forcedotcom/salesforcedx-vscode

Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

59 of your 116 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Upstream (GitHub) caused delay on this scan — not Repobility.

GitHub API rate-limited (HTTP 403) — preflight skipped, fell back to direct git clone.
Clone from GitHub took 104.04s for a 88.9 MB repo slow.
Repobility's analysis ran in 14.23s after the clone landed.

https://github.com/forcedotcom/salesforcedx-vscode · scanned 2026-06-05 21:57 UTC (1 week, 2 days ago) · 10 languages

1185 raw signals (101 security + 1084 graph) 11/13 scanners ran 92nd percentile · Typescript · large (100-500K LoC) System graph score 56 (higher by 30)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 1 week, 2 days ago · v2 · 346 actionable findings from 2 signal sources. 297 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

100.0% cov · 308 findings

Score breakdown â 2026-05-18-v5

Component	Sub-score	Weight	Contribution
`structure_score`	60.0	0.15	9.00
`security_score`	100.0	0.25	25.00
`testing_score`	95.0	0.20	19.00
`documentation_score`	89.0	0.15	13.35
`practices_score`	76.0	0.15	11.40
`code_quality`	80.0	0.10	8.00
Overall		1.00	85.8

security_score may be inflated — optional security scanners were skipped on this fast scan

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 1 High 18 Medium 7 Low 190 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 38 System graph 308 Crowd 0 Layer: Security 5 Quality 101 Software 64 Cicd 6 Frontend 167 Api 3

