meshery/meshery-operator

Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

31 of your 73 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 2.68s · analysis 5.74s · 0.5 MB · GitHub API rate-limit (preflight)

https://github.com/meshery/meshery-operator · scanned 2026-06-05 16:46 UTC (5 days ago) · 10 languages

125 raw signals (69 security + 56 graph) 50th percentile · Go · small (2-20K LoC) System graph score 90 (lower by 12)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 5 days ago · v2 · 46 actionable findings from 2 signal sources. 51 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

88.9% cov · 8 findings

Score breakdown â 2026-05-18-v5

Component	Sub-score	Weight	Contribution
`structure_score`	100.0	0.15	15.00
`security_score`	53.7	0.25	13.43
`testing_score`	80.0	0.20	16.00
`documentation_score`	80.0	0.15	12.00
`practices_score`	98.0	0.15	14.70
`code_quality`	75.5	0.10	7.55
Overall		1.00	78.7

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 3 High 30 Medium 5 Low 5 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 38 System graph 8 Crowd 0 Layer: Software 30 Cicd 7 Quality 2 Security 3 Api 1 Hardware 2 Frontend 1

Exclude dismissed / FP Exclude test files

All 246 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`.golangci.yml`	software	healthy	`.golangci.yml`
`README.md`	software	healthy	`README.md`
`MAINTAINERS.md`	software	healthy	`MAINTAINERS.md`
`CONTRIBUTING.md`	software	healthy	`CONTRIBUTING.md`
`GOVERNANCE.md`	software	healthy	`GOVERNANCE.md`
`Dockerfile`	software	healthy	`Dockerfile`
`main.go`	software	healthy	`main.go`
`go.mod`	software	healthy	`go.mod`
`Makefile`	software	healthy	`Makefile`
`config.yaml`	software	healthy	`bundle/0.0.1/tests/scorecard/config.yaml`
`meshery-metrics-reader_rbac.authorization.k8s.io_v1_cluster…`	software	healthy	`bundle/0.0.1/manifests/meshery-metrics-reader_rbac.authoriz…`
`meshery-operator.clusterserviceversion.yaml`	software	healthy	`bundle/0.0.1/manifests/meshery-operator.clusterserviceversi…`
`meshery-operator-metrics-service_v1_service.yaml`	software	healthy	`bundle/0.0.1/manifests/meshery-operator-metrics-service_v1_…`
`meshery.io_meshsyncs.yaml`	software	healthy	`bundle/0.0.1/manifests/meshery.io_meshsyncs.yaml`
`meshery.io_brokers.yaml`	software	healthy	`bundle/0.0.1/manifests/meshery.io_brokers.yaml`
`annotations.yaml`	software	healthy	`bundle/0.0.1/metadata/annotations.yaml`
`main.sh`	software	healthy	`integration-tests/main.sh`
`kustomization.yaml`	software	healthy	`config/certmanager/kustomization.yaml`
`certificate.yaml`	software	healthy	`config/certmanager/certificate.yaml`
`kustomizeconfig.yaml`	software	healthy	`config/certmanager/kustomizeconfig.yaml`
`kustomization.yaml`	software	healthy	`config/default/kustomization.yaml`
`manager_auth_proxy_patch.yaml`	software	healthy	`config/default/manager_auth_proxy_patch.yaml`
`webhookcainjection_patch.yaml`	software	healthy	`config/default/webhookcainjection_patch.yaml`
`manager_webhook_patch.yaml`	software	healthy	`config/default/manager_webhook_patch.yaml`
`kustomization.yaml`	software	healthy	`config/manager/kustomization.yaml`
`manager.yaml`	software	healthy	`config/manager/manager.yaml`
`kustomization.yaml`	software	healthy	`config/webhook/kustomization.yaml`
`service.yaml`	software	healthy	`config/webhook/service.yaml`
`kustomizeconfig.yaml`	software	healthy	`config/webhook/kustomizeconfig.yaml`
`kustomization.yaml`	software	healthy	`config/manifests/kustomization.yaml`
