Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
139 of your 203 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 1.44s · analysis 12.43s · 2.7 MB · GitHub API rate-limit (preflight)

CelestoAI/SmolVM

https://github.com/CelestoAI/SmolVM · scanned 2026-06-05 14:54 UTC (5 days, 4 hours ago) · 10 languages

513 raw signals (191 security + 322 graph) 68th percentile · Python · medium (20-100K LoC) System graph score 60 (higher by 13)

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 5 days, 4 hours ago · v2 · 214 actionable findings from 2 signal sources. 113 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Score breakdown â 2026-05-18-v5
Component Sub-score Weight Contribution
structure_score 85.0 0.15 12.75
security_score 45.4 0.25 11.35
testing_score 100.0 0.20 20.00
documentation_score 100.0 0.15 15.00
practices_score 74.0 0.15 11.10
code_quality 35.1 0.10 3.51
Overall 1.00 73.7
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all

All 3093 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

LabelLayerStatusPath
_enabled_symbols software healthy tests/test_kernel_config.py:23
test_microvm_kernel_enables_podman_netavark_networking software healthy tests/test_kernel_config.py:33
_qemu_vm_info software healthy tests/test_qemu_args.py:34
test_linux_x86_64_kvm_argv_byte_identical software healthy tests/test_qemu_args.py:59
_with_vsock software healthy tests/test_qemu_args.py:102
test_vsock_device_emitted_on_linux_x86 software healthy tests/test_qemu_args.py:107
test_vsock_device_uses_mmio_variant_on_aarch64 software healthy tests/test_qemu_args.py:120
test_vsock_device_omitted_on_darwin software healthy tests/test_qemu_args.py:133
test_no_vsock_device_when_config_has_none software healthy tests/test_qemu_args.py:145
test_linux_x86_64_darwin_uses_hvf software healthy tests/test_qemu_args.py:157
test_linux_aarch64_kvm_orders_rootdisk_last software healthy tests/test_qemu_args.py:173
test_linux_pins_rtc_to_host_clock software healthy tests/test_qemu_args.py:202
test_firmware_mode_aarch64_needs_uefi_firmware software healthy tests/test_qemu_args.py:217
test_missing_ssh_host_port_raises software healthy tests/test_qemu_args.py:257
_windows_vm_info software healthy tests/test_qemu_args.py:277
_fake_windows_spec software healthy tests/test_qemu_args.py:301
test_build_windows_spec_raises_on_macos_host software healthy tests/test_qemu_args.py:314
test_build_windows_spec_raises_on_arm_host software healthy tests/test_qemu_args.py:320
test_build_windows_spec_raises_when_no_ovmf_found software healthy tests/test_qemu_args.py:326
test_build_windows_spec_populates_expected_fields software healthy tests/test_qemu_args.py:338
test_windows_argv_skips_kernel_and_emits_firmware_pflash software healthy tests/test_qemu_args.py:365
test_windows_argv_emits_smm_machine_and_hyperv_cpu software healthy tests/test_qemu_args.py:395
test_windows_argv_emits_virtio_scsi_root_and_tpm software healthy tests/test_qemu_args.py:421
test_windows_argv_omits_rtc_override software healthy tests/test_qemu_args.py:448
test_windows_argv_missing_firmware_vars_path_raises software healthy tests/test_qemu_args.py:463
test_windows_argv_missing_swtpm_socket_raises software healthy tests/test_qemu_args.py:478
_tap_vm_info software healthy tests/test_qemu_args.py:493
test_build_qemu_argv_tap_mode_emits_tap_netdev software healthy tests/test_qemu_args.py:507
test_build_qemu_argv_tap_mode_allows_no_ssh_host_port software healthy tests/test_qemu_args.py:525
test_build_qemu_argv_slirp_still_requires_ssh_host_port software healthy tests/test_qemu_args.py:539
state_manager software healthy tests/test_storage.py:43
sample_config software healthy tests/test_storage.py:49
test_create_vm software healthy tests/test_storage.py:68
test_create_duplicate_vm_raises software healthy tests/test_storage.py:76
test_get_vm software healthy tests/test_storage.py:87
test_get_vm_allows_missing_persisted_paths software healthy tests/test_storage.py:96
test_get_vm_allows_missing_persisted_initrd software healthy tests/test_storage.py:110
test_get_nonexistent_vm_raises software healthy tests/test_storage.py:137
test_update_vm_status software healthy tests/test_storage.py:144
test_update_vm_network software healthy tests/test_storage.py:153
test_delete_vm software healthy tests/test_storage.py:167
test_list_vms software healthy tests/test_storage.py:175
test_list_vms_allows_missing_persisted_paths software healthy tests/test_storage.py:194
test_list_vms_by_status software healthy tests/test_storage.py:219
test_allocate_ip software healthy tests/test_storage.py:234
test_allocate_sequential_ips software healthy tests/test_storage.py:242
test_release_ip software healthy tests/test_storage.py:269
test_ip_reuse_after_release software healthy tests/test_storage.py:279
test_update_ip_lease_tap software healthy tests/test_storage.py:299
test_reserve_ssh_port software healthy tests/test_storage.py:316

