← Back to scan
File as GitHub Issue repo: netdata/netdata

Push this scan report to netdata/netdata

Click the green button below to open GitHub’s new-issue form, pre-filled with the report title, summary table, top findings, and an embedded score-card image. No authentication needed — you review on GitHub before submitting. Repobility is credited as the scanner.

Embedded score card image

This image will render at the top of the issue body. Hosted on Repobility, refreshes automatically after re-scans.

Repobility score card

Issue title

Workflow container/services image `httpd:2.4` unpinned: `container/services image: httpd:2

Curate findings to include

Pick exactly which findings appear in the issue body. By default the top 5 are included. Uncheck noise, check what matters.

Top 5 (default)
Severity Rule Title File:line
HIGH MINED108 [MINED108] `self.get_section_ancestor` used but never assigned in __init__: Method `_buil… integrations/gen_doc_collector_page.py:101
HIGH MINED134 [MINED134] Binary file `src/go/plugin/ibm.d/protocols/websphere/jmx/websphere_jmx_helper.… src/go/plugin/ibm.d/protocols/websphere…:1
HIGH MINED128 [MINED128] go.mod replaces `github.com/gosnmp/gosnmp` — redirects to fork `github.com/ily… src/go/go.mod:6
HIGH MINED118 [MINED118] Dockerfile FROM `debian:12` not pinned by digest: `FROM debian:12` resolves th… .github/dockerfiles/Dockerfile.clang:1
HIGH MINED126 [MINED126] Workflow container/services image `httpd:2.4` unpinned: `container/services im… .github/workflows/build.yml:763
HIGH MINED126 [MINED126] Workflow container/services image `httpd:2.4` unpinned: `container/services im… .github/workflows/build.yml:693
HIGH MINED126 [MINED126] Workflow container/services image `httpd:2.4` unpinned: `container/services im… .github/workflows/build.yml:623
HIGH MINED115 [MINED115] Action `shimataro/ssh-key-action` pinned to mutable ref `@v2`: `uses: shimatar… .github/workflows/monitor-releases.yml:53
HIGH MINED115 [MINED115] Action `actions/setup-python` pinned to mutable ref `@v6`: `uses: actions/setu… .github/workflows/monitor-releases.yml:38
HIGH MINED115 [MINED115] Action `actions/checkout` pinned to mutable ref `@v6`: `uses: actions/checkout… .github/workflows/monitor-releases.yml:26
HIGH MINED115 [MINED115] Action `github/codeql-action/analyze` pinned to mutable ref `@v4`: `uses: gith… .github/workflows/codeql.yml:204
HIGH MINED115 [MINED115] Action `github/codeql-action/autobuild` pinned to mutable ref `@v4`: `uses: gi… .github/workflows/codeql.yml:200
HIGH MINED115 [MINED115] Action `github/codeql-action/init` pinned to mutable ref `@v4`: `uses: github/… .github/workflows/codeql.yml:196
HIGH MINED115 [MINED115] Action `actions/checkout` pinned to mutable ref `@v6`: `uses: actions/checkout… .github/workflows/codeql.yml:191
HIGH MINED115 [MINED115] Action `github/codeql-action/analyze` pinned to mutable ref `@v4`: `uses: gith… .github/workflows/codeql.yml:174
HIGH MINED115 [MINED115] Action `github/codeql-action/autobuild` pinned to mutable ref `@v4`: `uses: gi… .github/workflows/codeql.yml:170
HIGH MINED115 [MINED115] Action `github/codeql-action/init` pinned to mutable ref `@v4`: `uses: github/… .github/workflows/codeql.yml:166
HIGH MINED115 [MINED115] Action `actions/checkout` pinned to mutable ref `@v6`: `uses: actions/checkout… .github/workflows/codeql.yml:161
HIGH MINED115 [MINED115] Action `github/codeql-action/analyze` pinned to mutable ref `@v4`: `uses: gith… .github/workflows/codeql.yml:144
HIGH MINED115 [MINED115] Action `github/codeql-action/init` pinned to mutable ref `@v4`: `uses: github/… .github/workflows/codeql.yml:139
HIGH MINED115 [MINED115] Action `actions/checkout` pinned to mutable ref `@v6`: `uses: actions/checkout… .github/workflows/codeql.yml:134
HIGH MINED115 [MINED115] Action `github/codeql-action/analyze` pinned to mutable ref `@v4`: `uses: gith… .github/workflows/codeql.yml:121
HIGH MINED115 [MINED115] Action `github/codeql-action/init` pinned to mutable ref `@v4`: `uses: github/… .github/workflows/codeql.yml:112
