Repository navigation

Static Analysis Gate

chore(deps): bump the actions group across 1 directory with 3 updates #167

Sign in to view logs

Triggered via pull request September 4, 2026 21:06

dependabot[bot]

opened #63

dependabot/github_actions/actions-b1ba849c65

Status Failure

Total duration 46s

Artifacts 3

static-analysis-gate.yml

on: pull_request

panic-attack assail

Hypatia neurosymbolic scan

Deposit findings for gitbot-fleet

Annotations

12 errors, 10 warnings, and 1 notice

Hypatia neurosymbolic scan

Process completed with exit code 1.

Hypatia neurosymbolic scan

Hypatia found 8 critical security issue(s) — blocking merge

Hypatia neurosymbolic scan: .machine_readable/6a2/NEUROSYM.a2ml#L1

[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/

Hypatia neurosymbolic scan: .machine_readable/6a2/AGENTIC.a2ml#L1

[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/

Hypatia neurosymbolic scan: .machine_readable/6a2/ECOSYSTEM.a2ml#L1

[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/

Hypatia neurosymbolic scan: .machine_readable/6a2/META.a2ml#L1

[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/

Hypatia neurosymbolic scan: .machine_readable/6a2/STATE.a2ml#L1

[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/

Hypatia neurosymbolic scan: .envrc#L23

[hypatia] Secret found: Generic API key

Hypatia neurosymbolic scan: setup.sh#L1

[hypatia] Download-and-execute pattern (curl|wget pipe to shell) -- verify integrity before execution (2 occurrences, CWE-494)

Hypatia neurosymbolic scan: scripts/abi-ffi-gate.py#L1

[hypatia] Python file detected -- banned language

Hypatia neurosymbolic scan: scorecard.yml#L1

[hypatia] Issue in scorecard.yml

Hypatia neurosymbolic scan: instant-sync.yml#L1

[hypatia] Issue in instant-sync.yml

Hypatia neurosymbolic scan: codeql.yml#L1

[hypatia] Issue in codeql.yml

Hypatia neurosymbolic scan: casket-pages.yml#L1

[hypatia] Issue in casket-pages.yml

Hypatia neurosymbolic scan: casket-pages.yml#L1

[hypatia] Issue in casket-pages.yml

Hypatia neurosymbolic scan: boj-build.yml#L1

[hypatia] Issue in boj-build.yml

Hypatia neurosymbolic scan: abi-ffi-gate.yml#L1

[hypatia] Issue in abi-ffi-gate.yml

Hypatia neurosymbolic scan: abi-ffi-gate.yml#L1

[hypatia] Issue in abi-ffi-gate.yml

Hypatia neurosymbolic scan: release.yml#L1

[hypatia] Action softprops/action-gh-release@v3.0.3 needs attention

Hypatia neurosymbolic scan: codeql.yml#L1

[hypatia] Action github/codeql-action/analyze@v4.37.9 needs attention

Hypatia neurosymbolic scan: codeql.yml#L1

[hypatia] Action github/codeql-action/init@v4.37.9 needs attention

Hypatia neurosymbolic scan: casket-pages.yml#L1

[hypatia] Action actions/deploy-pages@v5.0.1 needs attention

panic-attack assail

panic-attack binary not available — skipping assail

Artifacts

Produced during runtime

Name	Size	Digest
hypatia-findings	1.37 KB	`sha256:0ead8f61fc50b91329013309b3d3c75a8d1a49c212a58b300e204b7def8412c9`
panic-attack-findings	171 Bytes	`sha256:d14c7d91d8a26ed46a6ea3ea963099d4399011cadd62aab3f00e0eccb3a32a1b`
unified-findings	1.55 KB	`sha256:7ea1c65989a80bdaf26212db90bd32229ce0ab8559ef8b8baf61f262f8b8b047`