Exclude dismissed / FP Exclude test files

All 7110 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`rmPath`	software	healthy	`scripts/clean-build-artifacts.js:rmPath`
`rmIfExists`	software	healthy	`scripts/clean-build-artifacts.js:rmIfExists`
`rmVsixInDir`	software	healthy	`scripts/clean-build-artifacts.js:rmVsixInDir`
`rmTgzInDir`	software	healthy	`scripts/clean-build-artifacts.js:rmTgzInDir`
`cleanPackageStandard`	software	healthy	`scripts/clean-build-artifacts.js:cleanPackageStandard`
`cleanGithubActionsLib`	software	healthy	`scripts/clean-build-artifacts.js:cleanGithubActionsLib`
`cleanApexPackage`	software	healthy	`scripts/clean-build-artifacts.js:cleanApexPackage`
`cleanServicesTypes`	software	healthy	`scripts/clean-build-artifacts.js:cleanServicesTypes`
`main`	software	healthy	`scripts/clean-build-artifacts.js:main`
`getMockVSCode`	software	healthy	`scripts/setup-jest.ts:getMockVSCode`
`logger`	software	healthy	`scripts/create-release-notes.ts:logger`
`getCurrentRemoteReleaseBranch`	software	healthy	`scripts/create-release-notes.ts:getCurrentRemoteReleaseBran…`
`getPreviousRemoteReleaseBranch`	software	healthy	`scripts/create-release-notes.ts:getPreviousRemoteReleaseBra…`
`validateReleaseBranch`	software	healthy	`scripts/create-release-notes.ts:validateReleaseBranch`
`logger`	software	healthy	`scripts/installVSIXFromBranch.ts:logger`
`collectLeafErrors`	software	healthy	`scripts/validateActions.ts:collectLeafErrors`
`message`	software	healthy	`scripts/validateActions.ts:message`
`formatErrors`	software	healthy	`scripts/validateActions.ts:formatErrors`
`logger`	software	healthy	`scripts/reportInstalls.ts:logger`
`setupAppInsights`	software	healthy	`scripts/reportInstalls.ts:setupAppInsights`
`reportInstallCount`	software	healthy	`scripts/reportInstalls.ts:reportInstallCount`
`reportVSCodeMarketplaceInstalls`	software	healthy	`scripts/reportInstalls.ts:reportVSCodeMarketplaceInstalls`
`reportOpenVSXInstalls`	software	healthy	`scripts/reportInstalls.ts:reportOpenVSXInstalls`
`execute`	software	healthy	`scripts/reportInstalls.ts:execute`
`checkPrerequisites`	software	healthy	`scripts/analyzeE2E.ts:checkPrerequisites`
`getCurrentBranch`	software	healthy	`scripts/analyzeE2E.ts:getCurrentBranch`
`findPlaywrightWorkflows`	software	healthy	`scripts/analyzeE2E.ts:findPlaywrightWorkflows`
`prioritizeWorkflows`	software	healthy	`scripts/analyzeE2E.ts:prioritizeWorkflows`
`watchWorkflow`	software	healthy	`scripts/analyzeE2E.ts:watchWorkflow`
`checkWorkflowStatus`	software	healthy	`scripts/analyzeE2E.ts:checkWorkflowStatus`
`monitorWorkflows`	software	healthy	`scripts/analyzeE2E.ts:monitorWorkflows`
`sanitizeWorkflowName`	software	healthy	`scripts/analyzeE2E.ts:sanitizeWorkflowName`
`downloadArtifacts`	software	healthy	`scripts/analyzeE2E.ts:downloadArtifacts`
`findHtmlReport`	software	healthy	`scripts/analyzeE2E.ts:findHtmlReport`
`findTestResults`	software	healthy	`scripts/analyzeE2E.ts:findTestResults`
`handleResults`	software	healthy	`scripts/analyzeE2E.ts:handleResults`
`main`	software	healthy	`scripts/analyzeE2E.ts:main`
`validateEnvVars`	software	healthy	`scripts/queryAppInsights.ts:validateEnvVars`
`queryAppInsights`	software	healthy	`scripts/queryAppInsights.ts:queryAppInsights`
`errorData`	software	healthy	`scripts/queryAppInsights.ts:errorData`
`data`	software	healthy	`scripts/queryAppInsights.ts:data`
`testConnection`	software	healthy	`scripts/queryAppInsights.ts:testConnection`
`logger`	software	healthy	`scripts/change-log-generator-utils.js:logger`
`getPreviousReleaseBranch`	software	healthy	`scripts/change-log-generator-utils.js:getPreviousReleaseBra…`
`getRemoteReleaseBranches`	software	healthy	`scripts/change-log-generator-utils.js:getRemoteReleaseBranc…`
`getCommits`	software	healthy	`scripts/change-log-generator-utils.js:getCommits`
`parseCommits`	software	healthy	`scripts/change-log-generator-utils.js:parseCommits`
`buildMapFromCommit`	software	healthy	`scripts/change-log-generator-utils.js:buildMapFromCommit`
`filterExistingPREntries`	software	healthy	`scripts/change-log-generator-utils.js:filterExistingPREntri…`
`getMessagesGroupedByPackage`	software	healthy	`scripts/change-log-generator-utils.js:getMessagesGroupedByP…`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`jest.config.js`	software	warning	`jest.config.js`
`.mocharc.json`	software	healthy	`.mocharc.json`
`.commitlintrc.json`	software	healthy	`.commitlintrc.json`
`tsconfig.common.json`	software	healthy	`tsconfig.common.json`
`README.md`	software	healthy	`README.md`
`how_to_license.md`	software	healthy	`how_to_license.md`
`package.json`	software	healthy	`package.json`
`SHA256.md`	software	healthy	`SHA256.md`
`CONTRIBUTING.md`	software	healthy	`CONTRIBUTING.md`
`CONTEXT-MAP.md`	software	healthy	`CONTEXT-MAP.md`
`package-lock.json`	software	healthy	`package-lock.json`
`CONTEXT.md`	software	healthy	`CONTEXT.md`
`knip.json`	software	healthy	`knip.json`
`tsconfig.json`	software	healthy	`tsconfig.json`
`.jscpd.json`	software	healthy	`.jscpd.json`
`CODE_OF_CONDUCT.md`	software	healthy	`CODE_OF_CONDUCT.md`
`SECURITY.md`	software	healthy	`SECURITY.md`
`CHANGELOG.md`	software	healthy	`CHANGELOG.md`
`jest.integration.config.js`	software	warning	`config/jest.integration.config.js`
`jest.base.config.js`	software	warning	`config/jest.base.config.js`
`coverconfig.json`	software	healthy	`config/coverconfig.json`
`vscode.js`	software	healthy	`config/__mocks__/vscode.js`
`o11y_schema_sf_pdp.js`	software	warning	`config/__mocks__/o11y_schema_sf_pdp.js`
`Build.md`	software	healthy	`docs/Build.md`
`telemetry-properties-comparison.md`	software	healthy	`docs/telemetry-properties-comparison.md`
`README.md`	software	healthy	`docs/README.md`
`observability-audit.md`	software	healthy	`docs/observability-audit.md`
`Testing.md`	software	healthy	`docs/Testing.md`
`TYPESCRIPT_LWC_SUPPORT.md`	software	healthy	`docs/TYPESCRIPT_LWC_SUPPORT.md`
`QA.md`	software	healthy	`docs/QA.md`
`Telemetry.md`	software	healthy	`docs/Telemetry.md`
`telemetry-common-attributes-proposal.md`	software	healthy	`docs/telemetry-common-attributes-proposal.md`
`libraries.md`	software	healthy	`docs/libraries.md`
`ExtensionPacks.md`	software	healthy	`docs/architecture/ExtensionPacks.md`
`Extensions.md`	software	healthy	`docs/architecture/Extensions.md`