`default.yaml`	software	healthy	`config/manifests/default.yaml`
`crd.yaml`	software	healthy	`config/manifests/crd.yaml`
`rbac.yaml`	software	healthy	`config/manifests/rbac.yaml`
`meshery-operator.clusterserviceversion.yaml`	software	healthy	`config/manifests/bases/meshery-operator.clusterserviceversi…`
`kustomization.yaml`	software	healthy	`config/scorecard/kustomization.yaml`
`config.yaml`	software	healthy	`config/scorecard/bases/config.yaml`
`basic.config.yaml`	software	healthy	`config/scorecard/patches/basic.config.yaml`
`olm.config.yaml`	software	healthy	`config/scorecard/patches/olm.config.yaml`
`kustomization.yaml`	software	healthy	`config/crd/kustomization.yaml`
`kustomizeconfig.yaml`	software	healthy	`config/crd/kustomizeconfig.yaml`
`meshery.io_meshsyncs.yaml`	software	healthy	`config/crd/bases/meshery.io_meshsyncs.yaml`
`meshery.io_brokers.yaml`	software	healthy	`config/crd/bases/meshery.io_brokers.yaml`
`cainjection_in_brokers.yaml`	software	healthy	`config/crd/patches/cainjection_in_brokers.yaml`
`webhook_in_brokers.yaml`	software	healthy	`config/crd/patches/webhook_in_brokers.yaml`
`webhook_in_meshsyncs.yaml`	software	healthy	`config/crd/patches/webhook_in_meshsyncs.yaml`
`cainjection_in_meshsyncs.yaml`	software	healthy	`config/crd/patches/cainjection_in_meshsyncs.yaml`
`kustomization.yaml`	software	healthy	`config/samples/kustomization.yaml`
`meshery_v1alpha1_meshsync.yaml`	software	healthy	`config/samples/meshery_v1alpha1_meshsync.yaml`
`meshery_v1alpha1_broker.yaml`	software	healthy	`config/samples/meshery_v1alpha1_broker.yaml`
`kustomization.yaml`	software	healthy	`config/rbac/kustomization.yaml`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`image::Dockerfile`	hardware	healthy	`Dockerfile`
`k8s::Configuration::bundle/0.0.1/tests/scorecard/config.yaml`	hardware	healthy	`bundle/0.0.1/tests/scorecard/config.yaml`
`k8s::ClusterRole::bundle/0.0.1/manifests/meshery-metrics-re…`	hardware	healthy	`bundle/0.0.1/manifests/meshery-metrics-reader_rbac.authoriz…`
`k8s::ClusterServiceVersion::bundle/0.0.1/manifests/meshery-…`	hardware	healthy	`bundle/0.0.1/manifests/meshery-operator.clusterserviceversi…`
`k8s::CustomResourceDefinition::bundle/0.0.1/manifests/meshe…`	hardware	healthy	`bundle/0.0.1/manifests/meshery.io_meshsyncs.yaml`
`k8s::CustomResourceDefinition::bundle/0.0.1/manifests/meshe…`	hardware	healthy	`bundle/0.0.1/manifests/meshery.io_brokers.yaml`
`k8s::Issuer::config/certmanager/certificate.yaml`	hardware	healthy	`config/certmanager/certificate.yaml`
`k8s::Certificate::config/certmanager/certificate.yaml`	hardware	healthy	`config/certmanager/certificate.yaml`
`k8s::ValidatingWebhookConfiguration::config/default/webhook…`	hardware	healthy	`config/default/webhookcainjection_patch.yaml`
`k8s::MutatingWebhookConfiguration::config/default/webhookca…`	hardware	healthy	`config/default/webhookcainjection_patch.yaml`
`k8s::Kustomization::config/manager/kustomization.yaml`	hardware	healthy	`config/manager/kustomization.yaml`
`k8s::ServiceAccount::config/manager/manager.yaml`	hardware	healthy	`config/manager/manager.yaml`
`k8s::CustomResourceDefinition::config/manifests/default.yaml`	hardware	healthy	`config/manifests/default.yaml`
`k8s::ServiceAccount::config/manifests/default.yaml`	hardware	healthy	`config/manifests/default.yaml`
`k8s::Role::config/manifests/default.yaml`	hardware	healthy	`config/manifests/default.yaml`
`k8s::RoleBinding::config/manifests/default.yaml`	hardware	healthy	`config/manifests/default.yaml`