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
TestStateManagerVMOperations software healthy tests/test_storage.py:65
TestIPAllocation software healthy tests/test_storage.py:231
TestSSHPortAllocation software healthy tests/test_storage.py:313
TestSnapshotStorage software healthy tests/test_storage.py:403
TestReconciliation software healthy tests/test_storage.py:524
TestBrowserSessionStorage software healthy tests/test_storage.py:551
TestSmolVMCreate software healthy tests/test_vm.py:63
TestSmolVMDiskLifecycle software healthy tests/test_vm.py:178
TestSmolVMGet software healthy tests/test_vm.py:293
TestSmolVMList software healthy tests/test_vm.py:322
TestSmolVMDelete software healthy tests/test_vm.py:366
TestIPBasedTAPNaming software healthy tests/test_vm.py:415
TestSmolVMContextManager software healthy tests/test_vm.py:478
TestSmolVMFromId software healthy tests/test_vm.py:500
TestSmolVMBootArgsAndSSHCommands software healthy tests/test_vm.py:539
TestDataDirResolution software healthy tests/test_vm.py:678
TestFirecrackerLaunchAndSocketCleanup software healthy tests/test_vm.py:760
TestProcessLifecycle software healthy tests/test_vm.py:824
TestRefreshStatus software healthy tests/test_vm.py:874
TestCrashedVMDetection software healthy tests/test_vm.py:937
TestResolveBootArgs software healthy tests/test_vm.py:983
TestParamikoLoggerSilenced software healthy tests/test_ssh.py:30
TestSSHClientInit software healthy tests/test_ssh.py:65
TestSSHClientWarningPolicy software healthy tests/test_ssh.py:118
TestSSHClientRun software healthy tests/test_ssh.py:141
TestSSHClientWaitForSSH software healthy tests/test_ssh.py:243
TestSSHClientShellKind software healthy tests/test_ssh.py:303
TestPwshEncodedCommand software healthy tests/test_ssh.py:365
TestPutFileDirectoryDestination software healthy tests/test_ssh.py:397
TestFramingParity software healthy tests/test_guest_agent.py:66
TestPing software healthy tests/test_guest_agent.py:96
TestRun software healthy tests/test_guest_agent.py:110
TestFileTransfer software healthy tests/test_guest_agent.py:168
TestProtocolErrors software healthy tests/test_guest_agent.py:334
TestWorkspaceMountValidation software healthy tests/test_workspace.py:30
TestVMConfigWorkspaceMounts software healthy tests/test_workspace.py:99
TestCliMountFlag software healthy tests/test_workspace.py:602
TestParseMountSpecs software healthy tests/test_workspace.py:743
TestFacadeWorkspaceGuards software healthy tests/test_workspace.py:803
DummyStateManager software healthy tests/test_dashboard_server.py:31
DummySDK software healthy tests/test_dashboard_server.py:38
_FakeResponse software healthy tests/test_dashboard_server.py:42
_DummyNetwork software healthy tests/test_dashboard_server.py:238
_DummyVMInfo software healthy tests/test_dashboard_server.py:245
_VMStateManagerStub software healthy tests/test_dashboard_server.py:254
TestSafeBootTrims software healthy tests/test_boot_profiles.py:31
TestVMConfig software healthy tests/test_types.py:41
TestVMState software healthy tests/test_types.py:407
TestSnapshotInfo software healthy tests/test_types.py:419
TestBrowserSessionConfig software healthy tests/test_types.py:464