`Typescript.md`	software	healthy	`docs/architecture/Typescript.md`
`CodeReuse.md`	software	healthy	`docs/architecture/CodeReuse.md`
`apex.configuration.json`	software	healthy	`extension-assets/syntaxes/apex.configuration.json`
`cleanup-release-branch-after-release-issues.js`	software	warning	`scripts/cleanup-release-branch-after-release-issues.js`
`clean-build-artifacts.js`	software	healthy	`scripts/clean-build-artifacts.js`
`concatenate-sha256.js`	software	warning	`scripts/concatenate-sha256.js`
`setup-jest.ts`	software	healthy	`scripts/setup-jest.ts`
`publish-vsix.js`	software	warning	`scripts/publish-vsix.js`
`create-release-notes.ts`	software	healthy	`scripts/create-release-notes.ts`
`change-log-constants.js`	software	warning	`scripts/change-log-constants.js`
`installVSIXFromBranch.ts`	software	healthy	`scripts/installVSIXFromBranch.ts`
`require-root-install.js`	software	warning	`scripts/require-root-install.js`
`validateActions.ts`	software	healthy	`scripts/validateActions.ts`
`logger-util.js`	software	warning	`scripts/logger-util.js`
`reportInstalls.ts`	software	healthy	`scripts/reportInstalls.ts`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`EventEmitter`	software	healthy	`config/__mocks__/vscode.js:EventEmitter`
`Uri`	software	healthy	`config/__mocks__/vscode.js:Uri`
`EventEmitter`	software	healthy	`scripts/setup-jest.ts:EventEmitter`
`Uri`	software	healthy	`scripts/setup-jest.ts:Uri`
`ContextPool`	software	healthy	`scripts/xsd/scrape-all-metadata-pages.ts:ContextPool`
`TodoUtil`	software	healthy	`test-workspaces/sfdx-workspace/utils/meta/lwc/todo_util/tod…`
`TodoApp`	software	healthy	`test-workspaces/sfdx-workspace/force-app/main/default/aura/…`
`LwcHelloWorld`	software	healthy	`test-workspaces/sfdx-workspace/force-app/main/default/lwc/h…`
`TodoItem`	software	healthy	`test-workspaces/sfdx-workspace/force-app/main/default/lwc/t…`
`extends`	software	healthy	`test-workspaces/sfdx-workspace/force-app/main/default/lwc/t…`
`LightningDatatableExample`	software	healthy	`test-workspaces/sfdx-workspace/force-app/main/default/lwc/l…`
`LwcIndex`	software	healthy	`test-workspaces/sfdx-workspace/force-app/main/default/lwc/i…`
`LightningTreeExample`	software	healthy	`test-workspaces/sfdx-workspace/force-app/main/default/lwc/l…`
`Todo`	software	healthy	`test-workspaces/sfdx-workspace/force-app/main/default/lwc/t…`
`ImportRelative`	software	healthy	`test-workspaces/sfdx-workspace/force-app/main/default/lwc/i…`
`SimpleComponent`	software	healthy	`test-workspaces/sfdx-workspace/non-registered-folder/meta/l…`
`Ito`	software	healthy	`test-workspaces/standard-workspace/src/modules/interop/ito/…`
`Line`	software	healthy	`test-workspaces/standard-workspace/src/modules/example/line…`
`App`	software	healthy	`test-workspaces/standard-workspace/src/modules/example/app/…`
`Text`	software	healthy	`test-workspaces/standard-workspace/src/modules/other/text/t…`
`AppNavBar`	software	healthy	`test-workspaces/core-like-workspace/app/main/core/ui-global…`
`InputPhone`	software	healthy	`test-workspaces/core-like-workspace/app/main/core/ui-force-…`
`MockRegistryAccess`	software	healthy	`packages/salesforcedx-vscode-apex-oas/test/jest/oas/externa…`
`has`	software	healthy	`packages/salesforcedx-vscode-apex-oas/test/jest/oas/oasUtil…`
`Range`	software	healthy	`packages/salesforcedx-vscode-apex-oas/test/jest/oas/oasUtil…`
`Diagnostic`	software	healthy	`packages/salesforcedx-vscode-apex-oas/test/jest/oas/oasUtil…`
`prompt`	software	healthy	`packages/salesforcedx-vscode-apex-oas/test/jest/oas/generat…`
`name`	software	healthy	`packages/salesforcedx-vscode-apex-oas/test/jest/oas/generat…`
`is`	software	healthy	`packages/salesforcedx-vscode-apex-oas/test/jest/oas/generat…`
`has`	software	healthy	`packages/salesforcedx-vscode-apex-oas/src/oasUtils.ts:has`
`details`	software	healthy	`packages/salesforcedx-vscode-apex-oas/src/oasUtils.ts:detai…`
`and`	software	healthy	`packages/salesforcedx-vscode-apex-oas/src/oasUtils.ts:and`
`annotations`	software	healthy	`packages/salesforcedx-vscode-apex-oas/src/oasUtils.ts:annot…`
`mixes`	software	healthy	`packages/salesforcedx-vscode-apex-oas/src/oasUtils.ts:mixes`
`PromptGenerationOrchestrator`	software	healthy	`packages/salesforcedx-vscode-apex-oas/src/oas/promptGenerat…`
`GenerationInteractionLogger`	software	healthy	`packages/salesforcedx-vscode-apex-oas/src/oas/generationInt…`
`ExternalServiceRegistrationManager`	software	healthy	`packages/salesforcedx-vscode-apex-oas/src/oas/externalServi…`
`and`	software	healthy	`packages/salesforcedx-vscode-apex-oas/src/oas/externalServi…`
`has`	software	healthy	`packages/salesforcedx-vscode-apex-oas/src/oas/externalServi…`
`annotation`	software	healthy	`packages/salesforcedx-vscode-apex-oas/src/oas/externalServi…`
`RestResource`	software	healthy	`packages/salesforcedx-vscode-apex-oas/src/oas/externalServi…`
`name`	software	healthy	`packages/salesforcedx-vscode-apex-oas/src/oas/externalServi…`
`associated`	software	healthy	`packages/salesforcedx-vscode-apex-oas/src/oas/externalServi…`
`GenerationStrategy`	software	healthy	`packages/salesforcedx-vscode-apex-oas/src/oas/generationStr…`
`name`	software	healthy	`packages/salesforcedx-vscode-apex-oas/src/oas/generationStr…`
`is`	software	healthy	`packages/salesforcedx-vscode-apex-oas/src/oas/generationStr…`
`ApexRestStrategy`	software	healthy	`packages/salesforcedx-vscode-apex-oas/src/oas/generationStr…`
`has`	software	healthy	`packages/salesforcedx-vscode-apex-oas/src/oas/generationStr…`
`AuraEnabledStrategy`	software	healthy	`packages/salesforcedx-vscode-apex-oas/src/oas/generationStr…`
`PropertyCorrectionStep`	software	healthy	`packages/salesforcedx-vscode-apex-oas/src/oas/documentProce…`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`config`	software	healthy	`config`
`__mocks__`	software	healthy	`config/__mocks__`
`docs`	software	healthy	`docs`
`architecture`	software	healthy	`docs/architecture`
`extension-assets`	software	healthy	`extension-assets`
`syntaxes`	software	healthy	`extension-assets/syntaxes`
`scripts`	software	healthy	`scripts`
`bundling`	software	healthy	`scripts/bundling`
`xsd`	software	healthy	`scripts/xsd`
`test-workspaces`	software	healthy	`test-workspaces`
`sfdx-workspace`	software	healthy	`test-workspaces/sfdx-workspace`
