Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

openmrs/openmrs-core

https://github.com/openmrs/openmrs-core.git · scanned 2026-05-16 10:58 UTC (1 day, 10 hours ago) · 10 languages

318 findings (30 legacy + 288 scanner) 1/10 scanners ran 0th percentile · Java · medium (20-100K LoC) Scanner says 66 (lower by 6)

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 1 day, 10 hours ago · v3 · 119 findings from 2 sources. Findings combine the legacy security pipeline AND the multi-layer engine (atlas, wiring, flows, ranked) AND verified AI agent contributions.

JSON
{# ── 2026-05-17 R27 #5: score breakdown panel ────────────────────── Surfaces the score_breakdown JSON that's been silently stored on Repository for months. Turns hidden math into a trust signal. #}
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all

All 1909 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

LabelLayerStatusPath
pom.xml software healthy pom.xml
docker-compose.override.yml software healthy docker-compose.override.yml
README.md software healthy README.md
startup-init.sh software healthy startup-init.sh
startup-dev.sh software healthy startup-dev.sh
.travis.yml software healthy .travis.yml
CONTRIBUTING.md software healthy CONTRIBUTING.md
Dockerfile software healthy Dockerfile
initial_test_db.sql software healthy initial_test_db.sql
startup.sh software healthy startup.sh
wait-for-it.sh software healthy wait-for-it.sh
.coderabbit.yaml software healthy .coderabbit.yaml
docker-compose.grafana.yml software healthy docker-compose.grafana.yml
SECURITY.md software healthy SECURITY.md
NOTICE.md software healthy NOTICE.md
docker-compose.yml software healthy docker-compose.yml
docker-compose.es.yml software healthy docker-compose.es.yml
grafana-dashboards.yaml software healthy monitoring/grafana-dashboards.yaml
grafana-datasources.yaml software healthy monitoring/grafana-datasources.yaml
loki-config.yaml software healthy monitoring/loki-config.yaml
logs-dashboard.json software healthy monitoring/dashboards/logs-dashboard.json
pom.xml software healthy liquibase/pom.xml
README.md software healthy liquibase/README.md
test_liquibase_snapshots.sh software healthy liquibase/scripts/test_liquibase_snapshots.sh
create_liquibase_snapshots.sh software healthy liquibase/scripts/create_liquibase_snapshots.sh
fix_liquibase_snapshots.sh software healthy liquibase/scripts/fix_liquibase_snapshots.sh
create_openmrs_database.sql software healthy liquibase/scripts/create_openmrs_database.sql
drop_openmrs_schema.sql software healthy liquibase/scripts/drop_openmrs_schema.sql
README.md software healthy liquibase/snapshots/README.md
file-with-license-header.md software healthy liquibase/src/test/resources/file-with-license-header.md
file-without-license-header.md software healthy liquibase/src/test/resources/file-without-license-header.md
MainTest.java software healthy liquibase/src/test/java/org/openmrs/liquibase/MainTest.java
CoreDataTunerTest.java software healthy liquibase/src/test/java/org/openmrs/liquibase/CoreDataTuner…
SchemaOnlyTunerTest.java software healthy liquibase/src/test/java/org/openmrs/liquibase/SchemaOnlyTun…
AbstractSnapshotTunerTest.java software healthy liquibase/src/test/java/org/openmrs/liquibase/AbstractSnaps…
Main.java software healthy liquibase/src/main/java/org/openmrs/liquibase/Main.java
CoreDataTuner.java software healthy liquibase/src/main/java/org/openmrs/liquibase/CoreDataTuner…
SchemaOnlyTuner.java software healthy liquibase/src/main/java/org/openmrs/liquibase/SchemaOnlyTun…
AbstractSnapshotTuner.java software healthy liquibase/src/main/java/org/openmrs/liquibase/AbstractSnaps…
pom.xml software healthy api/pom.xml
cache-api.yaml software healthy api/src/test/resources/cache-api.yaml
testSqlFile.sql software healthy api/src/test/resources/org/openmrs/util/sql/testSqlFile.sql
InsertWithUuidDataChangeDatabaseIT.java software healthy api/src/test/java/liquibase/ext/change/core/InsertWithUuidD…
InsertWithUuidDataChangeTest.java software healthy api/src/test/java/liquibase/ext/change/core/InsertWithUuidD…
MySQLBooleanTypeTest.java software healthy api/src/test/java/liquibase/ext/datatype/core/MySQLBooleanT…
ModifyColumnGeneratorTest.java software healthy api/src/test/java/liquibase/ext/sqlgenerator/core/ModifyCol…
ModifyColumnChangeTest.java software healthy api/src/test/java/liquibase/ext/sqlgenerator/core/ModifyCol…
LocationTest.java software healthy api/src/test/java/org/openmrs/LocationTest.java
SimpleDosingInstructionsTest.java software healthy api/src/test/java/org/openmrs/SimpleDosingInstructionsTest.…
EncounterTest.java software healthy api/src/test/java/org/openmrs/EncounterTest.java

