github.com / sustainable-computing-io

sustainable-computing-io/kepler

Go·593 files·commit ec71cc5·scanned 3d ago·cached ✓

25/100

LOW RISK

Minor findings consistent with the project type. Nothing reachable from install hooks.

score capped at 25 — 1,589 stars — findings likely legitimate code patterns

verdict accurate?

42% file coverage

threat-state: lowlive

FINDINGS ░▒▓

criticalGo os/exec usageos/exec is used to run external commands. In malware it drops payloads, modifies the system, or opens shells.internal/server/server_tls_test.go

	caKey := "testdata/ca-key.pem"
	cmd := exec.Command("openssl", "genrsa", "-out", caKey, "2048")
	if output, err := cmd.CombinedOutput(); err != nil {
		t.Fatalf("Failed to generate CA key: %v\nOutput...

infoSuspicious files are not reachable from entry pointsFlagged files exist but are not imported by any entry point. They may be dead code, tests, or attack payloads triggered by another mechanism.+2

criticalBrowser credential store accessAccessing Chrome, Firefox, Edge, or Brave profile directories to steal cookies, passwords, and session tokens.internal/resource/vm_test.go

			"/usr/bin/firefox",
			"--profile", "/home/user/.mozilla/firefox",
		},
		expected: expect{

+10

infoAuthor has no other public repositoriesGitHub user "dependabot[bot]" has no other public repositories, common for burner accounts used in scams.+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

248 files scanned @ ec71cc5 | 10/26/2026 | heuristic scan — always review manually

risk by category

code execution10

network & exfiltration0

file system access10

obfuscation0

supply chain2

owasp / injection0

telemetry

files 248/593rules hit 4engine v7commit ec71cc5

github

sustainable-computing-io/kepler

Kepler is CNCF Sandbox project to attribute the energy use of Kubernetes workloads. Let's make every watt matter. ⚡

1589

274

1731d

593 files

248 scanned(42%)

ec71cc5

architecture░▒▓

entry (0) flagged (2) pkg (109)

266 nodes · 727 edgesscroll to zoom · click node to jump to finding