`utils`	software	healthy	`test-workspaces/sfdx-workspace/utils`
`meta`	software	healthy	`test-workspaces/sfdx-workspace/utils/meta`
`lwc`	software	healthy	`test-workspaces/sfdx-workspace/utils/meta/lwc`
`todo_util`	software	healthy	`test-workspaces/sfdx-workspace/utils/meta/lwc/todo_util`
`todo_utils`	software	healthy	`test-workspaces/sfdx-workspace/utils/meta/lwc/todo_utils`
`javascript`	software	healthy	`test-workspaces/sfdx-workspace/javascript`
`__tests__`	software	healthy	`test-workspaces/sfdx-workspace/javascript/__tests__`
`fixtures`	software	healthy	`test-workspaces/sfdx-workspace/javascript/__tests__/fixtures`
`force-app`	software	healthy	`test-workspaces/sfdx-workspace/force-app`
`main`	software	healthy	`test-workspaces/sfdx-workspace/force-app/main`
`default`	software	healthy	`test-workspaces/sfdx-workspace/force-app/main/default`
`aura`	software	healthy	`test-workspaces/sfdx-workspace/force-app/main/default/aura`
`todoApp`	software	healthy	`test-workspaces/sfdx-workspace/force-app/main/default/aura/…`
`lightningExamplesApp`	software	healthy	`test-workspaces/sfdx-workspace/force-app/main/default/aura/…`
`lwc`	software	healthy	`test-workspaces/sfdx-workspace/force-app/main/default/lwc`
`hello_world`	software	healthy	`test-workspaces/sfdx-workspace/force-app/main/default/lwc/h…`
`utils`	software	healthy	`test-workspaces/sfdx-workspace/force-app/main/default/lwc/u…`
`todo_item`	software	healthy	`test-workspaces/sfdx-workspace/force-app/main/default/lwc/t…`
`typescript`	software	healthy	`test-workspaces/sfdx-workspace/force-app/main/default/lwc/t…`
`lightning_datatable_example`	software	healthy	`test-workspaces/sfdx-workspace/force-app/main/default/lwc/l…`
`index`	software	healthy	`test-workspaces/sfdx-workspace/force-app/main/default/lwc/i…`
`lightning_tree_example`	software	healthy	`test-workspaces/sfdx-workspace/force-app/main/default/lwc/l…`
`todo`	software	healthy	`test-workspaces/sfdx-workspace/force-app/main/default/lwc/t…`
`import_relative`	software	healthy	`test-workspaces/sfdx-workspace/force-app/main/default/lwc/i…`
`registered-empty-folder`	software	healthy	`test-workspaces/sfdx-workspace/registered-empty-folder`
`meta`	software	healthy	`test-workspaces/sfdx-workspace/registered-empty-folder/meta`
`lwc`	software	healthy	`test-workspaces/sfdx-workspace/registered-empty-folder/meta…`
`non-registered-folder`	software	healthy	`test-workspaces/sfdx-workspace/non-registered-folder`
`meta`	software	healthy	`test-workspaces/sfdx-workspace/non-registered-folder/meta`
`lwc`	software	healthy	`test-workspaces/sfdx-workspace/non-registered-folder/meta/l…`
`simpleComponent`	software	healthy	`test-workspaces/sfdx-workspace/non-registered-folder/meta/l…`
`standard-workspace`	software	healthy	`test-workspaces/standard-workspace`
`static`	software	healthy	`test-workspaces/standard-workspace/static`
`js`	software	healthy	`test-workspaces/standard-workspace/static/js`
`src`	software	healthy	`test-workspaces/standard-workspace/src`
`modules`	software	healthy	`test-workspaces/standard-workspace/src/modules`
`interop`	software	healthy	`test-workspaces/standard-workspace/src/modules/interop`
`ito`	software	healthy	`test-workspaces/standard-workspace/src/modules/interop/ito`
`example`	software	healthy	`test-workspaces/standard-workspace/src/modules/example`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`e2e-web`	cicd	healthy	`.github/workflows/playwrightVscodeExtE2E.yml`
`e2e-desktop`	cicd	healthy	`.github/workflows/playwrightVscodeExtE2E.yml`
`get-version`	cicd	healthy	`.github/workflows/testBuildAndRelease.yml`
`build-and-test`	cicd	healthy	`.github/workflows/testBuildAndRelease.yml`
`release`	cicd	healthy	`.github/workflows/testBuildAndRelease.yml`
`linux-unit-tests`	cicd	healthy	`.github/workflows/unitTests.yml`
`windows-unit-tests`	cicd	healthy	`.github/workflows/unitTests.yml`
`create-release`	cicd	healthy	`.github/workflows/publishI18nPackage.yml`
`publish`	cicd	healthy	`.github/workflows/publishI18nPackage.yml`
`validate-issue`	cicd	healthy	`.github/workflows/validateUpdatedIssues.yml`
`new-feature`	cicd	healthy	`.github/workflows/validateUpdatedIssues.yml`
`owned-by-other-team`	cicd	healthy	`.github/workflows/validateUpdatedIssues.yml`
`new-feature-on-another-team`	cicd	healthy	`.github/workflows/validateUpdatedIssues.yml`
`e2e-web`	cicd	healthy	`.github/workflows/servicesE2E.yml`
`notification_on_success`	cicd	healthy	`.github/workflows/slackNotification.yml`
`notification_on_failure`	cicd	healthy	`.github/workflows/slackNotification.yml`
`general_notification`	cicd	healthy	`.github/workflows/slackNotification.yml`
`e2e_notification`	cicd	healthy	`.github/workflows/slackNotification.yml`
`pr-validation`	cicd	healthy	`.github/workflows/validatePR.yml`
`code-quality`	cicd	healthy	`.github/workflows/validatePR.yml`
`validate-actions`	cicd	healthy	`.github/workflows/validatePR.yml`
`e2e-web`	cicd	healthy	`.github/workflows/soqlE2E.yml`
`e2e-desktop`	cicd	healthy	`.github/workflows/soqlE2E.yml`
`e2e-web`	cicd	healthy	`.github/workflows/apexLogE2E.yml`
`e2e-desktop`	cicd	healthy	`.github/workflows/apexLogE2E.yml`
`create_branch`	cicd	healthy	`.github/workflows/createReleaseBranch.yml`
`trigger_generate_changelog_workflow`	cicd	healthy	`.github/workflows/createReleaseBranch.yml`
`prepare-environment-from-main`	cicd	healthy	`.github/workflows/publishVSCode.yml`
`ctc-open`	cicd	healthy	`.github/workflows/publishVSCode.yml`
`publish`	cicd	healthy	`.github/workflows/publishVSCode.yml`
`ctcCloseSuccess`	cicd	healthy	`.github/workflows/publishVSCode.yml`
`ctcCloseFail`	cicd	healthy	`.github/workflows/publishVSCode.yml`
`trigger-cbw-release`	cicd	healthy	`.github/workflows/publishVSCode.yml`
`build`	cicd	healthy	`.github/workflows/runE2ETest.yml`
`create-release`	cicd	healthy	`.github/workflows/publishEslintPlugin.yml`
`publish`	cicd	healthy	`.github/workflows/publishEslintPlugin.yml`
`automerge`	cicd	healthy	`.github/workflows/dependabot-auto-merge.yml`
`e2e-web`	cicd	healthy	`.github/workflows/orgBrowserE2E.yml`
`e2e-desktop`	cicd	healthy	`.github/workflows/orgBrowserE2E.yml`
`checkout-code`	cicd	healthy	`.github/workflows/prerelease.yml`
`merge-release-branch`	cicd	healthy	`.github/workflows/prerelease.yml`