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
monitoring software healthy monitoring
dashboards software healthy monitoring/dashboards
liquibase software healthy liquibase
scripts software healthy liquibase/scripts
snapshots software healthy liquibase/snapshots
src software healthy liquibase/src
test software healthy liquibase/src/test
resources software healthy liquibase/src/test/resources
java software healthy liquibase/src/test/java
org software healthy liquibase/src/test/java/org
openmrs software healthy liquibase/src/test/java/org/openmrs
liquibase software healthy liquibase/src/test/java/org/openmrs/liquibase
main software healthy liquibase/src/main
java software healthy liquibase/src/main/java
org software healthy liquibase/src/main/java/org
openmrs software healthy liquibase/src/main/java/org/openmrs
liquibase software healthy liquibase/src/main/java/org/openmrs/liquibase
api software healthy api
src software healthy api/src
test software healthy api/src/test
resources software healthy api/src/test/resources
org software healthy api/src/test/resources/org
openmrs software healthy api/src/test/resources/org/openmrs
util software healthy api/src/test/resources/org/openmrs/util
sql software healthy api/src/test/resources/org/openmrs/util/sql
java software healthy api/src/test/java
liquibase software healthy api/src/test/java/liquibase
ext software healthy api/src/test/java/liquibase/ext
change software healthy api/src/test/java/liquibase/ext/change
core software healthy api/src/test/java/liquibase/ext/change/core
datatype software healthy api/src/test/java/liquibase/ext/datatype
core software healthy api/src/test/java/liquibase/ext/datatype/core
sqlgenerator software healthy api/src/test/java/liquibase/ext/sqlgenerator
core software healthy api/src/test/java/liquibase/ext/sqlgenerator/core
org software healthy api/src/test/java/org
openmrs software healthy api/src/test/java/org/openmrs
propertyeditor software healthy api/src/test/java/org/openmrs/propertyeditor
comparator software healthy api/src/test/java/org/openmrs/comparator
layout software healthy api/src/test/java/org/openmrs/layout
address software healthy api/src/test/java/org/openmrs/layout/address
name software healthy api/src/test/java/org/openmrs/layout/name
module software healthy api/src/test/java/org/openmrs/module
dtd software healthy api/src/test/java/org/openmrs/module/dtd
notification software healthy api/src/test/java/org/openmrs/notification
mail software healthy api/src/test/java/org/openmrs/notification/mail
db software healthy api/src/test/java/org/openmrs/notification/db
hibernate software healthy api/src/test/java/org/openmrs/notification/db/hibernate
hl7 software healthy api/src/test/java/org/openmrs/hl7
handler software healthy api/src/test/java/org/openmrs/hl7/handler
orders software healthy api/src/test/java/org/openmrs/orders

