Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

xmtplabs/convos-ios

https://github.com/xmtplabs/convos-ios · scanned 2026-06-16 01:03 UTC (2 months, 1 week ago)

68 raw signals (0 security + 68 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 1 week ago · v1 · 25 actionable findings from 1 signal source. 43 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

100.0% cov · 25 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 3 Medium 11 Low 7 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 25 Crowd 0 Layer: Api 1 Hardware 3 Frontend 1 Cicd 4 Quality 14 Security 2

Exclude dismissed / FP Exclude test files

All 1834 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`renovate.json`	software	healthy	`renovate.json`
`conductor.json`	software	healthy	`conductor.json`
`RELEASE.md`	software	healthy	`RELEASE.md`
`.mcp.json`	software	healthy	`.mcp.json`
`Gemfile`	software	healthy	`Gemfile`
`README.md`	software	healthy	`README.md`
`CLAUDE.md`	software	healthy	`CLAUDE.md`
`.swiftlint.yml`	software	healthy	`.swiftlint.yml`
`bitrise.yml`	software	healthy	`bitrise.yml`
`.cursor-rules.yaml`	software	healthy	`.cursor-rules.yaml`
`.env.example`	software	healthy	`.env.example`
`ENVIRONMENTS.md`	software	healthy	`ENVIRONMENTS.md`
`Makefile`	software	healthy	`Makefile`
`TOOLS-CLAUDE.md`	software	healthy	`qa/TOOLS-CLAUDE.md`
`SKILL.md`	software	healthy	`qa/SKILL.md`
`RULES.md`	software	healthy	`qa/RULES.md`
`cxdb.sh`	software	healthy	`qa/cxdb/cxdb.sh`
`schema.sql`	software	healthy	`qa/cxdb/schema.sql`
`test_cxdb.sh`	software	healthy	`qa/cxdb/test_cxdb.sh`
`28-app-icon-badge-count.md`	software	healthy	`qa/tests/28-app-icon-badge-count.md`
`19-profile-photo.md`	software	healthy	`qa/tests/19-profile-photo.md`
`37b-agent-contact-consent.md`	software	healthy	`qa/tests/37b-agent-contact-consent.md`
`27-send-receive-video.md`	software	healthy	`qa/tests/27-send-receive-video.md`
`25-conversations-list-baseline.md`	software	healthy	`qa/tests/25-conversations-list-baseline.md`
`23-pending-invites-home-view.md`	software	healthy	`qa/tests/23-pending-invites-home-view.md`
`30-voice-memos.md`	software	healthy	`qa/tests/30-voice-memos.md`
`37-agent-contact-visibility-edges.md`	software	healthy	`qa/tests/37-agent-contact-visibility-edges.md`
`06-replies.md`	software	healthy	`qa/tests/06-replies.md`
`40-dm-members-as-contacts.md`	software	healthy	`qa/tests/40-dm-members-as-contacts.md`
`12-create-conversation-from-app.md`	software	healthy	`qa/tests/12-create-conversation-from-app.md`
`33-read-receipts.md`	software	healthy	`qa/tests/33-read-receipts.md`
`18-delete-all-data.md`	software	healthy	`qa/tests/18-delete-all-data.md`
`27-invite-code-gating.md`	software	healthy	`qa/tests/27-invite-code-gating.md`
`23-scheduled-explode.md`	software	healthy	`qa/tests/23-scheduled-explode.md`
`04-invite-join-paste.md`	software	healthy	`qa/tests/04-invite-join-paste.md`
`07-profile-update.md`	software	healthy	`qa/tests/07-profile-update.md`
`05-reactions.md`	software	healthy	`qa/tests/05-reactions.md`
`16-conversation-filters.md`	software	healthy	`qa/tests/16-conversation-filters.md`
`31-convos-button-invite.md`	software	healthy	`qa/tests/31-convos-button-invite.md`
`37-app-clip-handoff.md`	software	healthy	`qa/tests/37-app-clip-handoff.md`
`03-invite-join-deep-link.md`	software	healthy	`qa/tests/03-invite-join-deep-link.md`
`30-verified-assistants.md`	software	healthy	`qa/tests/30-verified-assistants.md`
`34-side-convo-stable-emoji.md`	software	healthy	`qa/tests/34-side-convo-stable-emoji.md`
`40b-dm-block-consent.md`	software	healthy	`qa/tests/40b-dm-block-consent.md`
`10-pin-conversation.md`	software	healthy	`qa/tests/10-pin-conversation.md`
`20-send-receive-photos.md`	software	healthy	`qa/tests/20-send-receive-photos.md`
`41-upgrade-preservation.md`	software	healthy	`qa/tests/41-upgrade-preservation.md`
`26-failed-message-send.md`	software	healthy	`qa/tests/26-failed-message-send.md`
`42-agent-builder-attachment-summary.md`	software	healthy	`qa/tests/42-agent-builder-attachment-summary.md`
`25-global-defaults-new-conversation.md`	software	healthy	`qa/tests/25-global-defaults-new-conversation.md`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`qa`	software	healthy	`qa`
`cxdb`	software	healthy	`qa/cxdb`
`tests`	software	healthy	`qa/tests`
`structured`	software	healthy	`qa/tests/structured`
`scripts`	software	healthy	`qa/scripts`
`future`	software	healthy	`qa/future`
`skills`	software	healthy	`qa/skills`
`qa-writer`	software	healthy	`qa/skills/qa-writer`
`ConvosAppClipTests`	software	healthy	`ConvosAppClipTests`
`docs`	software	healthy	`docs`
`investigations`	software	healthy	`docs/investigations`
`adr`	software	healthy	`docs/adr`
`plans`	software	healthy	`docs/plans`
`Convos`	software	healthy	`Convos`
`AppIcon-Dev.icon`	software	healthy	`Convos/AppIcon-Dev.icon`
`App Settings`	software	healthy	`Convos/App Settings`
`Subscription`	software	healthy	`Convos/Subscription`