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
Cargo.toml software healthy Cargo.toml
README.md software healthy README.md
CONTRIBUTING.md software healthy CONTRIBUTING.md
.pre-commit-config.yaml software healthy .pre-commit-config.yaml
pyproject.toml software healthy pyproject.toml
CODE_OF_CONDUCT.md software healthy CODE_OF_CONDUCT.md
SECURITY.md software healthy SECURITY.md
AGENTS.md software healthy AGENTS.md
test_kernel_config.py software healthy tests/test_kernel_config.py
test_qemu_args.py software healthy tests/test_qemu_args.py
test_storage.py software healthy tests/test_storage.py
test_vm.py software healthy tests/test_vm.py
test_ssh.py software healthy tests/test_ssh.py
test_backends.py software healthy tests/test_backends.py
test_guest_agent.py software healthy tests/test_guest_agent.py
test_workspace.py software healthy tests/test_workspace.py
test_runtime_qemu.py software healthy tests/test_runtime_qemu.py
test_dashboard_server.py software healthy tests/test_dashboard_server.py
test_boot_profiles.py software healthy tests/test_boot_profiles.py
__init__.py software healthy tests/__init__.py
conftest.py software warning tests/conftest.py
test_types.py software healthy tests/test_types.py
test_kvm_session.py software healthy tests/test_kvm_session.py
test_comm.py software healthy tests/test_comm.py
test_version.py software healthy tests/test_version.py
test_build.py software healthy tests/test_build.py
test_facade.py software healthy tests/test_facade.py
test_presets.py software healthy tests/test_presets.py
test_cleanup.py software healthy tests/test_cleanup.py
test_utils.py software healthy tests/test_utils.py
test_tar_extraction_security.py software healthy tests/test_tar_extraction_security.py
test_async_lifecycle.py software healthy tests/test_async_lifecycle.py
test_comm_select.py software healthy tests/test_comm_select.py
test_published_images.py software healthy tests/test_published_images.py
test_snapshot_qemu.py software healthy tests/test_snapshot_qemu.py
test_swtpm_sidecar.py software healthy tests/test_swtpm_sidecar.py
test_env.py software healthy tests/test_env.py
test_env_windows.py software healthy tests/test_env_windows.py
test_snapshot.py software healthy tests/test_snapshot.py
test_cli.py software healthy tests/test_cli.py
test_api.py software healthy tests/test_api.py
test_computer_use_browser.py software healthy tests/test_computer_use_browser.py
test_cloud_init.py software healthy tests/test_cloud_init.py
test_network.py software healthy tests/test_network.py
test_examples.py software healthy tests/test_examples.py
test_pydanticai_agent_browser.py software healthy tests/test_pydanticai_agent_browser.py
test_dashboard_connection_manager.py software healthy tests/test_dashboard_connection_manager.py
test_prune.py software healthy tests/test_prune.py
test_images.py software healthy tests/test_images.py
test_legacy_report_fetcher_demo.py software healthy tests/test_legacy_report_fetcher_demo.py

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
tests software healthy tests
e2e software healthy tests/e2e
docs software healthy docs
benchmarks software healthy docs/benchmarks
deep-dive software healthy docs/deep-dive
concepts software healthy docs/concepts
ui software healthy ui
src software healthy ui/src
stores software healthy ui/src/stores
utils software healthy ui/src/utils
components software healthy ui/src/components
layout software healthy ui/src/components/layout
ui software healthy ui/src/components/ui
hooks software healthy ui/src/hooks
styles software healthy ui/src/styles
features software healthy ui/src/features
bento software healthy ui/src/features/bento
hive software healthy ui/src/features/hive
nebula software healthy ui/src/features/nebula
scripts software healthy scripts
benchmarks software healthy scripts/benchmarks
internal software healthy scripts/internal
ci software healthy scripts/ci
examples software healthy examples
agent_tools software healthy examples/agent_tools
openai-agents-sdk software healthy examples/openai-agents-sdk
cua software healthy examples/cua
legacy_report_fetcher software healthy examples/cua/legacy_report_fetcher
ops software healthy examples/cua/legacy_report_fetcher/ops
pipeline software healthy examples/cua/legacy_report_fetcher/pipeline
portal software healthy examples/cua/legacy_report_fetcher/portal
.github software healthy .github
ISSUE_TEMPLATE software healthy .github/ISSUE_TEMPLATE
workflows software healthy .github/workflows
smolvm-core software healthy smolvm-core
python software healthy smolvm-core/python
smolvm_core software healthy smolvm-core/python/smolvm_core
src software healthy smolvm-core/src
kernel software healthy kernel
microvm software healthy kernel/microvm
src software healthy src
smolvm software healthy src/smolvm
comm software healthy src/smolvm/comm
presets software healthy src/smolvm/presets
host software healthy src/smolvm/host
guest_agent software healthy src/smolvm/guest_agent
windows software healthy src/smolvm/windows
dashboard software healthy src/smolvm/dashboard
cli software healthy src/smolvm/cli
runtime software healthy src/smolvm/runtime