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
allergy data healthy initial_test_db.sql
allergy_reaction data healthy initial_test_db.sql
care_setting data healthy initial_test_db.sql
clob_datatype_storage data healthy initial_test_db.sql
cohort data healthy initial_test_db.sql
cohort_member data healthy initial_test_db.sql
concept data healthy initial_test_db.sql
concept_answer data healthy initial_test_db.sql
concept_attribute data healthy initial_test_db.sql
concept_attribute_type data healthy initial_test_db.sql
concept_class data healthy initial_test_db.sql
concept_complex data healthy initial_test_db.sql
concept_datatype data healthy initial_test_db.sql
concept_description data healthy initial_test_db.sql
concept_map_type data healthy initial_test_db.sql
concept_name data healthy initial_test_db.sql
concept_name_tag data healthy initial_test_db.sql
concept_name_tag_map data healthy initial_test_db.sql
concept_numeric data healthy initial_test_db.sql
concept_proposal data healthy initial_test_db.sql
concept_proposal_tag_map data healthy initial_test_db.sql
concept_reference_map data healthy initial_test_db.sql
concept_reference_source data healthy initial_test_db.sql
concept_reference_term data healthy initial_test_db.sql
concept_reference_term_map data healthy initial_test_db.sql
concept_set data healthy initial_test_db.sql
concept_state_conversion data healthy initial_test_db.sql
concept_stop_word data healthy initial_test_db.sql
conditions data healthy initial_test_db.sql
diagnosis_attribute data healthy initial_test_db.sql
diagnosis_attribute_type data healthy initial_test_db.sql
drug data healthy initial_test_db.sql
drug_ingredient data healthy initial_test_db.sql
drug_order data healthy initial_test_db.sql
drug_reference_map data healthy initial_test_db.sql
encounter data healthy initial_test_db.sql
encounter_diagnosis data healthy initial_test_db.sql
encounter_provider data healthy initial_test_db.sql
encounter_role data healthy initial_test_db.sql
encounter_type data healthy initial_test_db.sql
field data healthy initial_test_db.sql
field_answer data healthy initial_test_db.sql
field_type data healthy initial_test_db.sql
form data healthy initial_test_db.sql
form_field data healthy initial_test_db.sql
form_resource data healthy initial_test_db.sql
global_property data healthy initial_test_db.sql
hl7_in_archive data healthy initial_test_db.sql
hl7_in_error data healthy initial_test_db.sql
hl7_in_queue data healthy initial_test_db.sql

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
multiple software healthy webapp/src/main/webapp/WEB-INF/csrfguard.js:multiple
addEvent software healthy webapp/src/main/webapp/WEB-INF/csrfguard.js:addEvent
startsWith software healthy webapp/src/main/webapp/WEB-INF/csrfguard.js:startsWith
endsWith software healthy webapp/src/main/webapp/WEB-INF/csrfguard.js:endsWith
hijackStandard software healthy webapp/src/main/webapp/WEB-INF/csrfguard.js:hijackStandard
hijackExplorer software healthy webapp/src/main/webapp/WEB-INF/csrfguard.js:hijackExplorer
allocXMLHttpRequest software healthy webapp/src/main/webapp/WEB-INF/csrfguard.js:allocXMLHttpReq…
initXMLHttpRequest software healthy webapp/src/main/webapp/WEB-INF/csrfguard.js:initXMLHttpRequ…
isValidDomain software healthy webapp/src/main/webapp/WEB-INF/csrfguard.js:isValidDomain
isValidUrl software healthy webapp/src/main/webapp/WEB-INF/csrfguard.js:isValidUrl
parseUri software healthy webapp/src/main/webapp/WEB-INF/csrfguard.js:parseUri
uriContext software healthy webapp/src/main/webapp/WEB-INF/csrfguard.js:uriContext
calculatePageTokenForUri software healthy webapp/src/main/webapp/WEB-INF/csrfguard.js:calculatePageTo…
injectTokenForm software healthy webapp/src/main/webapp/WEB-INF/csrfguard.js:injectTokenForm
injectTokenAttribute software healthy webapp/src/main/webapp/WEB-INF/csrfguard.js:injectTokenAttr…
getFileExtension software healthy webapp/src/main/webapp/WEB-INF/csrfguard.js:getFileExtension
isUnprotectedExtension software healthy webapp/src/main/webapp/WEB-INF/csrfguard.js:isUnprotectedEx…
injectToElements software healthy webapp/src/main/webapp/WEB-INF/csrfguard.js:injectToElements
injectTokens software healthy webapp/src/main/webapp/WEB-INF/csrfguard.js:injectTokens
requestPageTokens software healthy webapp/src/main/webapp/WEB-INF/csrfguard.js:requestPageToke…
handleDynamicallyCreatedNodes software healthy webapp/src/main/webapp/WEB-INF/csrfguard.js:handleDynamical…
correctly software healthy webapp/src/main/webapp/WEB-INF/csrfguard.js:correctly
clickRadio software healthy webapp/src/main/webapp/WEB-INF/view/scripts/initialsetup.js…
submitenter software healthy webapp/src/main/webapp/WEB-INF/view/scripts/initialsetup.js…
d software healthy webapp/src/main/webapp/WEB-INF/view/scripts/jquery/jquery.m…
l software healthy webapp/src/main/webapp/WEB-INF/view/scripts/jquery/jquery.m…
iRow software healthy webapp/src/main/webapp/WEB-INF/view/scripts/jquery/dataTabl…
_fnExternApiFunc software healthy webapp/src/main/webapp/WEB-INF/view/scripts/jquery/dataTabl…
bReOrder software healthy webapp/src/main/webapp/WEB-INF/view/scripts/jquery/dataTabl…
aArray software healthy webapp/src/main/webapp/WEB-INF/view/scripts/jquery/dataTabl…
to software healthy webapp/src/main/webapp/WEB-INF/view/scripts/jquery/autocomp…
that software healthy webapp/src/main/webapp/WEB-INF/view/scripts/jquery/autocomp…
CreateCallback software healthy webapp/src/main/webapp/WEB-INF/view/scripts/jquery/autocomp…
highlightWords software healthy webapp/src/main/webapp/WEB-INF/view/scripts/jquery/autocomp…
innerHighlight software healthy webapp/src/main/webapp/WEB-INF/view/scripts/jquery/highligh…
tree_component software healthy webapp/src/main/webapp/WEB-INF/view/scripts/jquery/jsTree/j…
h_cor software healthy webapp/src/main/webapp/WEB-INF/view/scripts/jquery/jsTree/j…
p software healthy webapp/src/main/webapp/WEB-INF/view/scripts/jquery/jsTree/j…
nod_type software healthy webapp/src/main/webapp/WEB-INF/view/scripts/jquery/jsTree/j…
mx software healthy webapp/src/main/webapp/WEB-INF/view/scripts/jquery/jsTree/j…
nn software healthy webapp/src/main/webapp/WEB-INF/view/scripts/jquery/jsTree/j…
v software healthy webapp/src/main/webapp/WEB-INF/view/scripts/jquery/jsTree/j…
val software healthy webapp/src/main/webapp/WEB-INF/view/scripts/jquery/jsTree/j…
to software healthy webapp/src/main/webapp/WEB-INF/view/scripts/jquery-ui/js/op…
OpenmrsSearch software healthy webapp/src/main/webapp/WEB-INF/view/scripts/jquery-ui/js/op…
tmpIncludeVoided software healthy webapp/src/main/webapp/WEB-INF/view/scripts/jquery-ui/js/op…
adds software healthy webapp/src/main/webapp/WEB-INF/view/scripts/jquery-ui/js/op…
e software healthy webapp/src/main/webapp/WEB-INF/view/scripts/jquery-ui/js/jq…
f software healthy webapp/src/main/webapp/WEB-INF/view/scripts/jquery-ui/js/jq…
y software healthy webapp/src/main/webapp/WEB-INF/view/scripts/jquery-ui/js/jq…

