Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

sandsower/memento-vault

https://github.com/sandsower/memento-vault · scanned 2026-06-16 00:01 UTC (2 months, 3 weeks ago)

63 raw signals (0 security + 63 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 3 weeks ago · v1 · 50 actionable findings from 1 signal source. 13 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

88.9% cov · 50 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 0 Medium 17 Low 26 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 50 Crowd 0 Layer: Software 6 Hardware 4 Frontend 1 Security 1 Quality 38

Exclude dismissed / FP Exclude test files

All 2368 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`test_openai_key`	software	healthy	`tests/test_sanitization.py:12`
`test_openai_project_key`	software	healthy	`tests/test_sanitization.py:18`
`test_github_pat`	software	healthy	`tests/test_sanitization.py:23`
`test_github_new_pat`	software	healthy	`tests/test_sanitization.py:29`
`test_slack_bot_token`	software	healthy	`tests/test_sanitization.py:34`
`test_aws_access_key`	software	healthy	`tests/test_sanitization.py:39`
`test_jwt_token`	software	healthy	`tests/test_sanitization.py:44`
`test_postgres_url`	software	healthy	`tests/test_sanitization.py:49`
`test_bearer_token`	software	healthy	`tests/test_sanitization.py:55`
`test_env_var_secret`	software	healthy	`tests/test_sanitization.py:60`
`test_preserves_normal_text`	software	healthy	`tests/test_sanitization.py:65`
`test_none_input`	software	healthy	`tests/test_sanitization.py:70`
`test_empty_string`	software	healthy	`tests/test_sanitization.py:73`
`test_short_values_not_redacted`	software	healthy	`tests/test_sanitization.py:76`
`runtime_dir`	software	healthy	`tests/test_deep_recall.py:31`
`test_spawns_background_process`	software	healthy	`tests/test_deep_recall.py:44`
`test_writes_input_file`	software	healthy	`tests/test_deep_recall.py:72`
`capture_popen`	software	healthy	`tests/test_deep_recall.py:81`
`test_cleans_up_on_spawn_failure`	software	healthy	`tests/test_deep_recall.py:98`
`test_uses_claude_backend`	software	healthy	`tests/test_deep_recall.py:109`
`test_no_pending_file`	software	healthy	`tests/test_deep_recall.py:124`
`test_consumes_ready_results`	software	healthy	`tests/test_deep_recall.py:129`
`test_pending_file_left_intact`	software	healthy	`tests/test_deep_recall.py:151`
`test_stale_pending_cleaned_up`	software	healthy	`tests/test_deep_recall.py:164`
`test_unknown_status_cleaned_up`	software	healthy	`tests/test_deep_recall.py:176`
`test_empty_suggestions_no_output`	software	healthy	`tests/test_deep_recall.py:187`
`test_corrupt_json_cleaned_up`	software	healthy	`tests/test_deep_recall.py:198`
`test_injection_stripping`	software	healthy	`tests/test_deep_recall.py:208`
`test_direct_json_array`	software	healthy	`tests/test_deep_recall.py:230`
`test_json_in_code_block`	software	healthy	`tests/test_deep_recall.py:236`
`test_json_in_bare_code_block`	software	healthy	`tests/test_deep_recall.py:242`
`test_empty_array`	software	healthy	`tests/test_deep_recall.py:247`
`test_empty_string`	software	healthy	`tests/test_deep_recall.py:252`
`test_no_json`	software	healthy	`tests/test_deep_recall.py:256`
`test_max_three_suggestions`	software	healthy	`tests/test_deep_recall.py:261`
`test_filters_invalid_items`	software	healthy	`tests/test_deep_recall.py:266`
`test_json_embedded_in_text`	software	healthy	`tests/test_deep_recall.py:272`
`_make_config`	software	healthy	`tests/test_deep_recall.py:282`
`_mock_hook_input`	software	healthy	`tests/test_deep_recall.py:301`
`test_high_confidence_no_deep_recall`	software	healthy	`tests/test_deep_recall.py:304`
`test_complex_prompt_triggers_deep_recall`	software	healthy	`tests/test_deep_recall.py:331`
`test_high_confidence_no_deep_recall_complex`	software	healthy	`tests/test_deep_recall.py:361`
`test_disabled_config_no_deep_recall`	software	healthy	`tests/test_deep_recall.py:391`
`test_existing_pending_file_prevents_spawn`	software	healthy	`tests/test_deep_recall.py:421`
`test_worker_writes_ready_results`	software	healthy	`tests/test_deep_recall.py:459`
`test_worker_cleans_up_input_file`	software	healthy	`tests/test_deep_recall.py:489`
`test_worker_handles_missing_input`	software	healthy	`tests/test_deep_recall.py:504`
`test_worker_handles_empty_prompt`	software	healthy	`tests/test_deep_recall.py:514`