`k8s::ClusterRoleBinding::config/manifests/default.yaml`	hardware	healthy	`config/manifests/default.yaml`
`k8s::ClusterRole::config/manifests/default.yaml`	hardware	healthy	`config/manifests/default.yaml`
`k8s::CustomResourceDefinition::config/manifests/crd.yaml`	hardware	healthy	`config/manifests/crd.yaml`
`k8s::Role::config/manifests/rbac.yaml`	hardware	healthy	`config/manifests/rbac.yaml`
`k8s::RoleBinding::config/manifests/rbac.yaml`	hardware	healthy	`config/manifests/rbac.yaml`
`k8s::ClusterRoleBinding::config/manifests/rbac.yaml`	hardware	healthy	`config/manifests/rbac.yaml`
`k8s::ClusterRole::config/manifests/rbac.yaml`	hardware	healthy	`config/manifests/rbac.yaml`
`k8s::ClusterServiceVersion::config/manifests/bases/meshery-…`	hardware	healthy	`config/manifests/bases/meshery-operator.clusterserviceversi…`
`k8s::Configuration::config/scorecard/bases/config.yaml`	hardware	healthy	`config/scorecard/bases/config.yaml`
`k8s::CustomResourceDefinition::config/crd/bases/meshery.io_…`	hardware	healthy	`config/crd/bases/meshery.io_meshsyncs.yaml`
`k8s::CustomResourceDefinition::config/crd/bases/meshery.io_…`	hardware	healthy	`config/crd/bases/meshery.io_brokers.yaml`
`k8s::CustomResourceDefinition::config/crd/patches/cainjecti…`	hardware	healthy	`config/crd/patches/cainjection_in_brokers.yaml`
`k8s::CustomResourceDefinition::config/crd/patches/webhook_i…`	hardware	healthy	`config/crd/patches/webhook_in_brokers.yaml`
`k8s::CustomResourceDefinition::config/crd/patches/webhook_i…`	hardware	healthy	`config/crd/patches/webhook_in_meshsyncs.yaml`
`k8s::CustomResourceDefinition::config/crd/patches/cainjecti…`	hardware	healthy	`config/crd/patches/cainjection_in_meshsyncs.yaml`
`k8s::MeshSync::config/samples/meshery_v1alpha1_meshsync.yaml`	hardware	healthy	`config/samples/meshery_v1alpha1_meshsync.yaml`
`k8s::Broker::config/samples/meshery_v1alpha1_broker.yaml`	hardware	healthy	`config/samples/meshery_v1alpha1_broker.yaml`
`k8s::ClusterRole::config/rbac/broker_viewer_role.yaml`	hardware	healthy	`config/rbac/broker_viewer_role.yaml`
`k8s::ClusterRole::config/rbac/controller_role.yaml`	hardware	healthy	`config/rbac/controller_role.yaml`
`k8s::Role::config/rbac/leader_election_role.yaml`	hardware	healthy	`config/rbac/leader_election_role.yaml`
`k8s::RoleBinding::config/rbac/leader_election_role_binding.…`	hardware	healthy	`config/rbac/leader_election_role_binding.yaml`
`k8s::ClusterRoleBinding::config/rbac/role_binding.yaml`	hardware	healthy	`config/rbac/role_binding.yaml`
`k8s::ClusterRoleBinding::config/rbac/controller_role_bindin…`	hardware	healthy	`config/rbac/controller_role_binding.yaml`
`k8s::ClusterRole::config/rbac/broker_editor_role.yaml`	hardware	healthy	`config/rbac/broker_editor_role.yaml`
`k8s::ClusterRole::config/rbac/auth_proxy_role.yaml`	hardware	healthy	`config/rbac/auth_proxy_role.yaml`
`k8s::ClusterRole::config/rbac/auth_proxy_client_clusterrole…`	hardware	healthy	`config/rbac/auth_proxy_client_clusterrole.yaml`
`k8s::ClusterRoleBinding::config/rbac/auth_proxy_role_bindin…`	hardware	healthy	`config/rbac/auth_proxy_role_binding.yaml`
`k8s::ClusterRole::config/rbac/meshsync_viewer_role.yaml`	hardware	healthy	`config/rbac/meshsync_viewer_role.yaml`
`k8s::ClusterRole::config/rbac/meshsync_editor_role.yaml`	hardware	healthy	`config/rbac/meshsync_editor_role.yaml`
`k8s::ClusterRole::config/rbac/role.yaml`	hardware	healthy	`config/rbac/role.yaml`
`k8s::ServiceMonitor::config/prometheus/monitor.yaml`	hardware	healthy	`config/prometheus/monitor.yaml`