`Invite Helpers`	software	healthy	`Convos/Invite Helpers`
`Profile`	software	healthy	`Convos/Profile`
`AppIcon-PR.icon`	software	healthy	`Convos/AppIcon-PR.icon`
`Agent Builder`	software	healthy	`Convos/Agent Builder`
`Assets.xcassets`	software	healthy	`Convos/Assets.xcassets`
`colorBackgroundRaisedSecondary.colorset`	software	healthy	`Convos/Assets.xcassets/colorBackgroundRaisedSecondary.color…`
`colorRed.colorset`	software	healthy	`Convos/Assets.xcassets/colorRed.colorset`
`colorBorderEdge.colorset`	software	healthy	`Convos/Assets.xcassets/colorBorderEdge.colorset`
`colorStandard.colorset`	software	healthy	`Convos/Assets.xcassets/colorStandard.colorset`
`colorBorderSubtle2.colorset`	software	healthy	`Convos/Assets.xcassets/colorBorderSubtle2.colorset`
`colorBackgroundMedia.colorset`	software	healthy	`Convos/Assets.xcassets/colorBackgroundMedia.colorset`
`addAgentIcon.imageset`	software	healthy	`Convos/Assets.xcassets/addAgentIcon.imageset`
`colorFillPrimary.colorset`	software	healthy	`Convos/Assets.xcassets/colorFillPrimary.colorset`
`colorTextDarkBg.colorset`	software	healthy	`Convos/Assets.xcassets/colorTextDarkBg.colorset`
`colorOrganize.colorset`	software	healthy	`Convos/Assets.xcassets/colorOrganize.colorset`
`colorBackgroundSubtle.colorset`	software	healthy	`Convos/Assets.xcassets/colorBackgroundSubtle.colorset`
`colorTextPrimaryInverted.colorset`	software	healthy	`Convos/Assets.xcassets/colorTextPrimaryInverted.colorset`
`colorReminders.colorset`	software	healthy	`Convos/Assets.xcassets/colorReminders.colorset`
`colorGreen.colorset`	software	healthy	`Convos/Assets.xcassets/colorGreen.colorset`
`colorFillReaxHeart.colorset`	software	healthy	`Convos/Assets.xcassets/colorFillReaxHeart.colorset`
`colorFillInvertedMinimal.colorset`	software	healthy	`Convos/Assets.xcassets/colorFillInvertedMinimal.colorset`
`colorFillSecondary.colorset`	software	healthy	`Convos/Assets.xcassets/colorFillSecondary.colorset`
`xmtpIcon.imageset`	software	healthy	`Convos/Assets.xcassets/xmtpIcon.imageset`
`colorEmail.colorset`	software	healthy	`Convos/Assets.xcassets/colorEmail.colorset`
`colorTextInactive.colorset`	software	healthy	`Convos/Assets.xcassets/colorTextInactive.colorset`
`colorBubble.colorset`	software	healthy	`Convos/Assets.xcassets/colorBubble.colorset`
`colorBackgroundSurfaceless.colorset`	software	healthy	`Convos/Assets.xcassets/colorBackgroundSurfaceless.colorset`
`colorDarkAlpha15.colorset`	software	healthy	`Convos/Assets.xcassets/colorDarkAlpha15.colorset`
`gear.imageset`	software	healthy	`Convos/Assets.xcassets/gear.imageset`
`colorBackgroundPic.colorset`	software	healthy	`Convos/Assets.xcassets/colorBackgroundPic.colorset`
`colorLinkBackground.colorset`	software	healthy	`Convos/Assets.xcassets/colorLinkBackground.colorset`
`colorCaution.colorset`	software	healthy	`Convos/Assets.xcassets/colorCaution.colorset`
`colorBorderSubtle.colorset`	software	healthy	`Convos/Assets.xcassets/colorBorderSubtle.colorset`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`esc`	software	healthy	`qa/scripts/generate-artifact.py:54`
`classify_line`	software	healthy	`qa/scripts/generate-artifact.py:58`
`analyze_log_file`	software	healthy	`qa/scripts/generate-artifact.py:98`
`analyze_logs`	software	healthy	`qa/scripts/generate-artifact.py:133`
`fmt_duration`	software	healthy	`qa/scripts/generate-artifact.py:147`
`run_duration`	software	healthy	`qa/scripts/generate-artifact.py:160`
`status_pill`	software	healthy	`qa/scripts/generate-artifact.py:170`
`load_run_data`	software	healthy	`qa/scripts/generate-artifact.py:179`
`order_screenshots`	software	healthy	`qa/scripts/generate-artifact.py:210`
`known_test_ids`	software	healthy	`qa/scripts/generate-artifact.py:225`
`run_scope_title`	software	healthy	`qa/scripts/generate-artifact.py:234`
`narrative_html`	software	healthy	`qa/scripts/generate-artifact.py:257`
`render_hero`	software	healthy	`qa/scripts/generate-artifact.py:274`
`render_carousel`	software	healthy	`qa/scripts/generate-artifact.py:297`
`render_summary`	software	healthy	`qa/scripts/generate-artifact.py:333`
`render_tests_tab`	software	healthy	`qa/scripts/generate-artifact.py:411`
`render_logs_tab`	software	healthy	`qa/scripts/generate-artifact.py:448`
`render_findings_tab`	software	healthy	`qa/scripts/generate-artifact.py:496`
`render_page`	software	healthy	`qa/scripts/generate-artifact.py:785`
`print_analysis`	software	healthy	`qa/scripts/generate-artifact.py:824`
`main`	software	healthy	`qa/scripts/generate-artifact.py:835`
`ye`	software	healthy	`Convos/Resources/marked.min.js:ye`
`z`	software	healthy	`Convos/Resources/marked.min.js:z`
`N`	software	healthy	`Convos/Resources/marked.min.js:N`
`h`	software	healthy	`Convos/Resources/marked.min.js:h`
`R`	software	healthy	`Convos/Resources/marked.min.js:R`
`k`	software	healthy	`Convos/Resources/marked.min.js:k`
`runnerPrompt`	software	healthy	`.claude/workflows/qa-run.js:runnerPrompt`

