bancolombia/scaffold-clean-architecture

Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

30 of your 108 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 3.02s · analysis 14.51s · 3.3 MB · GitHub API rate-limit (preflight)

bancolombia/scaffold-clean-architecture

https://github.com/bancolombia/scaffold-clean-architecture · scanned 2026-06-05 13:24 UTC (5 days, 7 hours ago) · 10 languages

171 raw signals (101 security + 70 graph) 27th percentile · Java · medium (20-100K LoC) System graph score 83 (lower by 21)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 5 days, 7 hours ago · v2 · 77 actionable findings from 2 signal sources. 59 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

100.0% cov · 21 findings

Score breakdown â 2026-05-18-v5

Component	Sub-score	Weight	Contribution
`structure_score`	65.0	0.15	9.75
`security_score`	28.0	0.25	7.00
`testing_score`	80.0	0.20	16.00
`documentation_score`	70.0	0.15	10.50
`practices_score`	74.0	0.15	11.10
`code_quality`	74.2	0.10	7.42
Overall		1.00	61.8

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 2 High 26 Medium 26 Low 12 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 56 System graph 21 Crowd 0 Layer: Software 34 Cicd 18 Security 2 Quality 10 Api 1 Frontend 1 Hardware 11

Exclude dismissed / FP Exclude test files

All 1279 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`docs`	software	healthy	`docs`
`docs`	software	healthy	`docs/docs`
`tasks`	software	healthy	`docs/docs/tasks`
`advanced`	software	healthy	`docs/docs/advanced`
`src`	software	healthy	`docs/src`
`components`	software	healthy	`docs/src/components`
`HomepageFeatures`	software	healthy	`docs/src/components/HomepageFeatures`
`css`	software	healthy	`docs/src/css`
`pages`	software	healthy	`docs/src/pages`
`examples-ca`	software	healthy	`examples-ca`
`example-redis`	software	healthy	`examples-ca/example-redis`
`deployment`	software	healthy	`examples-ca/example-redis/deployment`
`infrastructure`	software	healthy	`examples-ca/example-redis/infrastructure`
`driven-adapters`	software	healthy	`examples-ca/example-redis/infrastructure/driven-adapters`
`redis`	software	healthy	`examples-ca/example-redis/infrastructure/driven-adapters/re…`
`src`	software	healthy	`examples-ca/example-redis/infrastructure/driven-adapters/re…`
`main`	software	healthy	`examples-ca/example-redis/infrastructure/driven-adapters/re…`
`java`	software	healthy	`examples-ca/example-redis/infrastructure/driven-adapters/re…`
`co`	software	healthy	`examples-ca/example-redis/infrastructure/driven-adapters/re…`
`com`	software	healthy	`examples-ca/example-redis/infrastructure/driven-adapters/re…`
`bancolombia`	software	healthy	`examples-ca/example-redis/infrastructure/driven-adapters/re…`
`redis`	software	healthy	`examples-ca/example-redis/infrastructure/driven-adapters/re…`
`repository`	software	healthy	`examples-ca/example-redis/infrastructure/driven-adapters/re…`
`helper`	software	healthy	`examples-ca/example-redis/infrastructure/driven-adapters/re…`
`entry-points`	software	healthy	`examples-ca/example-redis/infrastructure/entry-points`
`api-rest`	software	healthy	`examples-ca/example-redis/infrastructure/entry-points/api-r…`
`src`	software	healthy	`examples-ca/example-redis/infrastructure/entry-points/api-r…`
`main`	software	healthy	`examples-ca/example-redis/infrastructure/entry-points/api-r…`
`java`	software	healthy	`examples-ca/example-redis/infrastructure/entry-points/api-r…`
`co`	software	healthy	`examples-ca/example-redis/infrastructure/entry-points/api-r…`
`com`	software	healthy	`examples-ca/example-redis/infrastructure/entry-points/api-r…`
`bancolombia`	software	healthy	`examples-ca/example-redis/infrastructure/entry-points/api-r…`
`api`	software	healthy	`examples-ca/example-redis/infrastructure/entry-points/api-r…`
`applications`	software	healthy	`examples-ca/example-redis/applications`
`app-service`	software	healthy	`examples-ca/example-redis/applications/app-service`
`src`	software	healthy	`examples-ca/example-redis/applications/app-service/src`
`main`	software	healthy	`examples-ca/example-redis/applications/app-service/src/main`
`resources`	software	healthy	`examples-ca/example-redis/applications/app-service/src/main…`
`java`	software	healthy	`examples-ca/example-redis/applications/app-service/src/main…`
`co`	software	healthy	`examples-ca/example-redis/applications/app-service/src/main…`
`com`	software	healthy	`examples-ca/example-redis/applications/app-service/src/main…`
`bancolombia`	software	healthy	`examples-ca/example-redis/applications/app-service/src/main…`
`config`	software	healthy	`examples-ca/example-redis/applications/app-service/src/main…`
`domain`	software	healthy	`examples-ca/example-redis/domain`
`usecase`	software	healthy	`examples-ca/example-redis/domain/usecase`