Label	Layer	Status	Path
`bundle`	software	healthy	`bundle`
`0.0.1`	software	healthy	`bundle/0.0.1`
`tests`	software	healthy	`bundle/0.0.1/tests`
`scorecard`	software	healthy	`bundle/0.0.1/tests/scorecard`
`manifests`	software	healthy	`bundle/0.0.1/manifests`
`metadata`	software	healthy	`bundle/0.0.1/metadata`
`integration-tests`	software	healthy	`integration-tests`
`config`	software	healthy	`config`
`certmanager`	software	healthy	`config/certmanager`
`default`	software	healthy	`config/default`
`manager`	software	healthy	`config/manager`
`webhook`	software	healthy	`config/webhook`
`manifests`	software	healthy	`config/manifests`
`bases`	software	healthy	`config/manifests/bases`
`scorecard`	software	healthy	`config/scorecard`
`bases`	software	healthy	`config/scorecard/bases`
`patches`	software	healthy	`config/scorecard/patches`
`crd`	software	healthy	`config/crd`
`bases`	software	healthy	`config/crd/bases`
`patches`	software	healthy	`config/crd/patches`
`samples`	software	healthy	`config/samples`
`rbac`	software	healthy	`config/rbac`
`prometheus`	software	healthy	`config/prometheus`
`api`	software	healthy	`api`
`v1alpha1`	software	healthy	`api/v1alpha1`
`helpers`	software	healthy	`helpers`
`controllers`	software	healthy	`controllers`
`.github`	software	healthy	`.github`
`ISSUE_TEMPLATE`	software	healthy	`.github/ISSUE_TEMPLATE`
`agents`	software	healthy	`.github/agents`
`workflows`	software	healthy	`.github/workflows`
`pkg`	software	healthy	`pkg`
`client`	software	healthy	`pkg/client`
`v1alpha1`	software	healthy	`pkg/client/v1alpha1`
`utils`	software	healthy	`pkg/utils`
`meshsync`	software	healthy	`pkg/meshsync`
`broker`	software	healthy	`pkg/broker`

