chore(deps): bump the actions group across 1 directory with 4 updates #117
dependabot[bot]static-analysis-gate.yml
on: pull_request
panic-attack assail
6s
Hypatia neurosymbolic scan
36s
Patch Bridge CVE triage
8s
Deposit findings for gitbot-fleet
10s
Annotations
11 errors, 10 warnings, and 2 notices
|
Hypatia neurosymbolic scan
Process completed with exit code 1.
|
|
Hypatia neurosymbolic scan
Hypatia found 7 critical security issue(s) — blocking merge
|
|
Hypatia neurosymbolic scan:
.machine_readable/6a2/PLAYBOOK.a2ml#L1
[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/
|
|
Hypatia neurosymbolic scan:
.machine_readable/6a2/NEUROSYM.a2ml#L1
[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/
|
|
Hypatia neurosymbolic scan:
.machine_readable/6a2/AGENTIC.a2ml#L1
[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/
|
|
Hypatia neurosymbolic scan:
.machine_readable/6a2/ECOSYSTEM.a2ml#L1
[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/
|
|
Hypatia neurosymbolic scan:
.machine_readable/6a2/META.a2ml#L1
[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/
|
|
Hypatia neurosymbolic scan:
.machine_readable/6a2/STATE.a2ml#L1
[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/
|
|
Hypatia neurosymbolic scan:
.envrc#L23
[hypatia] Secret found: Generic API key
|
|
Hypatia neurosymbolic scan:
build/setup.sh#L1
[hypatia] Download-and-execute pattern (curl|wget pipe to shell) -- verify integrity before execution (2 occurrences, CWE-494)
|
|
Hypatia neurosymbolic scan:
instant-sync.yml#L1
[hypatia] Issue in instant-sync.yml
|
|
Hypatia neurosymbolic scan:
docs-template/architecture.adoc#L1
[hypatia] doc references `src/middleware/` but no such directory exists in the tree (likely surviving a directory rename)
|
|
Hypatia neurosymbolic scan:
README.adoc#L1
[hypatia] References retired .machine_readable/6a2/ -- should be .machine_readable/descriptiles/
|
|
Hypatia neurosymbolic scan:
/home/runner/work/contractiles/contractiles#L1
[hypatia] 18 workflow(s) with tag-pinned (not SHA-pinned) actions in contractiles
|
|
Hypatia neurosymbolic scan:
labels.yml#L1
[hypatia] Issue in labels.yml
|
|
Hypatia neurosymbolic scan:
label-triage.yml#L1
[hypatia] Issue in label-triage.yml
|
|
Hypatia neurosymbolic scan:
release.yml#L1
[hypatia] Action softprops/action-gh-release@v3.0.3 needs attention
|
|
Hypatia neurosymbolic scan:
quality.yml#L1
[hypatia] Action editorconfig-checker/action-editorconfig-checker@v3.0.0 needs attention
|
|
Hypatia neurosymbolic scan:
pages.yml#L1
[hypatia] Action actions/deploy-pages@v5.0.1 needs attention
|
|
Hypatia neurosymbolic scan:
codeql.yml#L1
[hypatia] Action github/codeql-action/analyze@v4.37.9 needs attention
|
|
Hypatia neurosymbolic scan:
codeql.yml#L1
[hypatia] Action github/codeql-action/init@v4.37.9 needs attention
|
|
panic-attack assail
panic-attack binary not available — skipping assail
|
|
Patch Bridge CVE triage
panic-attack binary not available — skipping Patch Bridge
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
bridge-report
|
218 Bytes |
sha256:7960a159ebf83a8e237afd42f522cc1d7b9a54d93ececca93af5930e32451487
|
|
|
hypatia-findings
|
1.29 KB |
sha256:15ba93f7840795a37587e3c40ebf65055ce721b983f56e51149b7aabe804a185
|
|
|
panic-attack-findings
|
171 Bytes |
sha256:ec51a7f8011533965deeb3e8bcae0604b00bcec0a436a36f57ca09a67db82801
|
|
|
unified-findings
|
1.54 KB |
sha256:57acb7b3af141b253117212de1e088def5bcb408b4b8875f5c0e73ca1f90d6cb
|
|