Label	Layer	Status	Path
`APP_STORE_CONNECT_ISSUER_ID`	cicd	healthy	`—`
`ANTHROPIC_API_KEY`	cicd	healthy	`—`
`POSTHOG_API_KEY_PROD`	cicd	healthy	`—`
`GITHUB_TOKEN`	cicd	healthy	`—`
`APP_STORE_CONNECT_API_PRIVATE_KEY`	cicd	healthy	`—`
`MATCH_PASSWORD`	cicd	healthy	`—`
`FLY_API_TOKEN`	cicd	healthy	`—`
`CACHIX_AUTH_TOKEN`	cicd	healthy	`—`
`SENTRY_ORG`	cicd	healthy	`—`
`XCODE_APP_PATH`	cicd	healthy	`—`
`SENTRY_PROJECT`	cicd	healthy	`—`
`POSTHOG_API_KEY_DEV`	cicd	healthy	`—`
`FIREBASE_SERVICE_ACCOUNT_JSON`	cicd	healthy	`—`
`APP_STORE_CONNECT_API_KEY_ID`	cicd	healthy	`—`
`SENTRY_DSN_PROD`	cicd	healthy	`—`
`SENTRY_AUTH_TOKEN`	cicd	healthy	`—`
`CONVOS_CERTIFICATES_TOKEN`	cicd	healthy	`—`
`SWIFTLINT_VERSION`	cicd	healthy	`—`
`XCODE_NIX_PATH`	cicd	healthy	`—`
`SENTRY_DSN_DEV`	cicd	healthy	`—`