`test_worker_uses_claude_backend`	software	healthy	`tests/test_deep_recall.py:528`
`test_main_includes_deep_recall_output`	software	healthy	`tests/test_deep_recall.py:558`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`TestSanitizeSecrets`	software	healthy	`tests/test_sanitization.py:11`
`TestSpawnDeepRecall`	software	healthy	`tests/test_deep_recall.py:41`
`TestConsumeDeepRecall`	software	healthy	`tests/test_deep_recall.py:121`
`TestParseDeepRecallResponse`	software	healthy	`tests/test_deep_recall.py:227`
`TestDeepRecallGate`	software	healthy	`tests/test_deep_recall.py:279`
`TestDeepRecallWorker`	software	healthy	`tests/test_deep_recall.py:456`
`TestMainIntegration`	software	healthy	`tests/test_deep_recall.py:555`
`TestParseSynthesis`	software	healthy	`tests/test_inception_llm.py:10`
`TestCallLlm`	software	healthy	`tests/test_inception_llm.py:86`
`_MockProvider`	software	healthy	`tests/test_embedding.py:18`
`TestEmbeddingProviderABC`	software	healthy	`tests/test_embedding.py:43`
`Dummy`	software	healthy	`tests/test_embedding.py:66`
`TestGetEmbeddingProvider`	software	healthy	`tests/test_embedding.py:92`
`TestNomicLocalProviderUnit`	software	healthy	`tests/test_embedding.py:140`
`TestTruncateAndNormalize`	software	healthy	`tests/test_embedding.py:193`
`TestNomicPrefixing`	software	healthy	`tests/test_embedding.py:242`
`TestModelCachePath`	software	healthy	`tests/test_embedding.py:278`
`TestNomicLocalProviderIntegration`	software	healthy	`tests/test_embedding.py:306`
`TestVoyageProvider`	software	healthy	`tests/test_embedding.py:413`
`TestOpenAIProvider`	software	healthy	`tests/test_embedding.py:534`
`TestGoogleProvider`	software	healthy	`tests/test_embedding.py:664`
`TestFactoryAPIProviders`	software	healthy	`tests/test_embedding.py:785`
`TestDetectAgent`	software	healthy	`tests/test_adapters.py:81`
`TestParseTranscript`	software	healthy	`tests/test_adapters.py:139`
`TestClaudeAdapter`	software	healthy	`tests/test_adapters.py:166`
`TestDetectAgentOpencode`	software	healthy	`tests/test_adapters.py:341`
`TestOpencodeAdapter`	software	healthy	`tests/test_adapters.py:358`
`TestTruncateTranscript`	software	healthy	`tests/test_adapters.py:539`
`TestTokenize`	software	healthy	`tests/test_longmemeval_retrieval.py:44`
`TestBuildBm25Index`	software	healthy	`tests/test_longmemeval_retrieval.py:66`
`TestBm25Search`	software	healthy	`tests/test_longmemeval_retrieval.py:79`
`TestWriteDailySnapshotValidation`	software	healthy	`tests/test_daily_snapshot.py:31`
`TestWriteDailySnapshotWrite`	software	healthy	`tests/test_daily_snapshot.py:53`
`TestMementoDailySnapshotTool`	software	healthy	`tests/test_daily_snapshot.py:202`
`TestCollectEligibleNotes`	software	healthy	`tests/test_inception_collection.py:45`
`TestParseNote`	software	healthy	`tests/test_inception_collection.py:178`
`TestBuildSynthesisPrompt`	software	healthy	`tests/test_inception_synthesis.py:32`
`TestRemoteSyncDryRun`	software	healthy	`tests/test_remote_sync.py:34`
`TestCatchUp`	software	healthy	`tests/test_remote_sync.py:102`
`TestEmbeddedSearchBackendSchema`	software	healthy	`tests/test_embedded_search.py:66`
`TestEmbeddedSearchReindex`	software	healthy	`tests/test_embedded_search.py:98`
`TestEmbeddedSearchFTS5`	software	healthy	`tests/test_embedded_search.py:139`
`TestEmbeddedSearchGet`	software	healthy	`tests/test_embedded_search.py:246`
`TestEmbeddedSearchIndexNote`	software	healthy	`tests/test_embedded_search.py:271`
`MockEmbeddingProvider`	software	healthy	`tests/test_embedded_search.py:302`
`TestVectorSearch`	software	healthy	`tests/test_embedded_search.py:346`
`TestFallbackWithoutVec`	software	healthy	`tests/test_embedded_search.py:394`
`TestRRFFusion`	software	healthy	`tests/test_embedded_search.py:411`
`TestMCPEndToEnd`	software	healthy	`tests/test_embedded_search.py:436`
`TestParallelSynthesis`	software	healthy	`tests/test_inception_parallel.py:40`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`fly.toml`	software	healthy	`fly.toml`
`bootstrap.sh`	software	healthy	`bootstrap.sh`
`docker-compose.cloudflare.yml`	software	healthy	`docker-compose.cloudflare.yml`
`README.md`	software	healthy	`README.md`
`install.sh`	software	healthy	`install.sh`
`package.json`	software	healthy	`package.json`
`Dockerfile`	software	healthy	`Dockerfile`
`setup-remote.sh`	software	healthy	`setup-remote.sh`
`.pre-commit-config.yaml`	software	healthy	`.pre-commit-config.yaml`