`bump-copyright-year`	cicd	healthy	`.github/workflows/copyrightYearBump.yml`
`unit-tests`	cicd	healthy	`.github/workflows/buildAndTest.yml`
`build-all`	cicd	healthy	`.github/workflows/buildAndTest.yml`
`apexLSP`	cicd	healthy	`.github/workflows/apexE2E.yml`
`debugApexTests`	cicd	healthy	`.github/workflows/apexE2E.yml`
`confirm_publish`	cicd	healthy	`.github/workflows/approveAndPublishBeta.yml`
`publish_beta`	cicd	healthy	`.github/workflows/approveAndPublishBeta.yml`
`prepare-environment-from-main`	cicd	healthy	`.github/workflows/publishOpenVSX.yml`
`ctc-open`	cicd	healthy	`.github/workflows/publishOpenVSX.yml`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`gha::playwrightVscodeExtE2E`	cicd	healthy	`.github/workflows/playwrightVscodeExtE2E.yml`
`gha::testBuildAndRelease`	cicd	healthy	`.github/workflows/testBuildAndRelease.yml`
`gha::unitTests`	cicd	healthy	`.github/workflows/unitTests.yml`
`gha::publishI18nPackage`	cicd	healthy	`.github/workflows/publishI18nPackage.yml`
`gha::validateUpdatedIssues`	cicd	healthy	`.github/workflows/validateUpdatedIssues.yml`
`gha::servicesE2E`	cicd	healthy	`.github/workflows/servicesE2E.yml`
`gha::slackNotification`	cicd	healthy	`.github/workflows/slackNotification.yml`
`gha::validatePR`	cicd	healthy	`.github/workflows/validatePR.yml`
`gha::soqlE2E`	cicd	healthy	`.github/workflows/soqlE2E.yml`
`gha::apexLogE2E`	cicd	healthy	`.github/workflows/apexLogE2E.yml`
`gha::createReleaseBranch`	cicd	healthy	`.github/workflows/createReleaseBranch.yml`
`gha::publishVSCode`	cicd	healthy	`.github/workflows/publishVSCode.yml`
`gha::runE2ETest`	cicd	healthy	`.github/workflows/runE2ETest.yml`
`gha::publishEslintPlugin`	cicd	healthy	`.github/workflows/publishEslintPlugin.yml`
`gha::dependabot-auto-merge`	cicd	healthy	`.github/workflows/dependabot-auto-merge.yml`
`gha::orgBrowserE2E`	cicd	healthy	`.github/workflows/orgBrowserE2E.yml`
`gha::prerelease`	cicd	healthy	`.github/workflows/prerelease.yml`
`gha::copyrightYearBump`	cicd	healthy	`.github/workflows/copyrightYearBump.yml`
`gha::buildAndTest`	cicd	healthy	`.github/workflows/buildAndTest.yml`
`gha::apexE2E`	cicd	healthy	`.github/workflows/apexE2E.yml`
`gha::approveAndPublishBeta`	cicd	healthy	`.github/workflows/approveAndPublishBeta.yml`
`gha::publishOpenVSX`	cicd	healthy	`.github/workflows/publishOpenVSX.yml`
`gha::orgE2E`	cicd	healthy	`.github/workflows/orgE2E.yml`
`gha::nightlyBuildMain`	cicd	healthy	`.github/workflows/nightlyBuildMain.yml`
`gha::lspE2E`	cicd	healthy	`.github/workflows/lspE2E.yml`
`gha::validateNewIssues`	cicd	healthy	`.github/workflows/validateNewIssues.yml`
`gha::publishNpmTypes`	cicd	healthy	`.github/workflows/publishNpmTypes.yml`
`gha::unitTestsLinux`	cicd	healthy	`.github/workflows/unitTestsLinux.yml`
`gha::generateXsdForMetadataTypes`	cicd	healthy	`.github/workflows/generateXsdForMetadataTypes.yml`
`gha::reportInstalls`	cicd	healthy	`.github/workflows/reportInstalls.yml`
`gha::tagAndRelease`	cicd	healthy	`.github/workflows/tagAndRelease.yml`
`gha::apexTestingE2E`	cicd	healthy	`.github/workflows/apexTestingE2E.yml`
`gha::testCommitExceptMain`	cicd	healthy	`.github/workflows/testCommitExceptMain.yml`
`gha::unitTestsWindows`	cicd	healthy	`.github/workflows/unitTestsWindows.yml`
`gha::testSlackNotifications`	cicd	healthy	`.github/workflows/testSlackNotifications.yml`
`gha::release`	cicd	healthy	`.github/workflows/release.yml`
`gha::playwrightE2EFullSuite`	cicd	healthy	`.github/workflows/playwrightE2EFullSuite.yml`
`gha::mergeReleaseBranch`	cicd	healthy	`.github/workflows/mergeReleaseBranch.yml`
`gha::lwcPlaywrightE2E`	cicd	healthy	`.github/workflows/lwcPlaywrightE2E.yml`
`gha::triggerE2EForCommit`	cicd	healthy	`.github/workflows/triggerE2EForCommit.yml`
`gha::metadataE2E`	cicd	healthy	`.github/workflows/metadataE2E.yml`
`gha::generateChangelog`	cicd	healthy	`.github/workflows/generateChangelog.yml`
`gha::e2e`	cicd	healthy	`.github/workflows/e2e.yml`
`gha::buildAll`	cicd	healthy	`.github/workflows/buildAll.yml`
`gha::publishBeta`	cicd	healthy	`.github/workflows/publishBeta.yml`
`gha::coreE2E`	cicd	healthy	`.github/workflows/coreE2E.yml`
`gha::publishBetaRelease`	cicd	healthy	`.github/workflows/publishBetaRelease.yml`
`gha::closeStaleIssues`	cicd	healthy	`.github/workflows/closeStaleIssues.yml`
`gha::nightlyBuildDevelop`	cicd	healthy	`.github/workflows/nightlyBuildDevelop.yml`
`gha::auraE2E`	cicd	healthy	`.github/workflows/auraE2E.yml`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`/notifications`	frontend	healthy	`packages/salesforcedx-vscode-metadata/test/playwright/pages…`
`/sourceTrackingStatusBarPage`	frontend	healthy	`packages/salesforcedx-vscode-metadata/test/playwright/pages…`
`/conflictTreePage`	frontend	healthy	`packages/salesforcedx-vscode-metadata/test/playwright/specs…`
`/conflictModalPage`	frontend	healthy	`packages/salesforcedx-vscode-metadata/test/playwright/specs…`
`/diffEditorPage`	frontend	healthy	`packages/salesforcedx-vscode-metadata/test/playwright/specs…`
`/settingsPage`	frontend	healthy	`packages/salesforcedx-vscode-services/test/playwright/pages…`
`/orgBrowserPage`	frontend	healthy	`packages/salesforcedx-vscode-org-browser/test/playwright/pa…`
`/problems`	frontend	healthy	`packages/playwright-vscode-ext/src/pages/problems.ts`
`/outputChannel`	frontend	healthy	`packages/playwright-vscode-ext/src/pages/outputChannel.ts`
`/codeLens`	frontend	healthy	`packages/playwright-vscode-ext/src/pages/codeLens.ts`
`/commands`	frontend	healthy	`packages/playwright-vscode-ext/src/pages/commands.ts`
`/contextMenu`	frontend	healthy	`packages/playwright-vscode-ext/src/pages/contextMenu.ts`
`/settings`	frontend	healthy	`packages/playwright-vscode-ext/src/pages/settings.ts`
`/C:/Users/runner/project/classes/ConflictsTest.cls`	frontend	healthy	`packages/salesforcedx-vscode-metadata/test/jest/shared/diff…`
`/b.ts`	frontend	healthy	`packages/salesforcedx-vscode-services/test/jest/vscode/hash…`
`/C:/proj/b.ts`	frontend	healthy	`packages/salesforcedx-vscode-services/test/jest/vscode/hash…`
`/mock/workspace`	frontend	healthy	`packages/salesforcedx-vscode-org-browser/test/jest/index.te…`
`/path/foo.cls`	frontend	healthy	`packages/salesforcedx-apex-replay-debugger/test/unit/adapte…`
`/foo`	frontend	healthy	`packages/salesforcedx-lwc-language-server/test/componentInd…`