Label	Layer	Status	Path
`good-first-issue-notify`	cicd	healthy	`.github/workflows/newcomer-alert.yml`
`docker`	cicd	healthy	`.github/workflows/build-and-release.yml`
`golangci-lint`	cicd	healthy	`.github/workflows/approve-to-run-ci.yml`
`tidy`	cicd	healthy	`.github/workflows/approve-to-run-ci.yml`
`test`	cicd	healthy	`.github/workflows/approve-to-run-ci.yml`
`build`	cicd	healthy	`.github/workflows/approve-to-run-ci.yml`
`integration-tests`	cicd	healthy	`.github/workflows/integration-tests-ci.yml`
`update_release_draft`	cicd	healthy	`.github/workflows/release-drafter.yml`
`Update-error-codes`	cicd	healthy	`.github/workflows/error-ref-publisher.yaml`
`star-notify`	cicd	healthy	`.github/workflows/slack.yaml`
`good-first-issue-notify`	cicd	healthy	`.github/workflows/slack.yaml`
`comment`	cicd	healthy	`.github/workflows/label-commenter.yml`

Label	Layer	Status	Path
`gha::newcomer-alert`	cicd	healthy	`.github/workflows/newcomer-alert.yml`
`gha::build-and-release`	cicd	healthy	`.github/workflows/build-and-release.yml`
`gha::approve-to-run-ci`	cicd	healthy	`.github/workflows/approve-to-run-ci.yml`
`gha::integration-tests-ci`	cicd	healthy	`.github/workflows/integration-tests-ci.yml`
`gha::release-drafter`	cicd	healthy	`.github/workflows/release-drafter.yml`
`gha::error-ref-publisher`	cicd	healthy	`.github/workflows/error-ref-publisher.yaml`
`gha::slack`	cicd	healthy	`.github/workflows/slack.yaml`
`gha::label-commenter`	cicd	healthy	`.github/workflows/label-commenter.yml`

Label	Layer	Status	Path
`GH_ACCESS_TOKEN`	cicd	healthy	`—`
`DOCKER_USERNAME`	cicd	healthy	`—`
`STARS`	cicd	healthy	`—`
`RELEASE_NOTES_PAT`	cicd	healthy	`—`
`DOCKER_PASSWORD`	cicd	healthy	`—`
`IMAGE_NAME`	cicd	healthy	`—`
`SLACK_BOT_TOKEN`	cicd	healthy	`—`

Label	Layer	Status	Path
`port:19`	network	healthy	`bundle/0.0.1/manifests/meshery-operator.clusterserviceversi…`
`port:42`	network	healthy	`bundle/0.0.1/manifests/meshery-operator.clusterserviceversi…`
`port:8443`	network	healthy	`bundle/0.0.1/manifests/meshery-operator-metrics-service_v1_…`
`port:443`	network	healthy	`config/webhook/service.yaml`

Label	Layer	Status	Path
`k8s::Deployment::config/default/manager_auth_proxy_patch.ya…`	hardware	healthy	`config/default/manager_auth_proxy_patch.yaml`
`k8s::Deployment::config/default/manager_webhook_patch.yaml`	hardware	healthy	`config/default/manager_webhook_patch.yaml`
`k8s::Deployment::config/manager/manager.yaml`	hardware	healthy	`config/manager/manager.yaml`
`k8s::Deployment::config/manifests/default.yaml`	hardware	healthy	`config/manifests/default.yaml`

Label	Layer	Status	Path
`postgres`	data	healthy	`go.mod`
`sqlite`	data	healthy	`go.mod`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`bundle/0.0.1/manifests/meshery-operator.clusterserviceversi…`
`10.0.0.1`	network	healthy	`controllers/update_sync_unit_test.go`

Label	Layer	Status	Path
`repobility-clone-ryj2a5qj`	software	healthy	`/tmp/repobility-clone-ryj2a5qj`

Label	Layer	Status	Path
`loadbalancer`	network	healthy	`bundle/0.0.1/manifests/meshery-operator-metrics-service_v1_…`

Label	Layer	Status	Path
`vps::azure`	hardware	healthy	`go.mod`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/bc4addc2-37af-4ccb-a213-bcdbcd3c7240/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/bc4addc2-37af-4ccb-a213-bcdbcd3c7240/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

meshery/meshery-operator

Complete repo analysis

file 50+

container 47

directory 37

job 12

pipeline 8

env_var 7

port 4

pod 4

database 2

service 2

repo 1

load_balancer 1

vps 1