`uninstall.sh`	software	healthy	`uninstall.sh`
`pyproject.toml`	software	healthy	`pyproject.toml`
`WORKFLOW.md`	software	healthy	`WORKFLOW.md`
`LICENSE`	software	healthy	`LICENSE`
`AGENTS.md`	software	healthy	`AGENTS.md`
`docker-compose.yml`	software	healthy	`docker-compose.yml`
`test_sanitization.py`	software	healthy	`tests/test_sanitization.py`
`test_deep_recall.py`	software	healthy	`tests/test_deep_recall.py`
`test_inception_llm.py`	software	healthy	`tests/test_inception_llm.py`
`test_rondo_benchmark_tasks.py`	software	healthy	`tests/test_rondo_benchmark_tasks.py`
`test_embedding.py`	software	healthy	`tests/test_embedding.py`
`test_adapters.py`	software	healthy	`tests/test_adapters.py`
`test_longmemeval_retrieval.py`	software	healthy	`tests/test_longmemeval_retrieval.py`
`test_daily_snapshot.py`	software	healthy	`tests/test_daily_snapshot.py`
`conftest.py`	software	healthy	`tests/conftest.py`
`test_tenet_ppr.py`	software	healthy	`tests/test_tenet_ppr.py`
`test_inception_collection.py`	software	healthy	`tests/test_inception_collection.py`
`test_inception_synthesis.py`	software	healthy	`tests/test_inception_synthesis.py`
`test_remote_sync.py`	software	healthy	`tests/test_remote_sync.py`
`test_embedded_search.py`	software	healthy	`tests/test_embedded_search.py`
`test_inception_parallel.py`	software	healthy	`tests/test_inception_parallel.py`
`test_health.py`	software	healthy	`tests/test_health.py`
`test_sync_ledger.py`	software	healthy	`tests/test_sync_ledger.py`
`test_search_backend.py`	software	healthy	`tests/test_search_backend.py`
`test_sync_retry.py`	software	healthy	`tests/test_sync_retry.py`
`test_inception_utils.py`	software	healthy	`tests/test_inception_utils.py`
`test_config.py`	software	healthy	`tests/test_config.py`
`test_inception_dedup.py`	software	healthy	`tests/test_inception_dedup.py`
`test_triage.py`	software	healthy	`tests/test_triage.py`
`test_tenet_concept_index.py`	software	healthy	`tests/test_tenet_concept_index.py`
`test_tenet_reranker.py`	software	healthy	`tests/test_tenet_reranker.py`
`test_indexer.py`	software	healthy	`tests/test_indexer.py`
`test_inception_writer.py`	software	healthy	`tests/test_inception_writer.py`
`test_tenet_integration.py`	software	healthy	`tests/test_tenet_integration.py`
`test_store.py`	software	healthy	`tests/test_store.py`
`test_note_evolution.py`	software	healthy	`tests/test_note_evolution.py`
`test_quality_signals.py`	software	healthy	`tests/test_quality_signals.py`
`test_install_register_mcp.py`	software	healthy	`tests/test_install_register_mcp.py`
`test_install_helpers.py`	software	healthy	`tests/test_install_helpers.py`
`test_inception_embeddings.py`	software	healthy	`tests/test_inception_embeddings.py`
`test_longmemeval_adapter.py`	software	healthy	`tests/test_longmemeval_adapter.py`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`tests`	software	healthy	`tests`
`docs`	software	healthy	`docs`
`plans`	software	healthy	`docs/plans`
`envelopes`	software	healthy	`docs/plans/envelopes`
`scripts`	software	healthy	`scripts`
`memento`	software	healthy	`memento`
`adapters`	software	healthy	`memento/adapters`
`lib`	software	healthy	`lib`
`templates`	software	healthy	`templates`
`Formula`	software	healthy	`Formula`
`extensions`	software	healthy	`extensions`
`benchmark`	software	healthy	`benchmark`
`rondo`	software	healthy	`benchmark/rondo`
`agents`	software	healthy	`agents`
`hooks`	software	healthy	`hooks`
`tools`	software	healthy	`tools`
`skills`	software	healthy	`skills`
`memento-defrag`	software	healthy	`skills/memento-defrag`
`start-fresh`	software	healthy	`skills/start-fresh`
`memento`	software	healthy	`skills/memento`
`generic`	software	healthy	`skills/generic`
`memento-defrag`	software	healthy	`skills/generic/memento-defrag`
`start-fresh`	software	healthy	`skills/generic/start-fresh`
`memento`	software	healthy	`skills/generic/memento`
`concierge`	software	healthy	`skills/generic/concierge`
`continue-work`	software	healthy	`skills/generic/continue-work`
`inception`	software	healthy	`skills/generic/inception`
`orra-init`	software	healthy	`skills/orra-init`
`templates`	software	healthy	`skills/orra-init/templates`
`continue-work`	software	healthy	`skills/continue-work`
`inception`	software	healthy	`skills/inception`
`.github`	software	healthy	`.github`
`workflows`	software	healthy	`.github/workflows`