HIGH MINED115 [MINED115] Action `actions/checkout` pinned to mutable ref `@v6`: `uses: actions/checkout… .github/workflows/codeql.yml:107
HIGH MINED115 [MINED115] Action `actions/checkout` pinned to mutable ref `@v6`: `uses: actions/checkout… .github/workflows/codeql.yml:28
HIGH MINED115 [MINED115] Action `rtCamp/action-slack-notify` pinned to mutable ref `@v2`: `uses: rtCamp… .github/workflows/platform-eol-check.yml:134
HIGH MINED115 [MINED115] Action `imjohnbo/issue-bot` pinned to mutable ref `@v3`: `uses: imjohnbo/issue… .github/workflows/platform-eol-check.yml:120
HIGH MINED115 [MINED115] Action `actions/checkout` pinned to mutable ref `@v6`: `uses: actions/checkout… .github/workflows/platform-eol-check.yml:70
HIGH MINED115 [MINED115] Action `rtCamp/action-slack-notify` pinned to mutable ref `@v2`: `uses: rtCamp… .github/workflows/platform-eol-check.yml:38
HIGH MINED115 [MINED115] Action `actions/checkout` pinned to mutable ref `@v6`: `uses: actions/checkout… .github/workflows/platform-eol-check.yml:25
HIGH MINED115 [MINED115] Action `rtCamp/action-slack-notify` pinned to mutable ref `@v2`: `uses: rtCamp… .github/workflows/coverity.yml:47
HIGH MINED115 [MINED115] Action `actions/checkout` pinned to mutable ref `@v6`: `uses: actions/checkout… .github/workflows/coverity.yml:22
HIGH MINED118 [MINED118] Dockerfile FROM `netdata/base:v3` not pinned by digest: `FROM netdata/base:v3`… packaging/docker/Dockerfile:98
HIGH MINED118 [MINED118] Dockerfile FROM `netdata/builder:v3` not pinned by digest: `FROM netdata/build… packaging/docker/Dockerfile:5
HIGH MINED118 [MINED118] Dockerfile FROM `netdata/base:v3` not pinned by digest: `FROM netdata/base:v3`… Dockerfile:98
HIGH MINED118 [MINED118] Dockerfile FROM `netdata/builder:v3` not pinned by digest: `FROM netdata/build… Dockerfile:5
HIGH DKC013 Database service has no persistent data volume src/go/tools/functions-validation/docke…:207
HIGH DKC013 Database service has no persistent data volume src/go/tools/functions-validation/docke…:138
HIGH DKC013 Database service has no persistent data volume src/go/tools/functions-validation/docke…:126
HIGH DKC013 Database service has no persistent data volume src/go/tools/functions-validation/docke…:112
HIGH DKC013 Database service has no persistent data volume src/go/tools/functions-validation/docke…:80
HIGH DKC013 Database service has no persistent data volume src/go/tools/functions-validation/docke…:65
HIGH DKC013 Database service has no persistent data volume src/go/tools/functions-validation/docke…:40
HIGH DKC013 Database service has no persistent data volume src/go/tools/functions-validation/docke…:18
HIGH DKC013 Database service has no persistent data volume src/go/tools/functions-validation/docke…:1
HIGH DKC011 Database service publishes a host port src/go/tools/functions-validation/docke…:299
HIGH DKC011 Database service publishes a host port src/go/tools/functions-validation/docke…:138
HIGH DKC011 Database service publishes a host port src/go/tools/functions-validation/docke…:112
HIGH DKC011 Database service publishes a host port src/go/tools/functions-validation/docke…:93
HIGH DKC011 Database service publishes a host port src/go/tools/functions-validation/docke…:65
HIGH DKC011 Database service publishes a host port src/go/tools/functions-validation/docke…:40
HIGH DKC011 Database service publishes a host port src/go/tools/functions-validation/docke…:18
HIGH DKC011 Database service publishes a host port src/go/tools/functions-validation/docke…:1
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… src/collectors/python.d.plugin/python_m…:177
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… src/collectors/python.d.plugin/python_m…:113
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… src/collectors/python.d.plugin/python_m…:144
MED MINED109 [MINED109] Mutable default argument in `__repr__` (dict): `def __repr__(... = []/{}/set()… src/collectors/python.d.plugin/python_m…:198
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… src/collectors/python.d.plugin/python_m…:280
