nginx/nginx

Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

9 of your 49 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 4.95s · analysis 5.68s · 8.0 MB · GitHub API rate-limit (preflight)

https://github.com/nginx/nginx · scanned 2026-05-20 15:23 UTC (2 weeks, 1 day ago) · 10 languages

59 findings (47 legacy + 12 scanner) 0th percentile · C · large (100-500K LoC) Scanner says 93 (lower by 36)

File as issue Image v2 schema

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 weeks, 1 day ago · v2 · 53 findings from 2 sources. Findings combine the legacy security pipeline AND the multi-layer engine (atlas, wiring, flows, ranked) AND verified AI agent contributions.

JSON

Score breakdown â 2026-05-18-v5

Component	Sub-score	Weight	Contribution
`structure_score`	65.0	0.15	9.75
`security_score`	90.0	0.25	22.50
`testing_score`	0.0	0.20	0.00
`documentation_score`	75.0	0.15	11.25
`practices_score`	69.0	0.15	10.35
`code_quality`	30.7	0.10	3.07
Overall		1.00	56.9

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 35 Medium 3 Low 3 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Legacy 47 9-layer 6 Crowd 0 Layer: Security 5 Quality 38 Software 5 Api 1 Frontend 1 Cicd 3

Exclude dismissed / FP Exclude test files

All 479 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`README.md`	software	healthy	`README.md`
`CONTRIBUTING.md`	software	healthy	`CONTRIBUTING.md`
`SUPPORT.md`	software	healthy	`SUPPORT.md`
`CODE_OF_CONDUCT.md`	software	healthy	`CODE_OF_CONDUCT.md`
`SECURITY.md`	software	healthy	`SECURITY.md`
`index.html`	software	healthy	`docs/html/index.html`
`50x.html`	software	healthy	`docs/html/50x.html`
`pull_request_template.md`	software	healthy	`.github/pull_request_template.md`
`bug_report.yml`	software	healthy	`.github/ISSUE_TEMPLATE/bug_report.yml`
`config.yml`	software	healthy	`.github/ISSUE_TEMPLATE/config.yml`
`feature_request.yml`	software	healthy	`.github/ISSUE_TEMPLATE/feature_request.yml`
`ideas.yml`	software	healthy	`.github/DISCUSSION_TEMPLATE/ideas.yml`
`general.yml`	software	healthy	`.github/DISCUSSION_TEMPLATE/general.yml`
`q-a.yml`	software	healthy	`.github/DISCUSSION_TEMPLATE/q-a.yml`
`f5_cla.yml`	software	healthy	`.github/workflows/f5_cla.yml`
`check-pr.yml`	software	healthy	`.github/workflows/check-pr.yml`
`new-issue-welcome.yaml`	software	healthy	`.github/workflows/new-issue-welcome.yaml`
`set-creation-date.yaml`	software	healthy	`.github/workflows/set-creation-date.yaml`
`check-commit-message.yaml`	software	healthy	`.github/workflows/check-commit-message.yaml`
`stale.yaml`	software	healthy	`.github/workflows/stale.yaml`
`check-version-bump.yaml`	software	healthy	`.github/workflows/check-version-bump.yaml`
`buildbot.yml`	software	healthy	`.github/workflows/buildbot.yml`
`check-whitespace.yaml`	software	healthy	`.github/workflows/check-whitespace.yaml`
`ngx_mail_smtp_module.c`	software	healthy	`src/mail/ngx_mail_smtp_module.c`
`ngx_mail_ssl_module.h`	software	healthy	`src/mail/ngx_mail_ssl_module.h`
`ngx_mail_proxy_module.c`	software	healthy	`src/mail/ngx_mail_proxy_module.c`
`ngx_mail_imap_handler.c`	software	healthy	`src/mail/ngx_mail_imap_handler.c`
`ngx_mail_imap_module.h`	software	healthy	`src/mail/ngx_mail_imap_module.h`
`ngx_mail.h`	software	healthy	`src/mail/ngx_mail.h`
`ngx_mail_auth_http_module.c`	software	healthy	`src/mail/ngx_mail_auth_http_module.c`
`ngx_mail_imap_module.c`	software	healthy	`src/mail/ngx_mail_imap_module.c`
`ngx_mail_pop3_module.c`	software	healthy	`src/mail/ngx_mail_pop3_module.c`
`ngx_mail_realip_module.c`	software	healthy	`src/mail/ngx_mail_realip_module.c`
`ngx_mail_pop3_module.h`	software	healthy	`src/mail/ngx_mail_pop3_module.h`
`ngx_mail.c`	software	healthy	`src/mail/ngx_mail.c`
`ngx_mail_ssl_module.c`	software	healthy	`src/mail/ngx_mail_ssl_module.c`
`ngx_mail_parse.c`	software	healthy	`src/mail/ngx_mail_parse.c`
`ngx_mail_handler.c`	software	healthy	`src/mail/ngx_mail_handler.c`
`ngx_mail_smtp_module.h`	software	healthy	`src/mail/ngx_mail_smtp_module.h`
`ngx_mail_pop3_handler.c`	software	healthy	`src/mail/ngx_mail_pop3_handler.c`
`ngx_mail_smtp_handler.c`	software	healthy	`src/mail/ngx_mail_smtp_handler.c`
`ngx_mail_core_module.c`	software	healthy	`src/mail/ngx_mail_core_module.c`
`ngx_http_upstream_round_robin.c`	software	healthy	`src/http/ngx_http_upstream_round_robin.c`
`ngx_http_config.h`	software	healthy	`src/http/ngx_http_config.h`
`ngx_http_request_body.c`	software	healthy	`src/http/ngx_http_request_body.c`
`ngx_http_huff_encode.c`	software	healthy	`src/http/ngx_http_huff_encode.c`
`ngx_http_write_filter_module.c`	software	healthy	`src/http/ngx_http_write_filter_module.c`
`ngx_http_upstream.c`	software	healthy	`src/http/ngx_http_upstream.c`
`ngx_http_script.c`	software	healthy	`src/http/ngx_http_script.c`
`ngx_http_file_cache.c`	software	healthy	`src/http/ngx_http_file_cache.c`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`docs`	software	healthy	`docs`
`html`	software	healthy	`docs/html`
`.github`	software	healthy	`.github`
`ISSUE_TEMPLATE`	software	healthy	`.github/ISSUE_TEMPLATE`
`DISCUSSION_TEMPLATE`	software	healthy	`.github/DISCUSSION_TEMPLATE`
`workflows`	software	healthy	`.github/workflows`
`src`	software	healthy	`src`
`mail`	software	healthy	`src/mail`
`http`	software	healthy	`src/http`
`v2`	software	healthy	`src/http/v2`
`modules`	software	healthy	`src/http/modules`
`perl`	software	healthy	`src/http/modules/perl`
`v3`	software	healthy	`src/http/v3`
`stream`	software	healthy	`src/stream`
`os`	software	healthy	`src/os`
`win32`	software	healthy	`src/os/win32`
`unix`	software	healthy	`src/os/unix`
`core`	software	healthy	`src/core`
`misc`	software	healthy	`src/misc`
`event`	software	healthy	`src/event`
`modules`	software	healthy	`src/event/modules`
`quic`	software	healthy	`src/event/quic`
`bpf`	software	healthy	`src/event/quic/bpf`

