← Legacy view v2 (rp.*)

0xjacky/nginx-ui

https://github.com/0xJacky/nginx-ui · lang: go · LOC: · source: both

Quality

61.2

Grade C+

Security

41.8

Findings

0 critical · 2 high

Status

completed

May 15, 2026 12:20

high: 2 info: 2

Top rules by occurrence

Rule	Severity	Count
`SEC020` Secret Printed to Logs	high	4

First 4 findings (severity-sorted)

high SEC020 Secret Printed to Logs

internal/cluster/cluster.go:41 · conf 0.85

[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…

high SEC020 Secret Printed to Logs

internal/user/reset_password.go:87 · conf 0.85

[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…

info SEC020 Secret Printed to Logs

· conf 0.20

[SEC020] Secret Printed to Logs (and 4 more): Same pattern found in 4 additional files. Review if needed.

info SEC020 Secret Printed to Logs

internal/kernel/skip_install.go:43 · conf 0.15

[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…

Reading from rp.scan + rp.finding + rp.rule (unified schema, R78 series). Legacy data path unchanged. Compare with /scan/398ee3a8-71fc-49a3-969e-f6b0db503b41/.