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… src/collectors/python.d.plugin/python_m…:230
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… src/collectors/python.d.plugin/python_m…:384
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… src/collectors/python.d.plugin/python_m…:42
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… src/web/mcp/bridges/stdio-python/nd-mcp…:297
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… src/web/mcp/bridges/stdio-python/nd-mcp…:261
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… src/web/mcp/bridges/stdio-python/nd-mcp…:287
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… src/web/mcp/bridges/stdio-python/nd-mcp…:251
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… src/web/mcp/bridges/stdio-python/nd-mcp…:335
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… src/web/mcp/bridges/stdio-python/nd-mcp…:341
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… src/web/mcp/bridges/stdio-python/nd-mcp…:97
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… .github/scripts/modules/github_actions.…:22
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… .github/scripts/modules/github_actions.…:11
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… .github/scripts/modules/version_manipul…:120
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… .github/scripts/modules/version_manipul…:47
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… .github/scripts/netdata-pkgcloud-cleanu…:170
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… docs/.map/validate_map_schema.py:75
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… docs/.map/validate_map_schema.py:246
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… tests/api/fuzzer.py:218
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… tests/api/fuzzer.py:200
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… tests/api/fuzzer.py:41
MED MINED111 [MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that r… integrations/gen_docs_integrations.py:450
MED ERR001 [ERR001] Silent Exception Swallowing: Silently swallowing all exceptions hides bugs. Even… src/collectors/python.d.plugin/python_m…:123
MED SEC014 [SEC014] SSL Verification Disabled: SSL certificate verification is disabled, allowing ma… src/collectors/python.d.plugin/python_m…:88
MED SEC127 [SEC127] AI agent stub — TODO: implement / pass placeholder body: Function body left as T… src/collectors/python.d.plugin/python_m…:89
MED SEC127 [SEC127] AI agent stub — TODO: implement / pass placeholder body: Function body left as T… src/collectors/python.d.plugin/python_m…:258
MED SEC045 [SEC045] eval()/exec() on stored or user-supplied data: eval() and exec() on data — even … src/collectors/python.d.plugin/pandas/p…:37
MED SEC007 [SEC007] Unsafe Deserialization: Unsafe deserialization can execute arbitrary code. .github/scripts/gen-matrix-eol-check.py:12
MED SEC007 [SEC007] Unsafe Deserialization: Unsafe deserialization can execute arbitrary code. .github/scripts/gen-matrix-docker.py:13
MED SEC007 [SEC007] Unsafe Deserialization: Unsafe deserialization can execute arbitrary code. .github/scripts/gen-matrix-build.py:11
MED COMP001 [COMP001] High cognitive complexity: Function `get_all_packages` has cognitive complexity… .github/scripts/netdata-pkgcloud-cleanu…:39
MED DKR003 Compose service `oracledb-sleep` image uses the latest tag src/go/tools/functions-validation/docke…:325
MED DKR003 Compose service `oracledb-seed` image uses the latest tag src/go/tools/functions-validation/docke…:315
MED DKR003 Compose service `oracledb` image uses the latest tag src/go/tools/functions-validation/docke…:299
MED DKR002 Compose service `mssql-init` image has no explicit tag src/go/tools/functions-validation/docke…:53
MED DKC015 Database service has no healthcheck src/go/tools/functions-validation/docke…:325
MED DKC015 Database service has no healthcheck src/go/tools/functions-validation/docke…:315
MED DKC015 Database service has no healthcheck src/go/tools/functions-validation/docke…:207
MED DKC015 Database service has no healthcheck src/go/tools/functions-validation/docke…:126