Label	Layer	Status	Path
`IDEE_E2E_SLACK_WEBHOOK`	cicd	healthy	`—`
`EXTENSION_PATH`	cicd	healthy	`—`
`VERSION`	cicd	healthy	`—`
`CBW_DISPATCH_APP_PRIVATE_KEY`	cicd	healthy	`—`
`IDEE_GH_TOKEN`	cicd	healthy	`—`
`MAIN_VERSION`	cicd	healthy	`—`
`RELEASE_VERSION`	cicd	healthy	`—`
`ORG_ID_E2E`	cicd	healthy	`—`
`VSCE_PERSONAL_ACCESS_TOKEN`	cicd	healthy	`—`
`IDEE_GH_EMAIL`	cicd	healthy	`—`
`IDEE_OVSX_PAT`	cicd	healthy	`—`
`GITHUB_TOKEN`	cicd	healthy	`—`
`IDEE_MAIN_SLACK_WEBHOOK`	cicd	healthy	`—`
`NPM_TOKEN`	cicd	healthy	`—`
`PUBLISH_VERSION`	cicd	healthy	`—`
`THROTTLE_FACTOR`	cicd	healthy	`—`
`IDEE_RELEASE_SLACK_WEBHOOK`	cicd	healthy	`—`
`PLAYWRIGHT_VSCODE_VERSION`	cicd	healthy	`—`
`SFDX_AUTH_URL_E2E`	cicd	healthy	`—`

