Loading report…
← nittim
← nittimshared scan
go-gitea/gitea ↗ · ad05aae · Aug 21, 2026, 10:26 PM
No issues found
Free scan · deterministic evidence only
No deterministic issues found — not a clean bill of health. 14 dimensions remain unaudited. Run Audit for the verdict.
500 of 6229 files scanned (8%) — this snapshot was truncated: this audit's size limit was reached, so some source was left unread.
What this means
Two scanners read 500 of 6229 files, starting with the highest-priority ones: one for committed credentials, one for known vulnerabilities in your dependencies. Neither found anything. That is not a clean bill of health. These two checks cover a narrow slice of what decides whether software is ready to ship. All 14 dimensions — architecture, privacy, reliability, AI-generated-code risk and the rest — are unexamined here. Deep Verification is the tier that issues a verdict. This scan does not.
Read it:
Worth knowing, not blocking
test fixtureGeneric hardcoded secret10 in 4 files
cmd/admin_auth_ldap_test.go:73, :552
:73 — BindPasswo…ull", — non-production path
:552 — BindPasswo…ull", — non-production path
models/auth/access_token_test.go:123
:123 — const oldToken …f36" — non-production path
models/fixtures/oauth2_application.yml:6, :16
:6 — client…uvi" # bcrypt of "4MK8Na6R55smdCY0WuCCumZ6hjRPnGY5saWVRHHjJiA= — non-production path
:16 — client…uvi" # bcrypt of "4MK8Na6R55smdCY0WuCCumZ6hjRPnGY5saWVRHHjJiA= — non-production path
routers/web/admin/users_test.go:39, :76, :113, :143, :181
:39 — Passwo…!=$", — non-production path
:76 — Passwo…!=$", — non-production path
:113 — Passwo…!=$", — non-production path
:143 — Passwo…!=$", — non-production path
:181 — Passwo…!=$", — non-production path
advisory cveGo golang.org/x/crypto@0.55.0GO-2026-5932
The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues — UNKNOWN
AI audit · go-gitea/gitea · 14 dimensions · usually within 15 minutes*
14 things unaudited
Security, privacy, reliability, AI-generated-code risk, 10 more: unaudited, not clean.
The free scan doesn't reason across these — unaudited, not safe. Opus 4.8 scores each, with evidence, impact, and a fix.
SecurityPriority: Core
Privacy & CompliancePriority: Core
Reliability & ResiliencePriority: Core
Code Quality & ArchitecturePriority: Important
AI / Vibe Coding RiskPriority: Important
Performance & ScalabilityPriority: Important
Infrastructure & DevOpsPriority: Important
Data LayerPriority: Important
Business & Product RiskPriority: Supporting
Developer ExperiencePriority: Supporting
Accessibility & UXPriority: Supporting
ObservabilityPriority: Supporting
Maintainability ForecastPriority: Specialized
IP & Novelty ExposurePriority: Specialized
Modules run (2)
Hardcoded Secret ScanDependency Vulnerability Scan
Scanned 500 of 6229 files (highest-priority subset) · go-gitea/gitea
Dependency manifests: 1 package root found, 1 scanned; 1 Python manifest read; 2 Go manifests read — package list truncated at the vulnerability-lookup limit.
README badge
[](https://nittim.com/library/go-gitea/gitea)