redpanda-data/kminion

Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

14 of your 44 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 2.75s · analysis 3.52s · 0.9 MB · GitHub API rate-limit (preflight)

https://github.com/redpanda-data/kminion · scanned 2026-06-05 13:20 UTC (5 days, 7 hours ago) · 10 languages

58 raw signals (44 security + 14 graph) 10th percentile · Go · small (2-20K LoC) System graph score 92 (lower by 39)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 5 days, 7 hours ago · v2 · 40 actionable findings from 2 signal sources. 11 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

100.0% cov · 7 findings

Score breakdown â 2026-05-18-v5

Component	Sub-score	Weight	Contribution
`structure_score`	75.0	0.15	11.25
`security_score`	37.3	0.25	9.32
`testing_score`	15.0	0.20	3.00
`documentation_score`	62.0	0.15	9.30
`practices_score`	77.0	0.15	11.55
`code_quality`	80.0	0.10	8.00
Overall		1.00	52.4

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 20 Medium 7 Low 6 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 33 System graph 7 Crowd 0 Layer: Cicd 12 Quality 7 Software 17 Api 1 Hardware 2 Frontend 1

Exclude dismissed / FP Exclude test files

All 124 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`README.md`	software	healthy	`README.md`
`Dockerfile`	software	healthy	`Dockerfile`
`main.go`	software	healthy	`main.go`
`.goreleaser.yml`	software	healthy	`.goreleaser.yml`
`config.go`	software	healthy	`config.go`
`go.mod`	software	healthy	`go.mod`
`docker-compose.yml`	software	healthy	`docker-compose.yml`
`versions.go`	software	healthy	`minion/versions.go`
`utils.go`	software	healthy	`minion/utils.go`
`config_topic_config.go`	software	healthy	`minion/config_topic_config.go`
`storage.go`	software	healthy	`minion/storage.go`
`config_consumer_group.go`	software	healthy	`minion/config_consumer_group.go`
`metadata.go`	software	healthy	`minion/metadata.go`
`client_hooks.go`	software	healthy	`minion/client_hooks.go`
`describe_consumer_groups.go`	software	healthy	`minion/describe_consumer_groups.go`
`list_offsets.go`	software	healthy	`minion/list_offsets.go`
`consumer_group_offsets.go`	software	healthy	`minion/consumer_group_offsets.go`
`offset_consumer.go`	software	healthy	`minion/offset_consumer.go`
`config_log_dirs.go`	software	healthy	`minion/config_log_dirs.go`
`config.go`	software	healthy	`minion/config.go`
`describe_topic_config.go`	software	healthy	`minion/describe_topic_config.go`
`log_dirs.go`	software	healthy	`minion/log_dirs.go`
`service.go`	software	healthy	`minion/service.go`
`README.md`	software	healthy	`charts/README.md`
`Chart.yaml`	software	healthy	`charts/kminion/Chart.yaml`
`values.yaml`	software	healthy	`charts/kminion/values.yaml`
`daemonset.yaml`	software	healthy	`charts/kminion/templates/daemonset.yaml`
`configmap.yaml`	software	healthy	`charts/kminion/templates/configmap.yaml`
`servicemonitor.yaml`	software	healthy	`charts/kminion/templates/servicemonitor.yaml`
`hpa.yaml`	software	healthy	`charts/kminion/templates/hpa.yaml`
`serviceaccount.yaml`	software	healthy	`charts/kminion/templates/serviceaccount.yaml`
`service.yaml`	software	healthy	`charts/kminion/templates/service.yaml`
`ingress.yaml`	software	healthy	`charts/kminion/templates/ingress.yaml`
`deployment.yaml`	software	healthy	`charts/kminion/templates/deployment.yaml`
`poddisruptionbudget.yaml`	software	healthy	`charts/kminion/templates/poddisruptionbudget.yaml`
`index.yaml`	software	healthy	`charts/archives/index.yaml`
`config_sasl.go`	software	healthy	`kafka/config_sasl.go`
`config_sasl_oauthbearer.go`	software	healthy	`kafka/config_sasl_oauthbearer.go`
`config_tls.go`	software	healthy	`kafka/config_tls.go`
`config.go`	software	healthy	`kafka/config.go`
`client_logger.go`	software	healthy	`kafka/client_logger.go`
`config_sasl_gssapi.go`	software	healthy	`kafka/config_sasl_gssapi.go`
`service.go`	software	healthy	`kafka/service.go`
`client_config_helper.go`	software	healthy	`kafka/client_config_helper.go`
`metrics.md`	software	healthy	`docs/metrics.md`
`end-to-end.md`	software	healthy	`docs/end-to-end.md`
`reference-config.yaml`	software	healthy	`docs/reference-config.yaml`
`logger.go`	software	healthy	`logging/logger.go`
`config.go`	software	healthy	`logging/config.go`
`docker-image.yml`	software	healthy	`.github/workflows/docker-image.yml`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`minion`	software	healthy	`minion`
`charts`	software	healthy	`charts`
`kminion`	software	healthy	`charts/kminion`
`templates`	software	healthy	`charts/kminion/templates`
`archives`	software	healthy	`charts/archives`
`kafka`	software	healthy	`kafka`
`docs`	software	healthy	`docs`
`logging`	software	healthy	`logging`
`.github`	software	healthy	`.github`
`workflows`	software	healthy	`.github/workflows`
`prometheus`	software	healthy	`prometheus`
`e2e`	software	healthy	`e2e`