Label	Layer	Status	Path
`gha::f5_cla`	cicd	healthy	`.github/workflows/f5_cla.yml`
`gha::check-pr`	cicd	healthy	`.github/workflows/check-pr.yml`
`gha::new-issue-welcome`	cicd	healthy	`.github/workflows/new-issue-welcome.yaml`
`gha::set-creation-date`	cicd	healthy	`.github/workflows/set-creation-date.yaml`
`gha::check-commit-message`	cicd	healthy	`.github/workflows/check-commit-message.yaml`
`gha::stale`	cicd	healthy	`.github/workflows/stale.yaml`
`gha::check-version-bump`	cicd	healthy	`.github/workflows/check-version-bump.yaml`
`gha::buildbot`	cicd	healthy	`.github/workflows/buildbot.yml`
`gha::check-whitespace`	cicd	healthy	`.github/workflows/check-whitespace.yaml`

Label	Layer	Status	Path
`f5-cla`	cicd	healthy	`.github/workflows/f5_cla.yml`
`check-pr`	cicd	healthy	`.github/workflows/check-pr.yml`
`new-issue-welcome`	cicd	healthy	`.github/workflows/new-issue-welcome.yaml`
`set-date`	cicd	healthy	`.github/workflows/set-creation-date.yaml`
`check-commit-messages`	cicd	healthy	`.github/workflows/check-commit-message.yaml`
`mark_stale`	cicd	healthy	`.github/workflows/stale.yaml`
`check-version-bump`	cicd	healthy	`.github/workflows/check-version-bump.yaml`
`buildbot`	cicd	healthy	`.github/workflows/buildbot.yml`
`check-whitespace`	cicd	healthy	`.github/workflows/check-whitespace.yaml`

Label	Layer	Status	Path
`NGINX_OSS_PROJ_PRIV_KEY`	cicd	healthy	`—`
`NGINX_OSS_TENANT_ID`	cicd	healthy	`—`
`GITHUB_TOKEN`	cicd	healthy	`—`
`NGINX_OSS_CLIENT_ID`	cicd	healthy	`—`
`NGINX_OSS_VAULT_NAME`	cicd	healthy	`—`
`F5_CLA_TOKEN`	cicd	healthy	`—`
`STALE_DAYS`	cicd	healthy	`—`
`NGINX_OSS_PROJ_CLIENT_ID`	cicd	healthy	`—`

Label	Layer	Status	Path
`vps::aws`	hardware	healthy	`.github/ISSUE_TEMPLATE/bug_report.yml`
`vps::gcp`	hardware	healthy	`.github/ISSUE_TEMPLATE/bug_report.yml`
`vps::azure`	hardware	healthy	`.github/workflows/set-creation-date.yaml`

Label	Layer	Status	Path
`port:02`	network	healthy	`.github/workflows/stale.yaml`
`port:22`	network	healthy	`.github/workflows/stale.yaml`

Label	Layer	Status	Path
`repobility-clone-oh6juv5v`	software	healthy	`/tmp/repobility-clone-oh6juv5v`

Label	Layer	Status	Path
`nginx`	network	healthy	`.github/ISSUE_TEMPLATE/bug_report.yml`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/9f08cd24-08f7-4a0a-8ed3-f69967e24690/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/9f08cd24-08f7-4a0a-8ed3-f69967e24690/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

nginx/nginx

Complete repo analysis

file 50+

directory 23

pipeline 9

job 9

env_var 8

vps 3

port 2

repo 1

load_balancer 1