Label	Layer	Status	Path
`create-release-pr`	cicd	healthy	`.github/workflows/create-release.yml`
`create-tag`	cicd	healthy	`.github/workflows/release-tag-on-merge.yml`
`cleanup`	cicd	healthy	`.github/workflows/fly-cleanup.yml`
`claude-review`	cicd	healthy	`.github/workflows/claude-code-review.yml`
`warm`	cicd	healthy	`.github/workflows/warm-xcode-cache.yml`
`unit-tests`	cicd	healthy	`.github/workflows/convoscore-tests.yml`
`deploy-backend`	cicd	healthy	`.github/workflows/convoscore-tests.yml`
`integration-tests`	cicd	healthy	`.github/workflows/convoscore-tests.yml`
`cleanup`	cicd	healthy	`.github/workflows/convoscore-tests.yml`
`claude`	cicd	healthy	`.github/workflows/claude.yml`
`promote`	cicd	healthy	`.github/workflows/promote-to-main.yml`
`test`	cicd	healthy	`.github/workflows/keychain-identity-store-tests-noop.yml`
`firebase_pr`	cicd	healthy	`.github/workflows/firebase-pr.yml`
`test`	cicd	healthy	`.github/workflows/keychain-identity-store-tests.yml`
`testflight_prod`	cicd	healthy	`.github/workflows/testflight-prod.yml`
`auto-release`	cicd	healthy	`.github/workflows/auto-release.yml`
`SwiftLint`	cicd	healthy	`.github/workflows/swiftlint.yml`

Label	Layer	Status	Path
`gha::create-release`	cicd	healthy	`.github/workflows/create-release.yml`
`gha::release-tag-on-merge`	cicd	healthy	`.github/workflows/release-tag-on-merge.yml`
`gha::fly-cleanup`	cicd	healthy	`.github/workflows/fly-cleanup.yml`
`gha::claude-code-review`	cicd	healthy	`.github/workflows/claude-code-review.yml`
`gha::warm-xcode-cache`	cicd	healthy	`.github/workflows/warm-xcode-cache.yml`
`gha::convoscore-tests`	cicd	healthy	`.github/workflows/convoscore-tests.yml`
`gha::claude`	cicd	healthy	`.github/workflows/claude.yml`
`gha::promote-to-main`	cicd	healthy	`.github/workflows/promote-to-main.yml`
`gha::keychain-identity-store-tests-noop`	cicd	healthy	`.github/workflows/keychain-identity-store-tests-noop.yml`
`gha::firebase-pr`	cicd	healthy	`.github/workflows/firebase-pr.yml`
`gha::keychain-identity-store-tests`	cicd	healthy	`.github/workflows/keychain-identity-store-tests.yml`
`gha::testflight-prod`	cicd	healthy	`.github/workflows/testflight-prod.yml`
`gha::auto-release`	cicd	healthy	`.github/workflows/auto-release.yml`
`gha::swiftlint`	cicd	healthy	`.github/workflows/swiftlint.yml`