Label	Layer	Status	Path
`image::Dockerfile`	hardware	healthy	`Dockerfile`
`zookeeper`	hardware	healthy	`docker-compose.yml`
`kafka`	hardware	healthy	`docker-compose.yml`
`kafka-minion`	hardware	healthy	`docker-compose.yml`
`k8s::ConfigMap::charts/kminion/templates/configmap.yaml`	hardware	healthy	`charts/kminion/templates/configmap.yaml`
`k8s::ServiceMonitor::charts/kminion/templates/servicemonito…`	hardware	healthy	`charts/kminion/templates/servicemonitor.yaml`
`k8s::HorizontalPodAutoscaler::charts/kminion/templates/hpa.…`	hardware	healthy	`charts/kminion/templates/hpa.yaml`
`k8s::ServiceAccount::charts/kminion/templates/serviceaccoun…`	hardware	healthy	`charts/kminion/templates/serviceaccount.yaml`
`k8s::PodDisruptionBudget::charts/kminion/templates/poddisru…`	hardware	healthy	`charts/kminion/templates/poddisruptionbudget.yaml`

Label	Layer	Status	Path
`port:2181`	network	healthy	`docker-compose.yml`
`port:9092`	network	healthy	`docker-compose.yml`
`port:8080`	network	healthy	`docker-compose.yml`
`port:8443`	network	healthy	`charts/kminion/values.yaml`
`port:16`	network	healthy	`charts/archives/index.yaml`
`port:38`	network	healthy	`charts/archives/index.yaml`
`port:01`	network	healthy	`charts/archives/index.yaml`

Label	Layer	Status	Path
`BUILT_AT`	cicd	healthy	`—`
`GITHUB_TOKEN`	cicd	healthy	`—`
`DOCKERHUB_TOKEN`	cicd	healthy	`—`
`DOCKERHUB_USER`	cicd	healthy	`—`
`RP_AWS_CRED_ACCOUNT_ID`	cicd	healthy	`—`

Label	Layer	Status	Path
`auth::docs/reference-config.yaml`	security	healthy	`docs/reference-config.yaml`
`auth::kafka/config_sasl.go`	security	healthy	`kafka/config_sasl.go`
`auth::kafka/client_config_helper.go`	security	healthy	`kafka/client_config_helper.go`

Label	Layer	Status	Path
`k8s::DaemonSet::charts/kminion/templates/daemonset.yaml`	hardware	healthy	`charts/kminion/templates/daemonset.yaml`
`k8s::Deployment::charts/kminion/templates/deployment.yaml`	hardware	healthy	`charts/kminion/templates/deployment.yaml`

Label	Layer	Status	Path
`gha::docker-image`	cicd	healthy	`.github/workflows/docker-image.yml`
`gha::goreleaser`	cicd	healthy	`.github/workflows/goreleaser.yml`

Label	Layer	Status	Path
`build`	cicd	healthy	`.github/workflows/docker-image.yml`
`goreleaser`	cicd	healthy	`.github/workflows/goreleaser.yml`

Label	Layer	Status	Path
`repobility-clone-fbbf528y`	software	healthy	`/tmp/repobility-clone-fbbf528y`

Label	Layer	Status	Path
`kafka`	data	healthy	`docker-compose.yml`

Label	Layer	Status	Path
`nginx`	network	healthy	`charts/kminion/values.yaml`

Label	Layer	Status	Path
`ingress::charts/kminion/templates/ingress.yaml`	network	healthy	`charts/kminion/templates/ingress.yaml`

Label	Layer	Status	Path
`vps::aws`	hardware	healthy	`.github/workflows/docker-image.yml`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/c58f3377-b01f-4e72-88bc-6df502faf969/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/c58f3377-b01f-4e72-88bc-6df502faf969/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

redpanda-data/kminion

Complete repo analysis

file 50+

directory 12

container 9

port 7

env_var 5

auth 3

pod 2

pipeline 2

job 2

repo 1

queue 1

load_balancer 1

ingress 1

vps 1