grokbot/forge

Public: anyone can read this; 1 person can change it.

A software forge you can read in an afternoon and mold by hand.

workbenchthis machine

Findings

Every push is scanned for secrets and advisories; each night adds static analysis. An open high finding holds a release until a person accepts it.

Last push scan 4h ago · last nightly scan 13h ago (partial: 1115 files not read)

Findings

shell command built from a template src/data/query_worker.ts:46 · static · found 13h ago at d980f0f43259 medium
shell command built from a template src/data/query_worker.ts:43 · static · found 13h ago at d980f0f43259 medium
GitHub token test/mcp-preview.test.ts:141 · secret · found 1d ago at 51e32ad6e8e9 medium
GitHub token test/apps-proxy-unavailable.test.ts:108 · secret · found 1d ago at 51e32ad6e8e9 medium
HTML written from a value src/web/system-live.ts:64 · static · found 1d ago at 51e32ad6e8e9 medium
HTML written from a value src/web/studio/home_last.ts:128 · static · found 1d ago at 51e32ad6e8e9 medium
HTML written from a value src/web/studio/home_last.ts:122 · static · found 1d ago at 51e32ad6e8e9 medium
HTML written from a value src/web/studio/feed.ts:566 · static · found 1d ago at 51e32ad6e8e9 medium
HTML written from a value src/web/studio/feed.ts:562 · static · found 1d ago at 51e32ad6e8e9 medium
HTML written from a value src/web/studio/asks_page.ts:135 · static · found 1d ago at 51e32ad6e8e9 medium
HTML written from a value src/web/studio/asks_page.ts:133 · static · found 1d ago at 51e32ad6e8e9 medium
HTML written from a value src/web/pages/teams.ts:97 · static · found 1d ago at 51e32ad6e8e9 medium
HTML written from a value src/web/pages/build_info.ts:264 · static · found 1d ago at 51e32ad6e8e9 medium
HTML written from a value src/web/live.ts:128 · static · found 1d ago at 51e32ad6e8e9 medium
HTML written from a value src/web/client.ts:2230 · static · found 1d ago at 51e32ad6e8e9 medium
HTML written from a value src/web/client.ts:1705 · static · found 1d ago at 51e32ad6e8e9 medium
HTML written from a value src/web/client.ts:1232 · static · found 1d ago at 51e32ad6e8e9 medium
HTML written from a value src/web/client.ts:1098 · static · found 1d ago at 51e32ad6e8e9 medium
HTML written from a value src/web/client.ts:1051 · static · found 1d ago at 51e32ad6e8e9 medium
HTML written from a value src/web/client.ts:1035 · static · found 1d ago at 51e32ad6e8e9 medium
HTML written from a value src/web/client.ts:743 · static · found 1d ago at 51e32ad6e8e9 medium
HTML written from a value src/web/client.ts:574 · static · found 1d ago at 51e32ad6e8e9 medium
HTML written from a value src/web/client.ts:346 · static · found 1d ago at 51e32ad6e8e9 medium
HTML written from a value src/web/act_now.ts:48 · static · found 1d ago at 51e32ad6e8e9 medium
HTML written from a value src/web/act_now.ts:46 · static · found 1d ago at 51e32ad6e8e9 medium
HTML written from a value src/web/act_now.ts:37 · static · found 1d ago at 51e32ad6e8e9 medium
shell command built from a template src/kernel/migrate.ts:196 · static · found 1d ago at 51e32ad6e8e9 medium
shell command built from a template src/kernel/db.ts:199 · static · found 1d ago at 51e32ad6e8e9 medium
shell command built from a template src/kernel/db.ts:131 · static · found 1d ago at 51e32ad6e8e9 medium
shell command built from a template src/kernel/db.ts:130 · static · found 1d ago at 51e32ad6e8e9 medium
shell command built from a template src/kernel/db.ts:129 · static · found 1d ago at 51e32ad6e8e9 medium
shell command built from a template src/core/schema.ts:68 · static · found 1d ago at 51e32ad6e8e9 medium
HTML written from a value examples/forge-live/live.js:9 · static · found 1d ago at 51e32ad6e8e9 medium
GitHub token test/sentinel.test.ts:472 · secret · found 2d ago at 6bc6559419b9 medium
GitHub token test/origins-oauth.test.ts:579 · secret · found 2d ago at 6bc6559419b9 medium
GitHub token test/origins-oauth.test.ts:578 · secret · found 2d ago at 6bc6559419b9 medium

Back to flows