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
10.0.2.15 network healthy tests/test_qemu_args.py
10.0.2.3 network healthy tests/test_qemu_args.py
127.0.0.1 network healthy tests/test_qemu_args.py
172.16.0.5 network healthy tests/test_qemu_args.py
172.16.0.2 network healthy tests/test_storage.py
172.16.0.3 network healthy tests/test_storage.py
172.16.0.4 network healthy tests/test_storage.py
172.16.0.6 network healthy tests/test_storage.py
172.16.0.22 network healthy tests/test_storage.py
172.16.0.1 network healthy tests/test_vm.py
255.255.255.0 network healthy tests/test_vm.py
10.0.0.2 network healthy tests/test_vm.py
10.0.0.1 network healthy tests/test_vm.py
203.0.113.10 network healthy tests/test_vm.py
10.0.2.2 network healthy tests/test_runtime_qemu.py
1.1.1.1 network healthy tests/test_network.py
8.8.8.8 network healthy tests/test_network.py
93.184.216.34 network healthy tests/test_internet_settings.py
1.2.3.4 network healthy tests/test_internet_settings.py
2.2.2.2 network healthy tests/test_internet_settings.py
8.8.4.4 network healthy scripts/ci/build-preset.sh
10.0.2.0 network healthy .github/workflows/smoke-published-images.yml
172.16.0.0 network healthy src/smolvm/vm.py
127.0.0.0 network healthy src/smolvm/host/network.py
172.16.255.255 network healthy src/smolvm/storage/_base.py
172.16.255.254 network healthy src/smolvm/storage/_base.py

LabelLayerStatusPath
password_literal::tests/test_facade.py security healthy tests/test_facade.py
password_literal::tests/test_facade.py security healthy tests/test_facade.py
password_literal::tests/test_facade.py security healthy tests/test_facade.py
password_literal::tests/test_facade.py security healthy tests/test_facade.py
password_literal::tests/test_facade.py security healthy tests/test_facade.py
password_literal::tests/test_facade.py security healthy tests/test_facade.py
password_literal::tests/test_facade.py security healthy tests/test_facade.py
password_literal::tests/test_cli.py security healthy tests/test_cli.py
password_literal::tests/test_cli.py security healthy tests/test_cli.py
password_literal::tests/test_windows_build_image.py security healthy tests/test_windows_build_image.py
password_literal::tests/test_windows_build_image.py security healthy tests/test_windows_build_image.py
password_literal::scripts/exp_final.py security healthy scripts/exp_final.py
password_literal::scripts/exp_userspace.py security healthy scripts/exp_userspace.py
password_literal::scripts/exp_vsock_trim.py security healthy scripts/exp_vsock_trim.py
password_literal::examples/cua/legacy_report_fetcher/portal… security healthy examples/cua/legacy_report_fetcher/portal/server.py
password_literal::src/smolvm/windows/build_image.py security healthy src/smolvm/windows/build_image.py
password_literal::src/smolvm/cli/main.py security healthy src/smolvm/cli/main.py

LabelLayerStatusPath
publish-dashboard-dist cicd healthy .github/workflows/publish-dashboard-ui.yml
verify-release cicd healthy .github/workflows/publish-core.yml
build-linux cicd healthy .github/workflows/publish-core.yml
build-macos cicd healthy .github/workflows/publish-core.yml
build-sdist cicd healthy .github/workflows/publish-core.yml
publish cicd healthy .github/workflows/publish-core.yml
smoke cicd healthy .github/workflows/smoke-published-images.yml
base-rootfs cicd healthy .github/workflows/build-published-images.yml
openclaw cicd healthy .github/workflows/build-published-images.yml
preset cicd healthy .github/workflows/build-published-images.yml
e2e cicd healthy .github/workflows/e2e.yml
build cicd healthy .github/workflows/build-microvm-kernel.yml
pytest cicd healthy .github/workflows/pytest.yml
package-smoke cicd healthy .github/workflows/pytest.yml
notify cicd healthy .github/workflows/notify-slack.yml
publish cicd healthy .github/workflows/publish.yml

