airlift/airlift

Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

17 of your 71 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 3.07s · analysis 24.25s · 6.1 MB · GitHub API rate-limit (preflight)

https://github.com/airlift/airlift · scanned 2026-06-06 01:11 UTC (4 days, 1 hour ago) · 10 languages

84 raw signals (46 security + 38 graph) 36th percentile · Java · large (100-500K LoC) System graph score 72 (lower by 3)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 4 days, 1 hour ago · v2 · 27 actionable findings from 2 signal sources. 35 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

77.8% cov · 12 findings

Score breakdown â 2026-05-18-v5

Component	Sub-score	Weight	Contribution
`structure_score`	85.0	0.15	12.75
`security_score`	55.0	0.25	13.75
`testing_score`	80.0	0.20	16.00
`documentation_score`	60.0	0.15	9.00
`practices_score`	67.0	0.15	10.05
`code_quality`	70.3	0.10	7.03
Overall		1.00	68.6

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 7 High 0 Medium 3 Low 5 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 15 System graph 12 Crowd 0 Layer: Quality 14 Cicd 3 Security 8 Api 1 Frontend 1

Exclude dismissed / FP Exclude test files

All 1781 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`pom.xml`	software	healthy	`pom.xml`
`README.md`	software	healthy	`README.md`
`pom.xml`	software	healthy	`security/pom.xml`
`generate-pem.sh`	software	healthy	`security/src/test/resources/generate-pem.sh`
`TestAutomaticMtls.java`	software	healthy	`security/src/test/java/io/airlift/security/mtls/TestAutomat…`
`TestPemReader.java`	software	healthy	`security/src/test/java/io/airlift/security/pem/TestPemReade…`
`TestCertificateBuilder.java`	software	healthy	`security/src/test/java/io/airlift/security/cert/TestCertifi…`
`TestSignatureAlgorithmIdentifier.java`	software	healthy	`security/src/test/java/io/airlift/security/csr/TestSignatur…`
`TestCertificationRequest.java`	software	healthy	`security/src/test/java/io/airlift/security/csr/TestCertific…`
`TestCertificationRequestInfo.java`	software	healthy	`security/src/test/java/io/airlift/security/csr/TestCertific…`
`AutomaticMtls.java`	software	healthy	`security/src/main/java/io/airlift/security/mtls/AutomaticMt…`
`PemWriter.java`	software	healthy	`security/src/main/java/io/airlift/security/pem/PemWriter.ja…`
`PemReader.java`	software	healthy	`security/src/main/java/io/airlift/security/pem/PemReader.ja…`
`CertificateBuilder.java`	software	healthy	`security/src/main/java/io/airlift/security/cert/Certificate…`
`DerUtils.java`	software	healthy	`security/src/main/java/io/airlift/security/der/DerUtils.java`
`CertificationRequestInfo.java`	software	healthy	`security/src/main/java/io/airlift/security/csr/Certificatio…`
`SignatureAlgorithmIdentifier.java`	software	healthy	`security/src/main/java/io/airlift/security/csr/SignatureAlg…`
`CertificationRequest.java`	software	healthy	`security/src/main/java/io/airlift/security/csr/Certificatio…`
`pom.xml`	software	healthy	`node/pom.xml`
`TestNodeConfig.java`	software	healthy	`node/src/test/java/io/airlift/node/TestNodeConfig.java`
`TestNodeInfo.java`	software	healthy	`node/src/test/java/io/airlift/node/TestNodeInfo.java`
`TestAddressSource.java`	software	healthy	`node/src/test/java/io/airlift/node/TestAddressSource.java`
`TestNodeModule.java`	software	healthy	`node/src/test/java/io/airlift/node/TestNodeModule.java`
`TestTestingNodeModule.java`	software	healthy	`node/src/test/java/io/airlift/node/testing/TestTestingNodeM…`
`NodeModule.java`	software	healthy	`node/src/main/java/io/airlift/node/NodeModule.java`
`AddressToHostname.java`	software	healthy	`node/src/main/java/io/airlift/node/AddressToHostname.java`
`NodeConfig.java`	software	healthy	`node/src/main/java/io/airlift/node/NodeConfig.java`
`NodeInfo.java`	software	healthy	`node/src/main/java/io/airlift/node/NodeInfo.java`
`TestingNodeModule.java`	software	healthy	`node/src/main/java/io/airlift/node/testing/TestingNodeModul…`
`pom.xml`	software	healthy	`secrets-spi/pom.xml`
`SecretsPlugin.java`	software	healthy	`secrets-spi/src/main/java/io/airlift/spi/secrets/SecretsPlu…`
`SecretProvider.java`	software	healthy	`secrets-spi/src/main/java/io/airlift/spi/secrets/SecretProv…`
`SecretProviderFactory.java`	software	healthy	`secrets-spi/src/main/java/io/airlift/spi/secrets/SecretProv…`
`pom.xml`	software	healthy	`log-manager/pom.xml`
`TestJsonFormatter.java`	software	healthy	`log-manager/src/test/java/io/airlift/log/TestJsonFormatter.…`
`TestOutputStreamHandler.java`	software	healthy	`log-manager/src/test/java/io/airlift/log/TestOutputStreamHa…`
`TestLogHistoryManager.java`	software	healthy	`log-manager/src/test/java/io/airlift/log/TestLogHistoryMana…`
`TestLogging.java`	software	healthy	`log-manager/src/test/java/io/airlift/log/TestLogging.java`
`TestLogJmxModule.java`	software	healthy	`log-manager/src/test/java/io/airlift/log/TestLogJmxModule.j…`
