Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

TomHennen/wrangle

https://github.com/TomHennen/wrangle · scanned 2026-06-16 00:39 UTC (2 months, 1 week ago)

15 raw signals (0 security + 15 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 1 week ago · v1 · 12 actionable findings from 1 signal source. 3 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

88.9% cov · 12 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 0 Medium 7 Low 2 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 12 Crowd 0 Layer: Network 1 Hardware 2 Frontend 1 Cicd 1 Quality 6 Security 1

Exclude dismissed / FP Exclude test files

All 256 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`DEP_MGMT.md`	software	healthy	`DEP_MGMT.md`
`README.md`	software	healthy	`README.md`
`run.sh`	software	healthy	`run.sh`
`CLAUDE.md`	software	healthy	`CLAUDE.md`
`.zizmor.yml`	software	healthy	`.zizmor.yml`
`test.sh`	software	healthy	`test.sh`
`Makefile`	software	healthy	`Makefile`
`LICENSE`	software	healthy	`LICENSE`
`Dockerfile`	software	healthy	`test/Dockerfile`
`setup_integration.sh`	software	healthy	`test/setup_integration.sh`
`dispatch.sh`	software	healthy	`test/integration/dispatch.sh`
`push_showcase_tag.sh`	software	healthy	`test/integration/push_showcase_tag.sh`
`SPEC.md`	software	healthy	`test/integration/SPEC.md`
`bats_helpers.bash`	software	healthy	`test/lib/bats_helpers.bash`
`FAQ.md`	software	healthy	`docs/FAQ.md`
`docker_best_practices.md`	software	healthy	`docs/docker_best_practices.md`
`shell_best_practices.md`	software	healthy	`docs/shell_best_practices.md`
`ampel_research.md`	software	healthy	`docs/ampel_research.md`
`SLSA_L3_AUDIT.md`	software	healthy	`docs/SLSA_L3_AUDIT.md`
`SPEC.md`	software	healthy	`docs/SPEC.md`
`RELEASING.md`	software	healthy	`docs/RELEASING.md`
`verifying_artifacts.md`	software	healthy	`docs/verifying_artifacts.md`
`REQUIREMENTS_MAPPING.md`	software	healthy	`docs/REQUIREMENTS_MAPPING.md`
`HOW_TO_ADD_A_BUILD_TYPE.md`	software	healthy	`docs/HOW_TO_ADD_A_BUILD_TYPE.md`
`e2e_testing.md`	software	healthy	`docs/e2e_testing.md`
`log_findings.sh`	software	healthy	`lib/log_findings.sh`
`sarif_to_md.sh`	software	healthy	`lib/sarif_to_md.sh`
`format_sarif_summary.sh`	software	healthy	`lib/format_sarif_summary.sh`
`stop_commands_guard.sh`	software	healthy	`lib/stop_commands_guard.sh`
`env.sh`	software	healthy	`lib/env.sh`
`setup.sh`	software	healthy	`lib/setup.sh`
`tool_banner.sh`	software	healthy	`lib/tool_banner.sh`
`check_results.sh`	software	healthy	`lib/check_results.sh`
`validate_path.sh`	software	healthy	`lib/validate_path.sh`
`download_verify.sh`	software	healthy	`lib/download_verify.sh`
`sanitize.sh`	software	healthy	`lib/sanitize.sh`
`write_tool_error_marker.sh`	software	healthy	`lib/write_tool_error_marker.sh`
`fix-issues.md`	software	healthy	`.claude/commands/fix-issues.md`
`README.md`	software	healthy	`policies/testdata/README.md`
`bump_action_pins.sh`	software	healthy	`tools/bump_action_pins.sh`
`check_pin_ancestry.sh`	software	healthy	`tools/check_pin_ancestry.sh`
`go.mod`	software	healthy	`tools/go.mod`
`self_ref_pin_paths.sh`	software	healthy	`tools/self_ref_pin_paths.sh`
`osv-scanner.toml`	software	healthy	`tools/osv-scanner.toml`
`adapter.sh`	software	healthy	`tools/osv/adapter.sh`
`SPEC.md`	software	healthy	`tools/osv/SPEC.md`
`render_md.sh`	software	healthy	`tools/osv/render_md.sh`
`lint.sh`	software	healthy	`tools/wrangle-workflow-lint/lint.sh`
`requirements.txt`	software	healthy	`tools/wrangle-workflow-lint/requirements.txt`
`lint.py`	software	healthy	`tools/wrangle-workflow-lint/lint.py`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`test`	software	healthy	`test`
`integration`	software	healthy	`test/integration`
`lib`	software	healthy	`test/lib`
`docs`	software	healthy	`docs`
`lib`	software	healthy	`lib`
`.claude`	software	healthy	`.claude`
`commands`	software	healthy	`.claude/commands`
`policies`	software	healthy	`policies`
`testdata`	software	healthy	`policies/testdata`
`tools`	software	healthy	`tools`
`osv`	software	healthy	`tools/osv`
`wrangle-workflow-lint`	software	healthy	`tools/wrangle-workflow-lint`
`fixtures`	software	healthy	`tools/wrangle-workflow-lint/fixtures`
`syft`	software	healthy	`tools/syft`
`scorecard`	software	healthy	`tools/scorecard`
`zizmor`	software	healthy	`tools/zizmor`
`fixtures`	software	healthy	`tools/zizmor/fixtures`
`wrangle-shell-lint`	software	healthy	`tools/wrangle-shell-lint`
`rules`	software	healthy	`tools/wrangle-shell-lint/rules`
`fixtures`	software	healthy	`tools/wrangle-shell-lint/fixtures`
`wrangle-lint`	software	healthy	`tools/wrangle-lint`
`fixtures`	software	healthy	`tools/wrangle-lint/fixtures`
`good`	software	healthy	`tools/wrangle-lint/fixtures/good`
`.github`	software	healthy	`tools/wrangle-lint/fixtures/good/.github`
`glob_ga`	software	healthy	`tools/wrangle-lint/fixtures/glob_ga`
`.github`	software	healthy	`tools/wrangle-lint/fixtures/glob_ga/.github`
`dependency-review`	software	healthy	`tools/dependency-review`
`actions`	software	healthy	`actions`
`release_gate`	software	healthy	`actions/release_gate`
`verify`	software	healthy	`actions/verify`
`verify-vsa`	software	healthy	`actions/verify-vsa`
`scan`	software	healthy	`actions/scan`
`preflight_guard`	software	healthy	`actions/preflight_guard`
`gh_workflow_examples`	software	healthy	`gh_workflow_examples`
`.github`	software	healthy	`.github`
`workflows`	software	healthy	`.github/workflows`

