Projectacme-billing-api
Sourcegithub.com/acme/billing-api
Generated2026-09-16 09:14:02 −04:00
Scan complete
Here's what's actually risky in your code, ranked by what to fix first — not a compliance audit, a punch list. Every line, plus dependencies, certificates, and infrastructure config.
153Total findingsEverything checked, across every source.
87MigrateConfirmed and exploitable right now. Start here.
15InvestigateLooks risky, not yet confirmed. Verify first.
51SecurityA known weakness. Not urgent, worth fixing.
Compliance lensMaps every finding to NIST SP 800-53 controls, for an audit-ready answer to a client or investor.
Open lens →Sample findings
4 of 153 shown| Finding | Type | Status |
|---|
Hardcoded AWS access keysrc/workers/export.py:118 | Exposed credential | Migrate |
Known-malicious package versionpackage-lock.json · event-stream@3.3.6 | Indicator of compromise | Migrate |
RSA-1024 key generationsrc/auth/tokens.go:42 | Weak cryptography | Investigate |
TLS 1.0 permitted on ingressinfra/nginx.conf:9 | Outdated configuration | Security |
Full report includes evidence, the exact fix, and file history for every result. Findings reflect the state of the codebase at scan time.