Skip to content

chore(deps): bump the actions group across 1 directory with 3 updates… #168

chore(deps): bump the actions group across 1 directory with 3 updates…

chore(deps): bump the actions group across 1 directory with 3 updates… #168

Triggered via push September 6, 2026 19:49
Status Failure
Total duration 13m 53s
Artifacts 3
panic-attack assail
8s
panic-attack assail
Hypatia neurosymbolic scan
30s
Hypatia neurosymbolic scan
Deposit findings for gitbot-fleet
5s
Deposit findings for gitbot-fleet
Fit to window
Zoom out
Zoom in

Annotations

12 errors, 10 warnings, and 1 notice
Hypatia neurosymbolic scan
Process completed with exit code 1.
Hypatia neurosymbolic scan
Hypatia found 8 critical security issue(s) — blocking merge
Hypatia neurosymbolic scan: .machine_readable/6a2/NEUROSYM.a2ml#L1
[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/
Hypatia neurosymbolic scan: .machine_readable/6a2/AGENTIC.a2ml#L1
[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/
Hypatia neurosymbolic scan: .machine_readable/6a2/ECOSYSTEM.a2ml#L1
[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/
Hypatia neurosymbolic scan: .machine_readable/6a2/META.a2ml#L1
[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/
Hypatia neurosymbolic scan: .machine_readable/6a2/STATE.a2ml#L1
[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/
Hypatia neurosymbolic scan: .envrc#L23
[hypatia] Secret found: Generic API key
Hypatia neurosymbolic scan: setup.sh#L1
[hypatia] Download-and-execute pattern (curl|wget pipe to shell) -- verify integrity before execution (2 occurrences, CWE-494)
Hypatia neurosymbolic scan: scripts/abi-ffi-gate.py#L1
[hypatia] Python file detected -- banned language
Hypatia neurosymbolic scan: scorecard.yml#L1
[hypatia] Issue in scorecard.yml
Hypatia neurosymbolic scan: instant-sync.yml#L1
[hypatia] Issue in instant-sync.yml
Hypatia neurosymbolic scan: codeql.yml#L1
[hypatia] Issue in codeql.yml
Hypatia neurosymbolic scan: casket-pages.yml#L1
[hypatia] Issue in casket-pages.yml
Hypatia neurosymbolic scan: casket-pages.yml#L1
[hypatia] Issue in casket-pages.yml
Hypatia neurosymbolic scan: boj-build.yml#L1
[hypatia] Issue in boj-build.yml
Hypatia neurosymbolic scan: abi-ffi-gate.yml#L1
[hypatia] Issue in abi-ffi-gate.yml
Hypatia neurosymbolic scan: abi-ffi-gate.yml#L1
[hypatia] Issue in abi-ffi-gate.yml
Hypatia neurosymbolic scan: release.yml#L1
[hypatia] Action softprops/action-gh-release@v3.0.3 needs attention
Hypatia neurosymbolic scan: codeql.yml#L1
[hypatia] Action github/codeql-action/analyze@v4.37.9 needs attention
Hypatia neurosymbolic scan: codeql.yml#L1
[hypatia] Action github/codeql-action/init@v4.37.9 needs attention
Hypatia neurosymbolic scan: casket-pages.yml#L1
[hypatia] Action actions/deploy-pages@v5.0.1 needs attention
panic-attack assail
panic-attack binary not available — skipping assail

Artifacts

Produced during runtime
Name Size Digest
hypatia-findings
1.37 KB
sha256:03a91fdd35c265fcdf20c09ebefbdb879d02e2d3084f54a025e32169190ad377
panic-attack-findings
171 Bytes
sha256:007c0f5bb44b94ea770d06606f6d4330da7ea7ca989492f63631d5e7b8ca13f0
unified-findings
1.55 KB
sha256:044bece5cc7ff2e945d890906fe5771f4196d2edcc4265ae39fa79cfdebd25dc