Label	Layer	Status	Path
`guard`	cicd	healthy	`.github/workflows/build_and_publish_python.yml`
`gate`	cicd	healthy	`.github/workflows/build_and_publish_python.yml`
`scan`	cicd	healthy	`.github/workflows/build_and_publish_python.yml`
`build`	cicd	healthy	`.github/workflows/build_and_publish_python.yml`
`attest`	cicd	healthy	`.github/workflows/build_and_publish_python.yml`
`verify`	cicd	healthy	`.github/workflows/build_and_publish_python.yml`
`guard`	cicd	healthy	`.github/workflows/check_source_change.yml`
`check-change`	cicd	healthy	`.github/workflows/check_source_change.yml`
`test`	cicd	healthy	`.github/workflows/test.yml`
`verify-vsa-action`	cicd	healthy	`.github/workflows/test.yml`
`guard`	cicd	healthy	`.github/workflows/build_shell.yml`
`scan`	cicd	healthy	`.github/workflows/build_shell.yml`
`shell-build`	cicd	healthy	`.github/workflows/build_shell.yml`
`dispatch`	cicd	healthy	`.github/workflows/integration-test.yml`
`push-tag`	cicd	healthy	`.github/workflows/release-showcase.yml`
`build-shell`	cicd	healthy	`.github/workflows/local_build_shell.yml`
`pin-ancestry`	cicd	healthy	`.github/workflows/local_build_shell.yml`
`guard`	cicd	healthy	`.github/workflows/build_and_publish_container.yml`
`gate`	cicd	healthy	`.github/workflows/build_and_publish_container.yml`
`scan`	cicd	healthy	`.github/workflows/build_and_publish_container.yml`
`build`	cicd	healthy	`.github/workflows/build_and_publish_container.yml`
`attest`	cicd	healthy	`.github/workflows/build_and_publish_container.yml`
`verify`	cicd	healthy	`.github/workflows/build_and_publish_container.yml`
`guard`	cicd	healthy	`.github/workflows/build_and_publish_npm.yml`
`gate`	cicd	healthy	`.github/workflows/build_and_publish_npm.yml`
`scan`	cicd	healthy	`.github/workflows/build_and_publish_npm.yml`
`build`	cicd	healthy	`.github/workflows/build_and_publish_npm.yml`
`attest`	cicd	healthy	`.github/workflows/build_and_publish_npm.yml`
`verify`	cicd	healthy	`.github/workflows/build_and_publish_npm.yml`
`guard`	cicd	healthy	`.github/workflows/build_and_publish_go.yml`
`gate`	cicd	healthy	`.github/workflows/build_and_publish_go.yml`
`scan`	cicd	healthy	`.github/workflows/build_and_publish_go.yml`
`checks`	cicd	healthy	`.github/workflows/build_and_publish_go.yml`
`release`	cicd	healthy	`.github/workflows/build_and_publish_go.yml`
`attest`	cicd	healthy	`.github/workflows/build_and_publish_go.yml`
`verify`	cicd	healthy	`.github/workflows/build_and_publish_go.yml`