MED DKC015 Database service has no healthcheck src/go/tools/functions-validation/docke…:80
MED DKC015 Database service has no healthcheck src/go/tools/functions-validation/docke…:53
MED DKC014 Database data bind mount is inside the Docker build context src/go/tools/functions-validation/docke…:325
MED DKC014 Database data bind mount is inside the Docker build context src/go/tools/functions-validation/docke…:315
MED DKC014 Database data bind mount is inside the Docker build context src/go/tools/functions-validation/docke…:299
MED DKC014 Database data bind mount is inside the Docker build context src/go/tools/functions-validation/docke…:53
MED DKR001 Docker final stage has no non-root USER packaging/docker/Dockerfile:98
MED DKR001 Docker final stage has no non-root USER Dockerfile:98
MED DKR001 Docker final stage has no non-root USER .github/dockerfiles/Dockerfile.clang:1
MED DKR001 Docker final stage has no non-root USER .github/dockerfiles/Dockerfile.build_te…:6
MED AIC001 Parallel implementation file sits beside a canonical file src/collectors/log2journal/log2journal-…:1
MED AIC004 Suspicious implementation file appears unreferenced src/collectors/log2journal/log2journal-…:1
MED DKR014 Dockerfile copies broad context with incomplete .dockerignore packaging/docker/Dockerfile:27
MED DKR014 Dockerfile copies broad context with incomplete .dockerignore Dockerfile:27
MED DKR014 Dockerfile copies broad context with incomplete .dockerignore .github/dockerfiles/Dockerfile.clang:16
MED DKR014 Dockerfile copies broad context with incomplete .dockerignore .github/dockerfiles/Dockerfile.build_te…:19
MED DKC013 Database service has no persistent data volume src/go/tools/functions-validation/docke…:103
MED DKC013 Database service has no persistent data volume src/go/tools/functions-validation/docke…:93
LOW SEC132 [SEC132] String concat where the language has interpolation (AI style drift): String buil… src/go/plugin/go.d/collector/dnsquery/c…:59
LOW SEC132 [SEC132] String concat where the language has interpolation (AI style drift): String buil… src/go/plugin/go.d/collector/consul/col…:40
LOW SEC132 [SEC132] String concat where the language has interpolation (AI style drift): String buil… src/go/pkg/l2topology/node_topology_rou…:241
LOW ERR003 [ERR003] Ignored Error (Go): Ignoring error return values. src/go/cmd/scriptsdplugin/main.go:35
LOW ERR003 [ERR003] Ignored Error (Go): Ignoring error return values. src/go/cmd/ibmdplugin/main.go:48
LOW ERR003 [ERR003] Ignored Error (Go): Ignoring error return values. src/go/cmd/godplugin/main.go:48
LOW SEC124 [SEC124] TOCTOU file access (os.access then open): Check-then-use file pattern (access/ex… src/collectors/python.d.plugin/python_m…:81
LOW COMP001 [COMP001] High cognitive complexity: Function `main` has cognitive complexity 9 (SonarSou… .github/scripts/normalize-go-test-json.…:24
LOW COMP001 [COMP001] High cognitive complexity: Function `cleanup_stable_repo` has cognitive complex… .github/scripts/netdata-pkgcloud-cleanu…:128
LOW AIC003 Duplicated implementation block across source files src/crates/journal-core/src/file/writer…:200
LOW AIC003 Duplicated implementation block across source files src/crates/journal-core/src/file/value_…:1
LOW AIC003 Duplicated implementation block across source files src/crates/journal-core/src/file/sigbus…:4
LOW AIC003 Duplicated implementation block across source files src/crates/journal-core/src/file/reader…:79
LOW AIC003 Duplicated implementation block across source files src/crates/journal-core/src/file/offset…:5
LOW AIC003 Duplicated implementation block across source files src/crates/journal-core/src/file/mmap.rs:16
LOW AIC003 Duplicated implementation block across source files src/crates/journal-core/src/file/hash.rs:13
LOW AIC003 Duplicated implementation block across source files src/crates/journal-core/src/file/filter…:40
LOW AIC003 Duplicated implementation block across source files src/crates/journal-core/src/file/cursor…:5
LOW AIC003 Duplicated implementation block across source files src/crates/journal-core/src/error.rs:9