`TestBufferedHandler.java`	software	healthy	`log-manager/src/test/java/io/airlift/log/TestBufferedHandle…`
`TestLoggingConfiguration.java`	software	healthy	`log-manager/src/test/java/io/airlift/log/TestLoggingConfigu…`
`TestLoggingMBean.java`	software	healthy	`log-manager/src/test/java/io/airlift/log/TestLoggingMBean.j…`
`TestLoggingOutputStream.java`	software	healthy	`log-manager/src/test/java/io/airlift/log/TestLoggingOutputS…`
`TestRollingFileMessageOutput.java`	software	healthy	`log-manager/src/test/java/io/airlift/log/TestRollingFileMes…`
`TestSocketHandler.java`	software	healthy	`log-manager/src/test/java/io/airlift/log/TestSocketHandler.…`
`TestLogFileName.java`	software	healthy	`log-manager/src/test/java/io/airlift/log/TestLogFileName.ja…`
`TerminalColors.java`	software	healthy	`log-manager/src/main/java/io/airlift/log/TerminalColors.java`
`LogJmxModule.java`	software	healthy	`log-manager/src/main/java/io/airlift/log/LogJmxModule.java`
`JsonRecord.java`	software	healthy	`log-manager/src/main/java/io/airlift/log/JsonRecord.java`
`LogHistoryManager.java`	software	healthy	`log-manager/src/main/java/io/airlift/log/LogHistoryManager.…`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`security`	software	healthy	`security`
`src`	software	healthy	`security/src`
`test`	software	healthy	`security/src/test`
`resources`	software	healthy	`security/src/test/resources`
`java`	software	healthy	`security/src/test/java`
`io`	software	healthy	`security/src/test/java/io`
`airlift`	software	healthy	`security/src/test/java/io/airlift`
`security`	software	healthy	`security/src/test/java/io/airlift/security`
`mtls`	software	healthy	`security/src/test/java/io/airlift/security/mtls`
`pem`	software	healthy	`security/src/test/java/io/airlift/security/pem`
`cert`	software	healthy	`security/src/test/java/io/airlift/security/cert`
`csr`	software	healthy	`security/src/test/java/io/airlift/security/csr`
`main`	software	healthy	`security/src/main`
`java`	software	healthy	`security/src/main/java`
`io`	software	healthy	`security/src/main/java/io`
`airlift`	software	healthy	`security/src/main/java/io/airlift`
`security`	software	healthy	`security/src/main/java/io/airlift/security`
`mtls`	software	healthy	`security/src/main/java/io/airlift/security/mtls`
`pem`	software	healthy	`security/src/main/java/io/airlift/security/pem`
`cert`	software	healthy	`security/src/main/java/io/airlift/security/cert`
`der`	software	healthy	`security/src/main/java/io/airlift/security/der`
`csr`	software	healthy	`security/src/main/java/io/airlift/security/csr`
`node`	software	healthy	`node`
`src`	software	healthy	`node/src`
`test`	software	healthy	`node/src/test`
`java`	software	healthy	`node/src/test/java`
`io`	software	healthy	`node/src/test/java/io`
`airlift`	software	healthy	`node/src/test/java/io/airlift`
`node`	software	healthy	`node/src/test/java/io/airlift/node`
`testing`	software	healthy	`node/src/test/java/io/airlift/node/testing`
`main`	software	healthy	`node/src/main`
`java`	software	healthy	`node/src/main/java`
`io`	software	healthy	`node/src/main/java/io`
`airlift`	software	healthy	`node/src/main/java/io/airlift`
`node`	software	healthy	`node/src/main/java/io/airlift/node`
`testing`	software	healthy	`node/src/main/java/io/airlift/node/testing`
`secrets-spi`	software	healthy	`secrets-spi`
`src`	software	healthy	`secrets-spi/src`
`main`	software	healthy	`secrets-spi/src/main`
`java`	software	healthy	`secrets-spi/src/main/java`
`io`	software	healthy	`secrets-spi/src/main/java/io`
`airlift`	software	healthy	`secrets-spi/src/main/java/io/airlift`
`spi`	software	healthy	`secrets-spi/src/main/java/io/airlift/spi`
`secrets`	software	healthy	`secrets-spi/src/main/java/io/airlift/spi/secrets`
`log-manager`	software	healthy	`log-manager`
`src`	software	healthy	`log-manager/src`
`test`	software	healthy	`log-manager/src/test`
`java`	software	healthy	`log-manager/src/test/java`
`io`	software	healthy	`log-manager/src/test/java/io`
`airlift`	software	healthy	`log-manager/src/test/java/io/airlift`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`password_literal::secrets-keystore-plugin/src/test/java/io/…`	security	healthy	`secrets-keystore-plugin/src/test/java/io/airlift/secrets/ke…`
`password_literal::http-server/src/test/java/io/airlift/http…`	security	healthy	`http-server/src/test/java/io/airlift/http/server/TestHttpSe…`
`password_literal::http-server/src/test/java/io/airlift/http…`	security	healthy	`http-server/src/test/java/io/airlift/http/server/TestHttpSe…`
`password_literal::opentelemetry/src/test/java/io/airlift/op…`	security	healthy	`opentelemetry/src/test/java/io/airlift/opentelemetry/TestOp…`
`password_literal::http-client/src/main/java/io/airlift/http…`	security	healthy	`http-client/src/main/java/io/airlift/http/client/HttpClient…`
`password_literal::http-client/src/main/java/io/airlift/http…`	security	healthy	`http-client/src/main/java/io/airlift/http/client/HttpClient…`

