Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
51 of your 73 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 2.31s · analysis 3.67s · 8.7 MB · GitHub API rate-limit (preflight)

mjun0812/flash-attention-prebuild-wheels

https://github.com/mjun0812/flash-attention-prebuild-wheels · scanned 2026-06-05 23:28 UTC (1 week, 2 days ago) · 10 languages

166 raw signals (70 security + 96 graph) 16th percentile · Python · small (2-20K LoC) System graph score 82 (lower by 27)

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 1 week, 2 days ago · v2 · 46 actionable findings from 2 signal sources. 72 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Score breakdown â 2026-05-18-v5
Component Sub-score Weight Contribution
structure_score 55.0 0.15 8.25
security_score 70.0 0.25 17.50
testing_score 0.0 0.20 0.00
documentation_score 76.0 0.15 11.40
practices_score 74.0 0.15 11.10
code_quality 63.4 0.10 6.34
Overall 1.00 54.6
Severity distribution — click a segment to filter
Active filters: severity: critical × excluding tests × Reset all
Scan summary Quality grade C- (55/100). Dimensions: security 70, maintainability 55. 70 findings (26 security). 4,064 lines analyzed.

Showing 1 of 46 actionable findings. 118 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

critical Security checks cicd CI/CD security conf 0.98 2 occurrences Compose service runs privileged
Privileged containers receive broad host kernel capabilities and can bypass container isolation.
lines 1, 18
self-hosted-runner/compose.yml:1, 18 (2 hits)
CI/CD securitycontainers
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/cecd6390-391c-466a-b830-73895a94218c/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/cecd6390-391c-466a-b830-73895a94218c/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.