Label	Layer	Status	Path
`auth::packages/salesforcedx-vscode-org/test/jest/util/authE…`	security	healthy	`packages/salesforcedx-vscode-org/test/jest/util/authErrorPa…`
`auth::packages/salesforcedx-vscode-org/src/util/authErrorPa…`	security	healthy	`packages/salesforcedx-vscode-org/src/util/authErrorParser.ts`
`auth::packages/salesforcedx-apex-debugger/test/unit/command…`	security	healthy	`packages/salesforcedx-apex-debugger/test/unit/commands/base…`
`auth::packages/salesforcedx-apex-debugger/src/requestServic…`	security	healthy	`packages/salesforcedx-apex-debugger/src/requestService/requ…`
`auth::packages/salesforcedx-apex-debugger/test/unit/core/st…`	security	healthy	`packages/salesforcedx-apex-debugger/test/unit/core/streamin…`
`auth::packages/salesforcedx-apex-debugger/src/core/streamin…`	security	healthy	`packages/salesforcedx-apex-debugger/src/core/streamingClien…`
`auth::packages/playwright-vscode-ext/src/utils/helpers.ts`	security	healthy	`packages/playwright-vscode-ext/src/utils/helpers.ts`
`auth::packages/playwright-vscode-ext/src/fixtures/createDes…`	security	healthy	`packages/playwright-vscode-ext/src/fixtures/createDesktopTe…`
`auth::packages/salesforcedx-vscode-core/resources/schemas/s…`	security	healthy	`packages/salesforcedx-vscode-core/resources/schemas/sfdx-pr…`