LOW AIC003 Duplicated implementation block across source files src/collectors/xenstat.plugin/xenstat_p…:739
LOW AIC003 Duplicated implementation block across source files src/collectors/python.d.plugin/python_m…:472
LOW AIC003 Duplicated implementation block across source files src/collectors/proc.plugin/sys_class_po…:105
LOW AIC003 Duplicated implementation block across source files src/collectors/proc.plugin/proc_softirq…:1
LOW AIC003 Duplicated implementation block across source files src/collectors/proc.plugin/proc_net_soc…:57
LOW AIC003 Duplicated implementation block across source files src/collectors/proc.plugin/proc_net_rpc…:8
LOW AIC003 Duplicated implementation block across source files src/collectors/network-viewer.plugin/ne…:359
LOW AIC003 Duplicated implementation block across source files src/collectors/ebpf.plugin/ebpf_sync.c:307
LOW AIC003 Duplicated implementation block across source files src/collectors/ebpf.plugin/ebpf_sync.c:304
LOW AIC003 Duplicated implementation block across source files src/collectors/ebpf.plugin/ebpf_softirq…:135
LOW AIC003 Duplicated implementation block across source files src/collectors/ebpf.plugin/ebpf_mount.c:214
LOW AIC003 Duplicated implementation block across source files src/collectors/ebpf.plugin/ebpf_mount.c:4
LOW AIC003 Duplicated implementation block across source files src/collectors/ebpf.plugin/ebpf_mdflush…:179
LOW AIC003 Duplicated implementation block across source files src/collectors/ebpf.plugin/ebpf_hardirq…:375
LOW AIC003 Duplicated implementation block across source files src/aclk/mqtt_websockets/mqtt_wss_clien…:5
LOW AIC003 Duplicated implementation block across source files integrations/gen_doc_service_discovery_…:291
LOW DKC015 Database service has no healthcheck src/go/tools/functions-validation/docke…:103
LOW DKR011 Dockerfile installs recommended OS packages .github/dockerfiles/Dockerfile.clang:11
LOW DKR008 .dockerignore misses sensitive defaults .dockerignore
LOW AIC009 Multiple AI-agent scaffold marker files are present AGENTS.md:1
LOW DKC010 Compose service lacks no-new-privileges hardening src/go/tools/functions-validation/docke…:335
LOW DKC010 Compose service lacks no-new-privileges hardening src/go/tools/functions-validation/docke…:299
LOW DKC010 Compose service lacks no-new-privileges hardening src/go/tools/functions-validation/docke…:267
LOW DKC010 Compose service lacks no-new-privileges hardening src/go/tools/functions-validation/docke…:225
LOW DKC010 Compose service lacks no-new-privileges hardening src/go/tools/functions-validation/docke…:198
LOW DKC010 Compose service lacks no-new-privileges hardening src/go/tools/functions-validation/docke…:170
LOW DKC010 Compose service lacks no-new-privileges hardening src/go/tools/functions-validation/docke…:112
LOW DKC010 Compose service lacks no-new-privileges hardening src/go/tools/functions-validation/docke…:40
LOW DKC006 Compose service does not declare a runtime user src/go/tools/functions-validation/docke…:335
LOW DKC006 Compose service does not declare a runtime user src/go/tools/functions-validation/docke…:299
LOW DKC006 Compose service does not declare a runtime user src/go/tools/functions-validation/docke…:267
LOW DKC006 Compose service does not declare a runtime user src/go/tools/functions-validation/docke…:225
LOW DKC006 Compose service does not declare a runtime user src/go/tools/functions-validation/docke…:198
LOW DKC006 Compose service does not declare a runtime user src/go/tools/functions-validation/docke…:170
LOW DKC006 Compose service does not declare a runtime user src/go/tools/functions-validation/docke…:112
LOW DKC006 Compose service does not declare a runtime user src/go/tools/functions-validation/docke…:40
INFO MINED071 [MINED071] Go Panic Call: panic() crashes the process. Should return error in most cases. src/go/pkg/metrix/gauge.go:37
INFO MINED071 [MINED071] Go Panic Call: panic() crashes the process. Should return error in most cases. src/go/pkg/metrix/counter.go:37