LabelLayerStatusPath
App frontend healthy ui/src/App.jsx
DashboardLayout frontend healthy ui/src/components/layout/DashboardLayout.jsx
ViewToggle frontend healthy ui/src/components/ui/ViewToggle.jsx
CommandBar frontend healthy ui/src/components/ui/CommandBar.jsx
ThemeToggle frontend healthy ui/src/components/ui/ThemeToggle.jsx
BentoGrid frontend healthy ui/src/features/bento/BentoGrid.jsx
HexGrid frontend healthy ui/src/features/hive/HexGrid.jsx
HexNode frontend healthy ui/src/features/hive/HexNode.jsx
ParticleSwarm frontend healthy ui/src/features/nebula/ParticleSwarm.jsx
InteractionManager frontend healthy ui/src/features/nebula/InteractionManager.jsx
NebulaScene frontend healthy ui/src/features/nebula/NebulaScene.jsx
VMDetailCard frontend healthy ui/src/features/nebula/VMDetailCard.jsx
NebulaHUD frontend healthy ui/src/features/nebula/NebulaHUD.jsx

LabelLayerStatusPath
port:2222 network healthy tests/test_ssh.py
port:2201 network healthy tests/test_facade.py
port:22 network healthy tests/test_facade.py
port:8080 network healthy tests/test_cli.py
port:9090 network healthy tests/test_cli.py
port:5173 network healthy ui/vite.config.js
port:03 network healthy .github/workflows/e2e.yml
port:17 network healthy .github/workflows/e2e.yml
port:128 network healthy src/smolvm/guest_agent/agent.py
port:127 network healthy src/smolvm/cli/main.py

LabelLayerStatusPath
gha::publish-dashboard-ui cicd healthy .github/workflows/publish-dashboard-ui.yml
gha::publish-core cicd healthy .github/workflows/publish-core.yml
gha::smoke-published-images cicd healthy .github/workflows/smoke-published-images.yml
gha::build-published-images cicd healthy .github/workflows/build-published-images.yml
gha::e2e cicd healthy .github/workflows/e2e.yml
gha::build-microvm-kernel cicd healthy .github/workflows/build-microvm-kernel.yml
gha::pytest cicd healthy .github/workflows/pytest.yml
gha::notify-slack cicd healthy .github/workflows/notify-slack.yml
gha::publish cicd healthy .github/workflows/publish.yml

LabelLayerStatusPath
GET /api/health api healthy src/smolvm/dashboard/server.py
GET /api/vms api healthy src/smolvm/dashboard/server.py
GET /api/vms/particles api healthy src/smolvm/dashboard/server.py
GET /api/vms/{vm_id} api healthy src/smolvm/dashboard/server.py
GET /api/vms/{vm_id}/processes api healthy src/smolvm/dashboard/server.py
DELETE /api/vms/{vm_id} api healthy src/smolvm/dashboard/server.py
POST /api/vms/{vm_id}/stop api healthy src/smolvm/dashboard/server.py
POST /api/command api healthy src/smolvm/dashboard/server.py

LabelLayerStatusPath
IF data healthy examples/cua/legacy_report_fetcher/pipeline/import_reports.…
vms data healthy src/smolvm/storage/_postgres.py
ip_leases data healthy src/smolvm/storage/_postgres.py
ssh_forwards data healthy src/smolvm/storage/_postgres.py
vsock_cids data healthy src/smolvm/storage/_postgres.py
browser_sessions data healthy src/smolvm/storage/_postgres.py
snapshots data healthy src/smolvm/storage/_postgres.py

LabelLayerStatusPath
auth::src/smolvm/presets/pi.py security healthy src/smolvm/presets/pi.py
auth::src/smolvm/presets/_types.py security healthy src/smolvm/presets/_types.py
auth::src/smolvm/presets/_install.py security healthy src/smolvm/presets/_install.py
auth::tests/test_presets.py security healthy tests/test_presets.py
auth::src/smolvm/presets/claude_code.py security healthy src/smolvm/presets/claude_code.py

LabelLayerStatusPath
postgres data healthy pyproject.toml
sqlite data healthy tests/test_storage.py
postgresql data healthy src/smolvm/storage/_protocol.py

LabelLayerStatusPath
GITHUB_TOKEN cicd healthy
SLACK_WEBHOOK_URL cicd healthy

LabelLayerStatusPath
repobility-clone-qg4ry1r3 software healthy /tmp/repobility-clone-qg4ry1r3

LabelLayerStatusPath
gpu (detected) hardware healthy ui/package-lock.json

LabelLayerStatusPath
vps::aws hardware healthy src/smolvm/images/manager.py
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/f1293bd5-b6e8-4fcf-84d1-4baea17e58a3/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/f1293bd5-b6e8-4fcf-84d1-4baea17e58a3/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.