`src`	software	healthy	`examples-ca/example-redis/domain/usecase/src`
`main`	software	healthy	`examples-ca/example-redis/domain/usecase/src/main`
`java`	software	healthy	`examples-ca/example-redis/domain/usecase/src/main/java`
`co`	software	healthy	`examples-ca/example-redis/domain/usecase/src/main/java/co`
`com`	software	healthy	`examples-ca/example-redis/domain/usecase/src/main/java/co/c…`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`README.md`	software	healthy	`README.md`
`sh_publish_plugin_local.sh`	software	healthy	`sh_publish_plugin_local.sh`
`sh_dependencies.json`	software	healthy	`sh_dependencies.json`
`.pre-commit-config.yaml`	software	healthy	`.pre-commit-config.yaml`
`build.gradle`	software	healthy	`build.gradle`
`SECURITY.md`	software	healthy	`SECURITY.md`
`CHANGELOG.md`	software	healthy	`CHANGELOG.md`
`sh_generate_project.sh`	software	healthy	`sh_generate_project.sh`
`babel.config.js`	software	warning	`docs/babel.config.js`
`README.md`	software	healthy	`docs/README.md`
`package.json`	software	healthy	`docs/package.json`
`sidebars.js`	software	warning	`docs/sidebars.js`
`package-lock.json`	software	healthy	`docs/package-lock.json`
`version.js`	software	healthy	`docs/version.js`
`docusaurus.config.js`	software	warning	`docs/docusaurus.config.js`
`1-intro.md`	software	healthy	`docs/docs/1-intro.md`
`2-getting-started.md`	software	healthy	`docs/docs/2-getting-started.md`
`3-contributing.md`	software	healthy	`docs/docs/3-contributing.md`
`7-generate-pipeline.md`	software	healthy	`docs/docs/tasks/7-generate-pipeline.md`
`5-generate-entry-point.md`	software	healthy	`docs/docs/tasks/5-generate-entry-point.md`
`9-generate-performance-test.md`	software	healthy	`docs/docs/tasks/9-generate-performance-test.md`
`6-generate-helper.md`	software	healthy	`docs/docs/tasks/6-generate-helper.md`
`12-update-project.md`	software	healthy	`docs/docs/tasks/12-update-project.md`
`2-generate-model.md`	software	healthy	`docs/docs/tasks/2-generate-model.md`
`1-generate-project.md`	software	healthy	`docs/docs/tasks/1-generate-project.md`
`8-generate-acceptance-test.md`	software	healthy	`docs/docs/tasks/8-generate-acceptance-test.md`
`3-generate-use-case.md`	software	healthy	`docs/docs/tasks/3-generate-use-case.md`
`4-generate-driven-adapter.md`	software	healthy	`docs/docs/tasks/4-generate-driven-adapter.md`
`10-validate-structure.md`	software	healthy	`docs/docs/tasks/10-validate-structure.md`
`11-delete-module.md`	software	healthy	`docs/docs/tasks/11-delete-module.md`
`_category_.json`	software	healthy	`docs/docs/tasks/_category_.json`
`1-arch-unit-analysis.md`	software	healthy	`docs/docs/advanced/1-arch-unit-analysis.md`
`3-gradle-cache.md`	software	healthy	`docs/docs/advanced/3-gradle-cache.md`
`2-use-as-updater.md`	software	healthy	`docs/docs/advanced/2-use-as-updater.md`
`_category_.json`	software	healthy	`docs/docs/advanced/_category_.json`
`index.js`	software	healthy	`docs/src/components/HomepageFeatures/index.js`
`styles.module.css`	software	healthy	`docs/src/components/HomepageFeatures/styles.module.css`
`custom.css`	software	healthy	`docs/src/css/custom.css`
`index.module.css`	software	healthy	`docs/src/pages/index.module.css`
`index.js`	software	healthy	`docs/src/pages/index.js`
`README.md`	software	healthy	`examples-ca/example-redis/README.md`
`build.gradle`	software	healthy	`examples-ca/example-redis/build.gradle`
`Dockerfile`	software	healthy	`examples-ca/example-redis/deployment/Dockerfile`
`docker-compose.yml`	software	healthy	`examples-ca/example-redis/deployment/docker-compose.yml`
`build.gradle`	software	healthy	`examples-ca/example-redis/infrastructure/driven-adapters/re…`
`RedisRepositoryAdapter.java`	software	healthy	`examples-ca/example-redis/infrastructure/driven-adapters/re…`
`TupleRedis.java`	software	healthy	`examples-ca/example-redis/infrastructure/driven-adapters/re…`
`RedisRepository.java`	software	healthy	`examples-ca/example-redis/infrastructure/driven-adapters/re…`
`TupleRepositoryImpl.java`	software	healthy	`examples-ca/example-redis/infrastructure/driven-adapters/re…`
`RepositoryAdapterOperations.java`	software	healthy	`examples-ca/example-redis/infrastructure/driven-adapters/re…`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`APP_PRIVATE_KEY_ADMIN_GITHUB`	cicd	healthy	`—`
`SECRET_MAVEN_USER`	cicd	healthy	`—`
`SIGNING_KEY_FILE`	cicd	healthy	`—`
`APP_ID_ADMIN_GITHUB`	cicd	healthy	`—`
`GITHUB_TOKEN`	cicd	healthy	`—`
`SCORECARD_READ_TOKEN`	cicd	healthy	`—`
`ANALYTICS_ENDPOINT`	cicd	healthy	`—`
`KEY_GRADLE`	cicd	healthy	`—`
`SIGNING_KEY_PASSWORD`	cicd	healthy	`—`
`SIGNING_KEY_ID`	cicd	healthy	`—`
`SONAR_TOKEN_GENERATED_I`	cicd	healthy	`—`
`RELEASE_VERSION`	cicd	healthy	`—`
`SECRET_GRADLE`	cicd	healthy	`—`
`SONAR_TOKEN`	cicd	healthy	`—`
`SECRET_MAVEN_PASSWORD`	cicd	healthy	`—`