Label	Layer	Status	Path
`tolerates_failure`	software	healthy	`tools/wrangle-workflow-lint/lint.py:89`
`__init__`	software	healthy	`tools/wrangle-workflow-lint/lint.py:110`
`__str__`	software	healthy	`tools/wrangle-workflow-lint/lint.py:116`
`mapping_items`	software	healthy	`tools/wrangle-workflow-lint/lint.py:120`
`find_steps`	software	healthy	`tools/wrangle-workflow-lint/lint.py:128`
`run_body_physical_lines`	software	healthy	`tools/wrangle-workflow-lint/lint.py:146`
`step_sub`	software	healthy	`tools/wrangle-workflow-lint/lint.py:168`
`scalar_text`	software	healthy	`tools/wrangle-workflow-lint/lint.py:173`
`check_run_rules`	software	healthy	`tools/wrangle-workflow-lint/lint.py:177`
`has_adjacent_justification`	software	healthy	`tools/wrangle-workflow-lint/lint.py:212`
`check_step_rules`	software	healthy	`tools/wrangle-workflow-lint/lint.py:239`
`lint_file`	software	healthy	`tools/wrangle-workflow-lint/lint.py:278`
`main`	software	healthy	`tools/wrangle-workflow-lint/lint.py:295`

Label	Layer	Status	Path
`auth::gh_workflow_examples/build_python.yml`	security	healthy	`gh_workflow_examples/build_python.yml`
`auth::.github/workflows/build_and_publish_go.yml`	security	healthy	`.github/workflows/build_and_publish_go.yml`
`auth::lib/download_verify.sh`	security	healthy	`lib/download_verify.sh`
`auth::tools/syft/install.sh`	security	healthy	`tools/syft/install.sh`
`auth::actions/verify/action.yml`	security	healthy	`actions/verify/action.yml`
`auth::gh_workflow_examples/build_and_publish_containers.yml`	security	healthy	`gh_workflow_examples/build_and_publish_containers.yml`
`auth::gh_workflow_examples/build_go.yml`	security	healthy	`gh_workflow_examples/build_go.yml`
`auth::.github/workflows/build_and_publish_container.yml`	security	healthy	`.github/workflows/build_and_publish_container.yml`
`auth::.github/workflows/build_and_publish_python.yml`	security	healthy	`.github/workflows/build_and_publish_python.yml`
`auth::tools/go.mod`	security	healthy	`tools/go.mod`
`auth::README.md`	security	healthy	`README.md`
`auth::gh_workflow_examples/build_npm.yml`	security	healthy	`gh_workflow_examples/build_npm.yml`
`auth::.github/workflows/build_and_publish_npm.yml`	security	healthy	`.github/workflows/build_and_publish_npm.yml`

Label	Layer	Status	Path
`gha::build_and_publish_python`	cicd	healthy	`.github/workflows/build_and_publish_python.yml`
`gha::check_source_change`	cicd	healthy	`.github/workflows/check_source_change.yml`
`gha::test`	cicd	healthy	`.github/workflows/test.yml`
`gha::build_shell`	cicd	healthy	`.github/workflows/build_shell.yml`
`gha::integration-test`	cicd	healthy	`.github/workflows/integration-test.yml`
`gha::release-showcase`	cicd	healthy	`.github/workflows/release-showcase.yml`
`gha::local_build_shell`	cicd	healthy	`.github/workflows/local_build_shell.yml`
`gha::build_and_publish_container`	cicd	healthy	`.github/workflows/build_and_publish_container.yml`
`gha::build_and_publish_npm`	cicd	healthy	`.github/workflows/build_and_publish_npm.yml`
`gha::build_and_publish_go`	cicd	healthy	`.github/workflows/build_and_publish_go.yml`

Label	Layer	Status	Path
`vps::azure`	hardware	healthy	`tools/go.mod`
`vps::aws`	hardware	healthy	`tools/go.mod`
`vps::ec2`	hardware	healthy	`tools/go.mod`
`vps::gcp`	hardware	healthy	`tools/go.mod`

Label	Layer	Status	Path
`port:256`	network	healthy	`test/Dockerfile`
`port:18607`	network	healthy	`test/Dockerfile`

Label	Layer	Status	Path
`GITHUB_TOKEN`	cicd	healthy	`—`
`TEST_REPO_PAT`	cicd	healthy	`—`

Label	Layer	Status	Path
`repobility-clone-agt5dn00`	software	healthy	`/tmp/repobility-clone-agt5dn00`

Label	Layer	Status	Path
`Finding`	software	healthy	`tools/wrangle-workflow-lint/lint.py:107`

Label	Layer	Status	Path
`sqlite`	data	healthy	`tools/go.mod`

Label	Layer	Status	Path
`image::test/Dockerfile`	hardware	healthy	`test/Dockerfile`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/dd438323-38bd-4cbc-a12a-34b91dea75f3/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/dd438323-38bd-4cbc-a12a-34b91dea75f3/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

TomHennen/wrangle

Complete repo analysis

file 50+

directory 36

job 36

function 13

auth 13

pipeline 10

vps 4

port 2

env_var 2

repo 1

class 1

database 1

container 1