Label	Layer	Status	Path
`port:9222`	network	healthy	`package.json`
`port:3000`	network	healthy	`packages/salesforcedx-vscode-services/package.nls.json`
`port:4317`	network	healthy	`packages/salesforcedx-vscode-services/package.nls.json`
`port:4318`	network	healthy	`packages/salesforcedx-vscode-services/package.nls.json`
`port:3003`	network	healthy	`packages/salesforcedx-vscode-services/scripts/spanFileServe…`
`port:3002`	network	healthy	`packages/salesforcedx-vscode-services/scripts/o11yDebugServ…`
`port:9229`	network	healthy	`packages/salesforcedx-vscode-lwc/src/testSupport/commands/l…`
`port:06`	network	healthy	`.github/dependabot.yml`

Label	Layer	Status	Path
`10.1.124.8`	network	healthy	`scripts/bundling/process-polyfill.js`
`131.0.0.0`	network	healthy	`scripts/xsd/scrapeUtils.ts`
`1.2.1.8`	network	healthy	`packages/salesforcedx-vscode-core/resources/schemas/sfdx-pr…`
`127.0.0.1`	network	healthy	`packages/salesforcedx-vscode-org/test/jest/util/authErrorPa…`

Label	Layer	Status	Path
`USE /`	api	healthy	`test-workspaces/standard-workspace/server.js`
`GET /`	api	healthy	`test-workspaces/standard-workspace/server.js`

Label	Layer	Status	Path
`repobility-clone-mbnrcqzr`	software	healthy	`/tmp/repobility-clone-mbnrcqzr`

Label	Layer	Status	Path
`Query root`	api	healthy	`packages/salesforcedx-vscode-soql/src/soql-model/model/mode…`

Label	Layer	Status	Path
`pubsub`	data	healthy	`packages/salesforcedx-vscode-metadata/src/statusBar/sourceT…`

Label	Layer	Status	Path
`vps::azure`	hardware	healthy	`packages/salesforcedx-vscode-services-types/package.json`

Label	Layer	Status	Path
`gpu (detected)`	hardware	healthy	`packages/playwright-vscode-ext/src/fixtures/createDesktopTe…`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/cb3b4ab7-4174-4cf8-8837-b27373a55781/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/cb3b4ab7-4174-4cf8-8837-b27373a55781/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

forcedotcom/salesforcedx-vscode

Complete repo analysis

function 50+

file 50+

class 50+

directory 50+

job 50+

pipeline 50+

route 19

env_var 19

auth 9

port 8

service 4

endpoint 2

repo 1

graphql 1

queue 1

vps 1

gpu 1