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
password_literal::liquibase/src/main/java/org/openmrs/liqui… security healthy liquibase/src/main/java/org/openmrs/liquibase/CoreDataTuner…
password_literal::api/src/test/java/org/openmrs/util/Securi… security healthy api/src/test/java/org/openmrs/util/SecurityTest.java
password_literal::api/src/test/java/org/openmrs/api/UserSer… security healthy api/src/test/java/org/openmrs/api/UserServiceTest.java
password_literal::api/src/test/java/org/openmrs/api/UserSer… security healthy api/src/test/java/org/openmrs/api/UserServiceTest.java
password_literal::api/src/test/java/org/openmrs/api/UserSer… security healthy api/src/test/java/org/openmrs/api/UserServiceTest.java
password_literal::api/src/test/java/org/openmrs/api/UserSer… security healthy api/src/test/java/org/openmrs/api/UserServiceTest.java
password_literal::api/src/test/java/org/openmrs/api/UserSer… security healthy api/src/test/java/org/openmrs/api/UserServiceTest.java
password_literal::api/src/test/java/org/openmrs/api/UserSer… security healthy api/src/test/java/org/openmrs/api/UserServiceTest.java
password_literal::api/src/test/java/org/openmrs/api/UserSer… security healthy api/src/test/java/org/openmrs/api/UserServiceTest.java
password_literal::api/src/test/java/org/openmrs/api/UserSer… security healthy api/src/test/java/org/openmrs/api/UserServiceTest.java
password_literal::api/src/test/java/org/openmrs/api/UserSer… security healthy api/src/test/java/org/openmrs/api/UserServiceTest.java
password_literal::api/src/test/java/org/openmrs/api/UserSer… security healthy api/src/test/java/org/openmrs/api/UserServiceTest.java
password_literal::api/src/test/java/org/openmrs/api/UserSer… security healthy api/src/test/java/org/openmrs/api/UserServiceTest.java
password_literal::api/src/test/java/org/openmrs/api/db/User… security healthy api/src/test/java/org/openmrs/api/db/UserDAOTest.java
password_literal::api/src/main/java/org/openmrs/util/Openmr… security healthy api/src/main/java/org/openmrs/util/OpenmrsConstants.java
password_literal::api/src/main/java/org/openmrs/util/databa… security healthy api/src/main/java/org/openmrs/util/databasechange/SourceMyS…
password_literal::api/src/main/java/org/openmrs/api/db/hibe… security healthy api/src/main/java/org/openmrs/api/db/hibernate/HibernateCon…
password_literal::web/src/main/java/org/openmrs/web/filter/… security healthy web/src/main/java/org/openmrs/web/filter/initialization/Dat…
password_literal::web/src/main/java/org/openmrs/web/filter/… security healthy web/src/main/java/org/openmrs/web/filter/initialization/Tes…
password_literal::web/src/main/java/org/openmrs/web/filter/… security healthy web/src/main/java/org/openmrs/web/filter/initialization/Ini…