Label	Layer	Status	Path
`test_runs`	data	healthy	`qa/cxdb/schema.sql`
`test_results`	data	healthy	`qa/cxdb/schema.sql`
`criteria_results`	data	healthy	`qa/cxdb/schema.sql`
`test_state`	data	healthy	`qa/cxdb/schema.sql`
`run_state`	data	healthy	`qa/cxdb/schema.sql`
`log_entries`	data	healthy	`qa/cxdb/schema.sql`
`accessibility_findings`	data	healthy	`qa/cxdb/schema.sql`
`bug_findings`	data	healthy	`qa/cxdb/schema.sql`
`perf_measurements`	data	healthy	`qa/cxdb/schema.sql`
`screenshots`	data	healthy	`qa/cxdb/schema.sql`
`app_events`	data	healthy	`qa/cxdb/schema.sql`

Label	Layer	Status	Path
`port:12`	network	healthy	`qa/cxdb/test_cxdb.sh`
`port:01`	network	healthy	`qa/cxdb/test_cxdb.sh`
`port:03`	network	healthy	`qa/tests/structured/32-voice-memo-transcription.yaml`
`port:5555`	network	healthy	`dev/docker-compose.yml`
`port:5556`	network	healthy	`dev/docker-compose.yml`
`port:8545`	network	healthy	`dev/docker-compose.yml`
`port:5558`	network	healthy	`dev/docker-compose.yml`
`port:06`	network	healthy	`.github/workflows/warm-xcode-cache.yml`

Label	Layer	Status	Path
`image::dev/Dockerfile`	hardware	healthy	`dev/Dockerfile`
`node`	hardware	healthy	`dev/docker-compose.yml`
`validation`	hardware	healthy	`dev/docker-compose.yml`
`anvil`	hardware	healthy	`dev/docker-compose.yml`
`history-server`	hardware	healthy	`dev/docker-compose.yml`
`db`	hardware	healthy	`dev/docker-compose.yml`
`mlsdb`	hardware	healthy	`dev/docker-compose.yml`

Label	Layer	Status	Path
`postgres`	data	healthy	`README.md`
`sqlite`	data	healthy	`qa/tests/structured/41-upgrade-preservation.yaml`
`postgresql`	data	healthy	`dev/local-stack/stack.compose.yml`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`CLAUDE.md`
`10.0.1.5`	network	healthy	`Scripts/generate-secrets-local.sh`

Label	Layer	Status	Path
`auth::dev/local-stack/README.md`	security	healthy	`dev/local-stack/README.md`
`auth::.claude/skills/convos-cli/SKILL.md`	security	healthy	`.claude/skills/convos-cli/SKILL.md`

Label	Layer	Status	Path
`repobility-clone-11jo4l2l`	software	healthy	`/tmp/repobility-clone-11jo4l2l`

Label	Layer	Status	Path
`password_literal::dev/local-stack/stack.compose.yml`	security	healthy	`dev/local-stack/stack.compose.yml`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/d054d99f-0b02-41f3-a526-530f75125ca1/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/d054d99f-0b02-41f3-a526-530f75125ca1/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

xmtplabs/convos-ios

Complete repo analysis

file 50+

directory 50+

function 28

env_var 20

job 17

pipeline 14

table 11

port 8

container 7

database 3

service 2

auth 2

repo 1

secret 1