INFO MINED071 [MINED071] Go Panic Call: panic() crashes the process. Should return error in most cases. src/go/pkg/matcher/matcher.go:58
INFO MINED060 [MINED060] Go Context No Cancel: context.Background() at request handler boundary leaks g… src/go/logger/context.go:12
INFO MINED060 [MINED060] Go Context No Cancel: context.Background() at request handler boundary leaks g… src/go/cmd/internal/agenthost/host.go:28
INFO MINED060 [MINED060] Go Context No Cancel: context.Background() at request handler boundary leaks g… src/go/cmd/godplugin/main.go:199
INFO MINED066 [MINED066] Rust Panic Macro: panic!() unwinds the stack. Use Result for recoverable error… src/crates/netflow-plugin/src/ingest/se…:45
INFO MINED066 [MINED066] Rust Panic Macro: panic!() unwinds the stack. Use Result for recoverable error… src/crates/netflow-plugin/src/charts/te…:270
INFO MINED066 [MINED066] Rust Panic Macro: panic!() unwinds the stack. Use Result for recoverable error… src/crates/netdata-plugin/schema/src/li…:158
INFO MINED068 [MINED068] Rust Unsafe Block: unsafe { ... } block. Compiler safety guarantees disabled i… src/crates/journal-core/src/field_map.rs:97
INFO MINED068 [MINED068] Rust Unsafe Block: unsafe { ... } block. Compiler safety guarantees disabled i… src/crates/jf/window_manager/src/lib.rs:18
INFO MINED068 [MINED068] Rust Unsafe Block: unsafe { ... } block. Compiler safety guarantees disabled i… src/crates/jf/sigbus/src/lib.rs:13
INFO MINED059 [MINED059] Rust Expect In Prod: .expect(...) panics same as unwrap with a custom message. src/crates/netdata-otel/otel-plugin/src…:119
INFO MINED059 [MINED059] Rust Expect In Prod: .expect(...) panics same as unwrap with a custom message. src/crates/journal-index/src/bitmap.rs:126
INFO MINED059 [MINED059] Rust Expect In Prod: .expect(...) panics same as unwrap with a custom message. src/crates/jf/journal_reader_ffi/build.…:16
INFO MINED072 [MINED072] Python Pass Only Class: class Foo: pass — stub waiting to be filled in. src/collectors/python.d.plugin/python_m…:32
INFO MINED072 [MINED072] Python Pass Only Class: class Foo: pass — stub waiting to be filled in. src/collectors/python.d.plugin/python_m…:46
INFO MINED072 [MINED072] Python Pass Only Class: class Foo: pass — stub waiting to be filled in. src/collectors/python.d.plugin/python_m…:9
INFO MINED075 [MINED075] C Malloc No Check: malloc/calloc/realloc return value used without checking fo… src/collectors/apps.plugin/busy_threads…:54
INFO MINED075 [MINED075] C Malloc No Check: malloc/calloc/realloc return value used without checking fo… src/cli/cli.c:87
INFO MINED075 [MINED075] C Malloc No Check: malloc/calloc/realloc return value used without checking fo… src/claim/main.c:115
INFO MINED050 [MINED050] Stub Only Function: Function declared but body is just pass, return None, rais… src/collectors/python.d.plugin/python_m…:259
INFO MINED050 [MINED050] Stub Only Function: Function declared but body is just pass, return None, rais… packaging/dag/main.py:11
INFO MINED050 [MINED050] Stub Only Function: Function declared but body is just pass, return None, rais… integrations/_common.py:41
INFO MINED043 [MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle cr… packaging/installer/dependencies/freebs…:103
INFO MINED043 [MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle cr… packaging/installer/dependencies/centos…:159
INFO MINED043 [MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle cr… docs/diagrams/build.sh:9
INFO MINED067 [MINED067] Python Requests No Timeout: requests.get/post/etc. without timeout= can hang f… .github/scripts/netdata-pkgcloud-cleanu…:47
INFO MINED067 [MINED067] Python Requests No Timeout: requests.get/post/etc. without timeout= can hang f… .github/scripts/modules/version_manipul…:81
INFO MINED049 [MINED049] Print Pii: Logging password/token/email/ssn directly to stdout. .github/scripts/netdata-pkgcloud-cleanu…:171
INFO MINED049 [MINED049] Print Pii: Logging password/token/email/ssn directly to stdout. .github/scripts/modules/version_manipul…:15
Reset to top 5 200 findings available (after auto-suppression of test files + won't-fix)

