Repository navigation
chore(deps): bump the actions group with 2 updates #13
dependabot[bot]static-analysis-gate.yml
on: pull_request
panic-attack assail
13s
Hypatia neurosymbolic scan
1m 7s
Patch Bridge CVE triage
17s
Deposit findings for gitbot-fleet
10s
Annotations
10 errors, 10 warnings, and 2 notices
|
Hypatia neurosymbolic scan:
src/rust/verification/portfolio.rs#L128
[hypatia] unwrap() without prior check -- DoS via panic (2 occurrences, CWE-754, line 128, 133)
|
|
Hypatia neurosymbolic scan:
src/rust/verification/axiom_tracker.rs#L395
[hypatia] panic! macro causes unrecoverable crash (1 occurrences, CWE-754, line 395)
|
|
Hypatia neurosymbolic scan:
src/rust/proof_search.rs#L320
[hypatia] unwrap() without prior check -- DoS via panic (1 occurrences, CWE-754, line 320)
|
|
Hypatia neurosymbolic scan:
src/rust/dispatch.rs#L394
[hypatia] Lock.unwrap() without poison handling (3 occurrences, CWE-754, line 394, 406, 781)
|
|
Hypatia neurosymbolic scan:
src/rust/dispatch.rs#L394
[hypatia] unwrap() without prior check -- DoS via panic (3 occurrences, CWE-754, line 394, 406, 781)
|
|
Hypatia neurosymbolic scan:
src/rust/fault_tolerance/resilience.rs#L191
[hypatia] Lock.unwrap() without poison handling (7 occurrences, CWE-754, line 191, 209, 228, 236, 240, 248, 250)
|
|
Hypatia neurosymbolic scan:
src/rust/fault_tolerance/resilience.rs#L191
[hypatia] unwrap() without prior check -- DoS via panic (7 occurrences, CWE-754, line 191, 209, 228, 236, 240, 248, 250)
|
|
Hypatia neurosymbolic scan:
src/rust/ipc/mod.rs#L84
[hypatia] unwrap() without prior check -- DoS via panic (1 occurrences, CWE-754, line 84)
|
|
Hypatia neurosymbolic scan:
src/interfaces/graphql/schema.rs#L547
[hypatia] unwrap() without prior check -- DoS via panic (1 occurrences, CWE-754, line 547)
|
|
Hypatia neurosymbolic scan:
crates/typed_wasm/src/lib.rs#L421
[hypatia] unwrap() without prior check -- DoS via panic (2 occurrences, CWE-754, line 421, 612)
|
|
Hypatia neurosymbolic scan:
.github/workflows/container-ci.yml#L138
[hypatia] workflow .github/workflows/container-ci.yml:138 pins container `echidna:proverif` by tag — tag is mutable; pin by sha256 digest instead
|
|
Hypatia neurosymbolic scan:
.github/workflows/container-ci.yml#L135
[hypatia] workflow .github/workflows/container-ci.yml:135 pins container `echidna:tamarin` by tag — tag is mutable; pin by sha256 digest instead
|
|
Hypatia neurosymbolic scan:
.github/workflows/s4-loop.yml#L25
[hypatia] workflow .github/workflows/s4-loop.yml:25 pins container `ghcr.io/hyperpolymath/verisimdb-api:latest` by tag — tag is mutable; pin by sha256 digest instead
|
|
Hypatia neurosymbolic scan:
.github/workflows/label-triage.yml#L55
[hypatia] job in .github/workflows/label-triage.yml references `secrets.*` but does not install `step-security/harden-runner` — review outbound-egress monitoring
|
|
Hypatia neurosymbolic scan:
.github/workflows/ghcr-publish.yml#L60
[hypatia] job in .github/workflows/ghcr-publish.yml references `secrets.*` but does not install `step-security/harden-runner` — review outbound-egress monitoring
|
|
Hypatia neurosymbolic scan:
.github/workflows/cflite_pr.yml#L40
[hypatia] job in .github/workflows/cflite_pr.yml references `secrets.*` but does not install `step-security/harden-runner` — review outbound-egress monitoring
|
|
Hypatia neurosymbolic scan:
.github/workflows/cflite_batch.yml#L35
[hypatia] job in .github/workflows/cflite_batch.yml references `secrets.*` but does not install `step-security/harden-runner` — review outbound-egress monitoring
|
|
Hypatia neurosymbolic scan:
.github/workflows/labels.yml#L41
[hypatia] job in .github/workflows/labels.yml references `secrets.*` but does not install `step-security/harden-runner` — review outbound-egress monitoring
|
|
Hypatia neurosymbolic scan:
.github/workflows/s4-loop.yml#L1
[hypatia] Action `taiki-e/install-action@v2.87.26` in s4-loop.yml is not pinned to a commit SHA — `v2.87.26` is a tag, and a tag can be moved to a different commit. Pin it to a full 40-character commit SHA, with the version in a trailing comment.
|
|
Hypatia neurosymbolic scan:
.github/workflows/mvp-smoke.yml#L1
[hypatia] Action `taiki-e/install-action@v2.87.26` in mvp-smoke.yml is not pinned to a commit SHA — `v2.87.26` is a tag, and a tag can be moved to a different commit. Pin it to a full 40-character commit SHA, with the version in a trailing comment.
|
|
panic-attack assail
panic-attack binary not available — skipping assail
|
|
Patch Bridge CVE triage
panic-attack binary not available — skipping Patch Bridge
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
bridge-report
|
218 Bytes |
sha256:bafc6be6f6c72b1d91082a3e6f659ed2632af13ea6117a7765c958b692b6b2cc
|
|
|
hypatia-findings
|
3.4 KB |
sha256:31395a82974ced5c914a8643fca43b300b4dbd06eef1666bca9ae189045b940d
|
|
|
panic-attack-findings
|
171 Bytes |
sha256:3d3f53063bcdd0c24ca2f8fde91d4f6607bde38eaa6728efa5ae21421c8ce75f
|
|
|
unified-findings
|
3.66 KB |
sha256:3000c0072fd8cf657f15a4c52111166190e1fd56213b7ee60e6b6915cca4a7d2
|
|