Label	Layer	Status	Path
`JRELEASER_GPG_PASSPHRASE`	cicd	healthy	`—`
`GITHUB_TOKEN`	cicd	healthy	`—`
`JRELEASER_NEXUS2_MAVEN_CENTRAL_USERNAME`	cicd	healthy	`—`
`JRELEASER_NEXUS2_MAVEN_CENTRAL_TOKEN`	cicd	healthy	`—`
`JRELEASER_GPG_SECRET_KEY`	cicd	healthy	`—`

Label	Layer	Status	Path
`snapshot-release`	cicd	healthy	`.github/workflows/snapshot-release.yml`
`build`	cicd	healthy	`.github/workflows/ci.yml`
`error-prone`	cicd	healthy	`.github/workflows/ci.yml`
`release`	cicd	healthy	`.github/workflows/release.yml`

Label	Layer	Status	Path
`gha::snapshot-release`	cicd	healthy	`.github/workflows/snapshot-release.yml`
`gha::ci`	cicd	healthy	`.github/workflows/ci.yml`
`gha::release`	cicd	healthy	`.github/workflows/release.yml`

Label	Layer	Status	Path
`auth::api/src/main/java/io/airlift/api/openapi/OpenApiBuild…`	security	healthy	`api/src/main/java/io/airlift/api/openapi/OpenApiBuilder.java`
`auth::security-jwks/src/test/java/io/airlift/security/jwks/…`	security	healthy	`security-jwks/src/test/java/io/airlift/security/jwks/TestJw…`

Label	Layer	Status	Path
`repobility-clone-jlwu60lc`	software	healthy	`/tmp/repobility-clone-jlwu60lc`

Label	Layer	Status	Path
`postgresql`	data	healthy	`mcp/pom.xml`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/de2414e5-24ff-4da0-bad1-f1bce218faa1/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/de2414e5-24ff-4da0-bad1-f1bce218faa1/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

airlift/airlift

Complete repo analysis

file 50+

directory 50+

secret 6

env_var 5

job 4

pipeline 3

auth 2

repo 1

database 1