Issue body (markdown)

## Code-quality scan: `netdata/netdata`

**Score: 78/100 (A-)**  ·  326 findings  ·  scanned 2026-06-05 07:30 UTC  ·  1,230,305 LOC

| Severity | Count |
|---|---|
| CRITICAL | 51 |
| HIGH | 88 |
| MEDIUM | 61 |
| LOW | 55 |

📊 [Full filterable report](https://repobility.com/scan/b0832461-1e81-4bee-b5c2-ee18f3461301/)  ·  ![scorecard](https://repobility.com/scan/b0832461-1e81-4bee-b5c2-ee18f3461301/report.png?v=1780644626-s2)

### Top findings

1. **HIGH** `MINED108` — `self.get_section_ancestor` used but never assigned in __init__
   `integrations/gen_doc_collector_page.py:101` · ✓ Repobility
2. **HIGH** `MINED134` — Binary file `src/go/plugin/ibm.d/protocols/websphere/jmx/websphere_jmx_helper.jar` committ
   `src/go/plugin/ibm.d/protocols/websphere/jmx/websphere_jmx_helper.jar:1` · ✓ Repobility
3. **HIGH** `MINED128` — go.mod replaces `github.com/gosnmp/gosnmp` — redirects to fork `github.com/ilyam8/gosnmp`
   `src/go/go.mod:6` · ✓ Repobility
4. **HIGH** `MINED118` — Dockerfile FROM `debian:12` not pinned by digest: `FROM debian:12` resolves the tag at bui
   `.github/dockerfiles/Dockerfile.clang:1` · ✓ Repobility
5. **HIGH** `MINED126` — Workflow container/services image `httpd:2.4` unpinned: `container/services image: httpd:2
   `.github/workflows/build.yml:763` · ✓ Repobility

---

_Filed automatically. Close this issue if not useful — we won't refile. Full report: https://repobility.com/scan/b0832461-1e81-4bee-b5c2-ee18f3461301/_
Megaproject â high spam risk
Could not determine 'netdata/netdata' star count (GitHub API rate-limited or unreachable). When in doubt about repo size, prefer opening a focused PR or a discussion rather than an issue.
Already filed
143/358 findings (40%) on this scan are already flagged as test-file, won't-fix, or suppressed. The scan is too noisy to file as a single issue. Curate down to specific actionable findings, or address the FP source first.
I read the warnings â override Cancel

The button opens GitHubâs new-issue page in a new tab. You will see the title + body pre-filled â review, edit if you want, then click GitHubâs "Submit new issue" button. Repobility never posts anything on your behalf.

For real security findings on big repos: use the project's SECURITY.md or private advisory flow instead of a public issue.