Label	Layer	Status	Path
`image::examples-ca/example-redis/deployment/Dockerfile`	hardware	healthy	`examples-ca/example-redis/deployment/Dockerfile`
`image::examples-ca/example-r2dbc/deployment/Dockerfile`	hardware	healthy	`examples-ca/example-r2dbc/deployment/Dockerfile`
`image::examples-ca/s3-example/deployment/Dockerfile`	hardware	healthy	`examples-ca/s3-example/deployment/Dockerfile`
`image::examples-ca/example-dynamo/deployment/Dockerfile`	hardware	healthy	`examples-ca/example-dynamo/deployment/Dockerfile`
`image::examples-ca/example-mongo/deployment/Dockerfile`	hardware	healthy	`examples-ca/example-mongo/deployment/Dockerfile`
`image::examples-ca/channel-operations/deployment/Dockerfile`	hardware	healthy	`examples-ca/channel-operations/deployment/Dockerfile`
`image::examples-ca/example-article/deployment/Dockerfile`	hardware	healthy	`examples-ca/example-article/deployment/Dockerfile`
`image::examples-ca/example-rest-consumer/rest-consumer-clie…`	hardware	healthy	`examples-ca/example-rest-consumer/rest-consumer-client/depl…`
`image::examples-ca/example-rest-consumer/rest-consumer-serv…`	hardware	healthy	`examples-ca/example-rest-consumer/rest-consumer-server/depl…`
`cache`	hardware	healthy	`examples-ca/example-redis/deployment/docker-compose.yml`
`db`	hardware	healthy	`examples-ca/example-r2dbc/deployment/docker-compose.yml`
`localstack`	hardware	healthy	`examples-ca/s3-example/deployment/docker-compose.yml`

