal/vcweb/hg.go |
security | healthy | src/cmd/go/internal/vcweb/hg.go |
password_literal::src/os/exec/exec_posix_test.go |
security | healthy | src/os/exec/exec_posix_test.go |
password_literal::src/os/exec/exec_posix_test.go |
security | healthy | src/os/exec/exec_posix_test.go |
password_literal::src/os/exec/exec_posix_test.go |
security | healthy | src/os/exec/exec_posix_test.go |
password_literal::src/os/exec/exec_posix_test.go |
security | healthy | src/os/exec/exec_posix_test.go |
password_literal::src/os/exec/exec_posix_test.go |
security | healthy | src/os/exec/exec_posix_test.go |
password_literal::src/os/exec/exec.go |
security | healthy | src/os/exec/exec.go |
password_literal::src/net/url/gen_encoding_table.go |
security | healthy | src/net/url/gen_encoding_table.go |
| Label | Layer | Status | Path |
|---|---|---|---|
SliceValue |
software | healthy | src/runtime/runtime-gdb.py:81 |
StringTypePrinter |
software | healthy | src/runtime/runtime-gdb.py:107 |
SliceTypePrinter |
software | healthy | src/runtime/runtime-gdb.py:123 |
MapTypePrinter |
software | healthy | src/runtime/runtime-gdb.py:148 |
ChanTypePrinter |
software | healthy | src/runtime/runtime-gdb.py:281 |
IfacePrinter |
software | healthy | src/runtime/runtime-gdb.py:429 |
GoLenFunc |
software | healthy | src/runtime/runtime-gdb.py:470 |
GoCapFunc |
software | healthy | src/runtime/runtime-gdb.py:491 |
DTypeFunc |
software | healthy | src/runtime/runtime-gdb.py:506 |
GoroutinesCmd |
software | healthy | src/runtime/runtime-gdb.py:532 |
GoroutineCmd |
software | healthy | src/runtime/runtime-gdb.py:605 |
GoIfaceCmd |
software | healthy | src/runtime/runtime-gdb.py:662 |
| Label | Layer | Status | Path |
|---|---|---|---|
port:18 |
network | healthy | .github/ISSUE_TEMPLATE/04-vuln.yml |
port:46 |
network | healthy | .github/ISSUE_TEMPLATE/04-vuln.yml |
port:15 |
network | healthy | .github/ISSUE_TEMPLATE/04-vuln.yml |
port:39 |
network | healthy | .github/ISSUE_TEMPLATE/04-vuln.yml |
port:443 |
network | healthy | src/net/http/internal/http2/transport.go |
port:80 |
network | healthy | src/net/http/internal/http2/transport.go |
| Label | Layer | Status | Path |
|---|---|---|---|
image::src/crypto/internal/boring/Dockerfile |
hardware | healthy | src/crypto/internal/boring/Dockerfile |
image::src/crypto/internal/fips140/nistec/fiat/Dockerfile |
hardware | healthy | src/crypto/internal/fips140/nistec/fiat/Dockerfile |
| Label | Layer | Status | Path |
|---|---|---|---|
repobility-clone-qt0teb81 |
software | healthy | /tmp/repobility-clone-qt0teb81 |
| Label | Layer | Status | Path |
|---|---|---|---|
nginx |
network | healthy | src/net/http/transport.go |
| Label | Layer | Status | Path |
|---|---|---|---|
auth::src/net/http/httputil/dump_test.go |
security | healthy | src/net/http/httputil/dump_test.go |
This page is publicly accessible at:
https://repobility.com/scan/9a893486-8823-4472-92e2-5fded52d41d6/
To check status programmatically (no auth required):
curl -s https://repobility.com/api/v1/public/scan/9a893486-8823-4472-92e2-5fded52d41d6/
Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.