LabelLayerStatusPath
port:3306 network healthy docker-compose.override.yml
port:8080 network healthy docker-compose.override.yml
port:8000 network healthy docker-compose.override.yml
port:9000 network healthy docker-compose.override.yml
port:64 network healthy Dockerfile
port:17 network healthy Dockerfile
port:10001 network healthy docker-compose.grafana.yml
port:3000 network healthy docker-compose.grafana.yml
port:9200 network healthy docker-compose.es.yml

LabelLayerStatusPath
gha::tx-push cicd healthy .github/workflows/tx-push.yml
gha::codeql-analysis cicd healthy .github/workflows/codeql-analysis.yml
gha::scorecard cicd healthy .github/workflows/scorecard.yml
gha::tx-pull cicd healthy .github/workflows/tx-pull.yml
gha::build-2.x cicd healthy .github/workflows/build-2.x.yaml
gha::dependency-check cicd healthy .github/workflows/dependency-check.yml
gha::stale cicd healthy .github/workflows/stale.yml
gha::build cicd healthy .github/workflows/build.yaml

LabelLayerStatusPath
push-translations-to-transifex cicd healthy .github/workflows/tx-push.yml
analyze cicd healthy .github/workflows/codeql-analysis.yml
analysis cicd healthy .github/workflows/scorecard.yml
pull-translations-from-transifex cicd healthy .github/workflows/tx-pull.yml
build cicd healthy .github/workflows/build-2.x.yaml
dependencycheck cicd healthy .github/workflows/dependency-check.yml
stale cicd healthy .github/workflows/stale.yml
build cicd healthy .github/workflows/build.yaml

LabelLayerStatusPath
mariadb data healthy docker-compose.yml
mysql data healthy docker-compose.yml
elasticsearch data healthy docker-compose.es.yml
postgresql data healthy api/pom.xml

LabelLayerStatusPath
OMRS_BOT_GH_TOKEN cicd healthy
GITHUB_TOKEN cicd healthy
TRANSIFEX_TOKEN cicd healthy
NVD_API_KEY cicd healthy

LabelLayerStatusPath
names software healthy webapp/src/main/webapp/WEB-INF/view/scripts/jquery/autocomp…
in software healthy webapp/src/main/webapp/WEB-INF/view/scripts/jquery/autocomp…
is software healthy webapp/src/main/webapp/WEB-INF/view/scripts/jquery-ui/js/op…

LabelLayerStatusPath
4.9.8.3 network healthy pom.xml
127.0.0.1 network healthy liquibase/pom.xml
1.9.25.1 network healthy bom/pom.xml

LabelLayerStatusPath
image::Dockerfile hardware healthy Dockerfile
db hardware healthy docker-compose.yml
api hardware healthy docker-compose.yml

LabelLayerStatusPath
repobility-clone-xp5eha0d software healthy /tmp/repobility-clone-xp5eha0d

LabelLayerStatusPath
vps::azure hardware healthy webapp/src/main/webapp/WEB-INF/view/scripts/jquery-ui/js/jq…
{# ── 2026-05-17 Round 14: AI-agent bridge footer ────────────────────── Discoverability: the /agents/voting/ guide + MCP manifest exist but aren't linked from anywhere users actually land. Small, opt-in footer. #}
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/beef9e59-2b65-4ca8-b71d-75f2aef97c23/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/beef9e59-2b65-4ca8-b71d-75f2aef97c23/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.