Label	Layer	Status	Path
`port:6379`	network	healthy	`examples-ca/example-redis/deployment/docker-compose.yml`
`port:8080`	network	healthy	`examples-ca/example-redis/applications/app-service/src/main…`
`port:5433`	network	healthy	`examples-ca/example-r2dbc/deployment/docker-compose.yml`
`port:5432`	network	healthy	`examples-ca/example-r2dbc/deployment/docker-compose.yml`
`port:4566`	network	healthy	`examples-ca/s3-example/deployment/docker-compose.yml`
`port:4559`	network	healthy	`examples-ca/s3-example/deployment/docker-compose.yml`
`port:4510`	network	healthy	`examples-ca/s3-example/deployment/docker-compose.yml`
`port:27017`	network	healthy	`examples-ca/example-mongo/deployment/stack.yml`
`port:8081`	network	healthy	`examples-ca/example-mongo/deployment/stack.yml`
`port:07`	network	healthy	`.github/workflows/updater.yml`

Label	Layer	Status	Path
`auth::src/main/resources/driven-adapter/cognito-token-provi…`	security	healthy	`src/main/resources/driven-adapter/cognito-token-provider/re…`
`auth::src/main/resources/entry-point/rest-mvc/authorization…`	security	healthy	`src/main/resources/entry-point/rest-mvc/authorization/defin…`
`auth::src/main/java/co/com/bancolombia/factory/entrypoints/…`	security	healthy	`src/main/java/co/com/bancolombia/factory/entrypoints/EntryP…`
`auth::src/test/java/co/com/bancolombia/task/GenerateDrivenA…`	security	healthy	`src/test/java/co/com/bancolombia/task/GenerateDrivenAdapter…`
`auth::src/main/java/co/com/bancolombia/task/GenerateEntryPo…`	security	healthy	`src/main/java/co/com/bancolombia/task/GenerateEntryPointTas…`
`auth::src/main/resources/driven-adapter/secrets-kafka-strim…`	security	healthy	`src/main/resources/driven-adapter/secrets-kafka-strimzi/def…`
`auth::src/main/java/co/com/bancolombia/factory/adapters/Dri…`	security	healthy	`src/main/java/co/com/bancolombia/factory/adapters/DrivenAda…`
`auth::src/main/java/co/com/bancolombia/factory/entrypoints/…`	security	healthy	`src/main/java/co/com/bancolombia/factory/entrypoints/EntryP…`
`auth::src/main/java/co/com/bancolombia/factory/entrypoints/…`	security	healthy	`src/main/java/co/com/bancolombia/factory/entrypoints/EntryP…`
`auth::src/main/resources/entry-point/rest-webflux/authoriza…`	security	healthy	`src/main/resources/entry-point/rest-webflux/authorization/d…`