Label	Layer	Status	Path
`sqlite`	data	healthy	`README.md`
`postgres`	data	healthy	`tests/test_sanitization.py`
`redis`	data	healthy	`tests/test_sanitization.py`
`postgresql`	data	healthy	`tests/test_embedded_search.py`
`mysql`	data	healthy	`memento/health.py`
`mongodb`	data	healthy	`memento/health.py`

Label	Layer	Status	Path
`github_token::tests/test_sanitization.py`	security	healthy	`tests/test_sanitization.py`
`github_token::tests/test_daily_snapshot.py`	security	healthy	`tests/test_daily_snapshot.py`
`github_token::tests/test_daily_snapshot.py`	security	healthy	`tests/test_daily_snapshot.py`
`generic_api_key::tests/test_integration_remote.py`	security	healthy	`tests/test_integration_remote.py`
`github_token::tests/test_mcp_server.py`	security	healthy	`tests/test_mcp_server.py`

Label	Layer	Status	Path
`lint`	cicd	healthy	`.github/workflows/ci.yml`
`gate-tests`	cicd	healthy	`.github/workflows/ci.yml`
`full-pytest`	cicd	healthy	`.github/workflows/ci.yml`
`smoke`	cicd	healthy	`.github/workflows/ci.yml`
`shell-syntax-bash32`	cicd	healthy	`.github/workflows/ci.yml`

Label	Layer	Status	Path
`image::Dockerfile`	hardware	healthy	`Dockerfile`
`vault`	hardware	healthy	`docker-compose.yml`
`k8s::execution::docs/plans/envelopes/mem-9-automation-memor…`	hardware	healthy	`docs/plans/envelopes/mem-9-automation-memory-health.envelop…`
`k8s::execution::docs/plans/envelopes/mem-17-memoryprovider-…`	hardware	healthy	`docs/plans/envelopes/mem-17-memoryprovider-contract.envelop…`

Label	Layer	Status	Path
`auth::memento/auth.py`	security	healthy	`memento/auth.py`
`auth::skills/generic/memento/SKILL.md`	security	healthy	`skills/generic/memento/SKILL.md`
`auth::benchmark/e2e_lifecycle.py`	security	healthy	`benchmark/e2e_lifecycle.py`
`auth::memento/mcp_server.py`	security	healthy	`memento/mcp_server.py`

Label	Layer	Status	Path
`port:8745`	network	healthy	`Dockerfile`
`port:80`	network	healthy	`setup-remote.sh`
`port:443`	network	healthy	`setup-remote.sh`

Label	Layer	Status	Path
`203.0.113.10`	network	healthy	`setup-remote.sh`
`127.0.0.1`	network	healthy	`tests/test_install_helpers.py`
`192.168.1.5`	network	healthy	`tests/test_mcp_server.py`

Label	Layer	Status	Path
`caddy`	network	healthy	`README.md`
`nginx`	network	healthy	`docker-compose.yml`

Label	Layer	Status	Path
`repobility-clone-ajdm55fe`	software	healthy	`/tmp/repobility-clone-ajdm55fe`

Label	Layer	Status	Path
`notes`	data	healthy	`memento/embedded_search.py`

Label	Layer	Status	Path
`vps::aws`	hardware	healthy	`tests/test_sanitization.py`

Label	Layer	Status	Path
`gha::ci`	cicd	healthy	`.github/workflows/ci.yml`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/b06fc71c-321b-4e17-801c-6effd6458c6d/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/b06fc71c-321b-4e17-801c-6effd6458c6d/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

sandsower/memento-vault

Complete repo analysis

function 50+

class 50+

file 50+

directory 33

database 6

secret 5

job 5

container 4

auth 4

port 3

service 3

load_balancer 2

repo 1

table 1

vps 1

pipeline 1