← Scan another repo

github.com/ultraworkers/claw-code

@ 4ea31c1bc91c

Submitted 8/4/2026, 10:25:51 AM · Status: ok

Risk grade
F
100 / 100
Findings
199
0 critical5 high53 medium3 low138 info0 on CISA KEV0ATT&CK
Showing 199 of 199 findings

Findings

  • Detected generic-api-key: Detected a Generic API Key, potentially exposing access to various services and sensitive operations
    Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    gitleaks
  • Detected generic-api-key: Detected a Generic API Key, potentially exposing access to various services and sensitive operations
    Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
    gitleaks
  • Quinn: Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly
    grype
  • Image user should not be 'root'
    Running containers with 'root' user can lead to a container escape situation. It is a best practice to run containers as non-root users, which can be done by adding a 'USER' statement to the Dockerfile.
    trivyrust/crates/claw-rag-service/Dockerfile:0
  • Image user should not be 'root'
    Running containers with 'root' user can lead to a container escape situation. It is a best practice to run containers as non-root users, which can be done by adding a 'USER' statement to the Dockerfile.
    trivyContainerfile:0

This report is public.