Architecture check
SAP-samples/codejam-cap-llm
0 errors, 8 warnings
No critical or high-risk findings. 6 worth a look.
Read 9 of 12 source files — report incomplete.
Read 9 of 12 source files — report incomplete. 8 warnings in the paths between 12 routes and 2 tables.
Every file was read, but 5 places in them could not be parsed — listed under the findings.
Tables
2
Rules run
19/19
Findings by route
8 of 12 routes flagged · 19/19 rules ran
- Errors
- Warnings
- No findings
8 findings
6 medium2 low
8 findings, each with the route, the table it reaches, the file and line, and the fix. Free with an account.
Part of this repository was not read, so this report is incomplete. 3 could not be fetched.
5 places could not be parsed, so any route or table declared there is missing from this report:
final-project/job-posting-service/srv/job-posting-service.cds— action deleteAll — handler body is JavaScript, tables not resolved from CDSfinal-project/job-posting-service/srv/job-posting-service.cds— action deleteJobPosting — handler body is JavaScript, tables not resolved from CDSfinal-project/job-posting-service/srv/job-posting-service.cds— action deleteAll — handler body is JavaScript, tables not resolved from CDSfinal-project/job-posting-service/srv/job-posting-service.cds— action createVectorEmbeddings — handler body is JavaScript, tables not resolved from CDSfinal-project/job-posting-service/srv/job-posting-service.cds— action createJobPosting — handler body is JavaScript, tables not resolved from CDS
What this is
Wyro reads the repository’s routes and data models and checks the paths between them: whether a route can reach a table without passing a guard, whether a datastore holding personal data is exposed to a public read, whether an endpoint that issues credentials requires the credentials it issues.
It is rule-based, not a model. The same commit produces the same result every time, and it does not guess at business rules it cannot see. A rule with nothing to look at is reported as not having run — never as a pass.
This check runs on public source through GitHub’s own API and needs no account. A free account adds the findings, the editable architecture canvas, private repositories on paid plans, and a CI gate. No card required.
Maintain this repository? You can have this report removed, and a real vulnerability is disclosed to you privately before it is published. How public reports are handled.