Label	Layer	Status	Path
`analyze`	cicd	healthy	`.github/workflows/codeql.yml`
`dependency-review`	cicd	healthy	`.github/workflows/dependency-review.yml`
`deploy`	cicd	healthy	`.github/workflows/docs.yml`
`analysis`	cicd	healthy	`.github/workflows/scorecards-analysis.yml`
`TruffleHog`	cicd	healthy	`.github/workflows/secret-scanner.yml`
`release`	cicd	healthy	`.github/workflows/release.yml`
`library`	cicd	healthy	`.github/workflows/release.yml`
`build`	cicd	healthy	`.github/workflows/gradle.yml`
`build`	cicd	healthy	`.github/workflows/updater.yml`

Label	Layer	Status	Path
`gha::codeql`	cicd	healthy	`.github/workflows/codeql.yml`
`gha::dependency-review`	cicd	healthy	`.github/workflows/dependency-review.yml`
`gha::docs`	cicd	healthy	`.github/workflows/docs.yml`
`gha::scorecards-analysis`	cicd	healthy	`.github/workflows/scorecards-analysis.yml`
`gha::secret-scanner`	cicd	healthy	`.github/workflows/secret-scanner.yml`
`gha::release`	cicd	healthy	`.github/workflows/release.yml`
`gha::gradle`	cicd	healthy	`.github/workflows/gradle.yml`
`gha::updater`	cicd	healthy	`.github/workflows/updater.yml`

Label	Layer	Status	Path
`getVersionFromGradleProperties`	software	healthy	`docs/version.js:getVersionFromGradleProperties`
`replaceVersion`	software	healthy	`docs/version.js:replaceVersion`
`Feature`	software	healthy	`docs/src/components/HomepageFeatures/index.js:Feature`
`HomepageFeatures`	software	healthy	`docs/src/components/HomepageFeatures/index.js:HomepageFeatu…`
`HomepageHeader`	software	healthy	`docs/src/pages/index.js:HomepageHeader`
`Home`	software	healthy	`docs/src/pages/index.js:Home`

Label	Layer	Status	Path
`redis`	data	healthy	`examples-ca/example-redis/deployment/Dockerfile`
`postgres`	data	healthy	`examples-ca/example-r2dbc/deployment/docker-compose.yml`
`postgresql`	data	healthy	`examples-ca/example-r2dbc/infrastructure/driven-adapters/r2…`
`mongodb`	data	healthy	`examples-ca/example-mongo/deployment/stack.yml`

Label	Layer	Status	Path
`kafka`	data	healthy	`sh_dependencies.json`
`sqs`	data	healthy	`src/main/resources/entry-point/sqs/definition.json`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`examples-ca/s3-example/deployment/docker-compose.yml`
`4.0.0.0`	network	healthy	`examples-ca/example-article/build.gradle`

Label	Layer	Status	Path
`vps::aws`	hardware	healthy	`sh_dependencies.json`
`vps::azure`	hardware	healthy	`src/main/resources/pipeline/azure/definition.json`

Label	Layer	Status	Path
`password_literal::examples-ca/example-r2dbc/deployment/dock…`	security	healthy	`examples-ca/example-r2dbc/deployment/docker-compose.yml`
`password_literal::examples-ca/example-r2dbc/applications/ap…`	security	healthy	`examples-ca/example-r2dbc/applications/app-service/src/main…`

Label	Layer	Status	Path
`repobility-clone-ux4bkncf`	software	healthy	`/tmp/repobility-clone-ux4bkncf`

Label	Layer	Status	Path
`management`	data	healthy	`examples-ca/channel-operations/scripts/ddl.sql`

Label	Layer	Status	Path
`/`	frontend	healthy	`docs/src/pages/index.js`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/a9463ab3-85e9-45d6-ac77-9e9a7087fc3e/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/a9463ab3-85e9-45d6-ac77-9e9a7087fc3e/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

bancolombia/scaffold-clean-architecture

Complete repo analysis

directory 50+

file 50+

env_var 15

container 12

port 10

auth 10

job 9

pipeline 8

function 6

database 4

queue 2

service 2

vps 2

secret 2

repo 1

table 1

route 1