keycloak/keycloak
Documented sampleIdentity and access management
e7b4c1dOpengrep OSSSep 2, 2026
Scanner output
427 · full verdict mix
Security review
130 · 30% remains · 16 priority
130
security review
findings
Repository directory
Scanner findings,
after review with evidence.
Browse repository triage summaries, their verdict breakdowns, and the limits of each run.
Repository summaries
12 repositories
- Likely noise
- Needs review
- Policy queue
- Routed out
- Priority review
spring-projects/spring-petclinic
Reference Spring application
91c4a20Semgrep OSSAug 30, 2026
Scanner output
92 · full verdict mix
Security review
11 · 12% remains · 2 priority
11
security review
findings
apache/fineract
Core banking platform
307fb95Opengrep OSSAug 29, 2026
Scanner output
641 · full verdict mix
Security review
197 · 31% remains · 43 priority
197
security review
findings
jhipster/jhipster-sample-app
Generated Spring application
e841b5cSemgrep OSSAug 29, 2026
Scanner output
174 · full verdict mix
Security review
26 · 15% remains · 5 priority
26
security review
findings
thingsboard/thingsboard
IoT platform and device management
fe9043bOpengrep OSSAug 31, 2026
Scanner output
812 · full verdict mix
Security review
148 · 18% remains · 24 priority
148
security review
findings
openmrs/openmrs-core
Medical record system platform
a6e5d92Semgrep OSSAug 30, 2026
Scanner output
556 · full verdict mix
Security review
189 · 34% remains · 31 priority
189
security review
findings
apache/ofbiz-framework
Enterprise automation framework
4a7c108Opengrep OSSAug 27, 2026
Scanner output
731 · full verdict mix
Security review
127 · 17% remains · 21 priority
127
security review
findings
camunda/camunda-bpm-platform
Process orchestration platform
c8152efSemgrep OSSAug 30, 2026
Scanner output
418 · full verdict mix
Security review
126 · 30% remains · 17 priority
126
security review
findings
spring-petclinic/spring-petclinic-microservices
Distributed Spring reference system
57db903Opengrep OSSAug 28, 2026
Scanner output
209 · full verdict mix
Security review
30 · 14% remains · 5 priority
30
security review
findings
shopizer-ecommerce/shopizer
Spring commerce platform
0b8f61aSemgrep OSSAug 26, 2026
Scanner output
287 · full verdict mix
Security review
90 · 31% remains · 11 priority
90
security review
findings
BroadleafCommerce/BroadleafCommerce
Extensible commerce framework
d9487e2Opengrep OSSAug 25, 2026
Scanner output
498 · full verdict mix
Security review
93 · 19% remains · 14 priority
93
security review
findings
jenkinsci/jenkins
Automation server
8c16a74Semgrep OSSAug 28, 2026
Scanner output
364 · full verdict mix
Security review
119 · 33% remains · 15 priority
119
security review
findings
How to read the ledger
Keep the run and its limits together.
Read the run context.
Start with the scanner, date, and commit state.
Check every verdict.
Likely noise, review, policy, routed-out, and priority review remain separate. Policy and routed-out work has not disappeared.
Read the limitation.
These summaries are current-product evidence with stated gaps. They are not proof of continuous revalidation.