Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

stefanpenner/gh-audit

https://github.com/stefanpenner/gh-audit · scanned 2026-06-16 00:21 UTC (2 months, 2 weeks ago)

10 raw signals (0 security + 10 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 2 weeks ago · v1 · 10 actionable findings from 1 signal source. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
82.7
/100
Security checks
83
0 findings
System graph
83
55.6% cov · 10 findings
Critical
0
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 0 High 0 Medium 3 Low 5 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 10 Crowd 0 Layer: Frontend 1 Quality 9

All 100 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

LabelLayerStatusPath
README.md software healthy README.md
CLAUDE.md software healthy CLAUDE.md
main.go software healthy main.go
go.mod software healthy go.mod
Architecture.md software healthy Architecture.md
TODO.md software healthy TODO.md
scenarios.md software healthy testdata/scenarios.md
audit_bench_test.go software healthy internal/sync/audit_bench_test.go
audit.go software healthy internal/sync/audit.go
pipeline_test.go software healthy internal/sync/pipeline_test.go
progress.go software healthy internal/sync/progress.go
cursor_graph_test.go software healthy internal/sync/cursor_graph_test.go
dbwriter_test.go software healthy internal/sync/dbwriter_test.go
annotations.go software healthy internal/sync/annotations.go
dbwriter.go software healthy internal/sync/dbwriter.go
audit_fixes_test.go software healthy internal/sync/audit_fixes_test.go
pipeline.go software healthy internal/sync/pipeline.go
audit_test.go software healthy internal/sync/audit_test.go
recovery_integration_test.go software healthy internal/sync/recovery_integration_test.go
config_test.go software healthy internal/config/config_test.go
config.go software healthy internal/config/config.go
client_test.go software healthy internal/github/client_test.go
caching.go software healthy internal/github/caching.go
tokenpool_429_test.go software healthy internal/github/tokenpool_429_test.go
merge.go software healthy internal/github/merge.go
tokenpool.go software healthy internal/github/tokenpool.go
revert_emptypatch_test.go software healthy internal/github/revert_emptypatch_test.go
revert_bench_test.go software healthy internal/github/revert_bench_test.go
caching_freeze_test.go software healthy internal/github/caching_freeze_test.go
revert_test.go software healthy internal/github/revert_test.go
status_contexts_test.go software healthy internal/github/status_contexts_test.go
revert.go software healthy internal/github/revert.go
tokenpool_test.go software healthy internal/github/tokenpool_test.go
client.go software healthy internal/github/client.go
merge_test.go software healthy internal/github/merge_test.go
fuzz_test.go software healthy internal/github/fuzz_test.go
caching_test.go software healthy internal/github/caching_test.go
rules.go software healthy internal/report/rules.go
xlsx_test.go software healthy internal/report/xlsx_test.go
report_test.go software healthy internal/report/report_test.go
report.go software healthy internal/report/report.go
exempt_flag_test.go software healthy internal/report/exempt_flag_test.go
rules_test.go software healthy internal/report/rules_test.go
xlsx.go software healthy internal/report/xlsx.go
fuzz_test.go software healthy internal/report/fuzz_test.go
report_bench_test.go software healthy internal/report/report_bench_test.go
audit.go software healthy internal/db/audit.go
commits.go software healthy internal/db/commits.go
cursor.go software healthy internal/db/cursor.go
db_test.go software healthy internal/db/db_test.go

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
testdata software healthy testdata
internal software healthy internal
sync software healthy internal/sync
config software healthy internal/config
github software healthy internal/github
report software healthy internal/report
db software healthy internal/db
model software healthy internal/model
docs software healthy docs
scripts software healthy scripts
cmd software healthy cmd
examples software healthy examples
.github software healthy .github
workflows software healthy .github/workflows

LabelLayerStatusPath
auth::go.mod security healthy go.mod
auth::internal/github/tokenpool.go security healthy internal/github/tokenpool.go
auth::README.md security healthy README.md
auth::internal/config/config_test.go security healthy internal/config/config_test.go

LabelLayerStatusPath
test cicd healthy .github/workflows/test.yml
fixtures cicd healthy .github/workflows/test.yml

LabelLayerStatusPath
repobility-clone-ahzj2_rx software healthy /tmp/repobility-clone-ahzj2_rx

LabelLayerStatusPath
gha::test cicd healthy .github/workflows/test.yml

LabelLayerStatusPath
GITHUB_TOKEN cicd healthy —
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/fc0a2ae1-4167-49f4-a610-c9f6f8fbc5bf/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/fc0a2ae1-4167-49f4-a610-c9f6f8fbc5bf/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.