Skip to content

ci(rhodibot): switch to the report-only canary (standards#759) #189

ci(rhodibot): switch to the report-only canary (standards#759)

ci(rhodibot): switch to the report-only canary (standards#759) #189

Triggered via pull request September 19, 2026 18:36
Status Success
Total duration 12m 34s
Artifacts 3

static-analysis-gate.yml

on: pull_request
panic-attack assail
6s
panic-attack assail
Hypatia neurosymbolic scan
31s
Hypatia neurosymbolic scan
Deposit findings for gitbot-fleet
7s
Deposit findings for gitbot-fleet
Fit to window
Zoom out
Zoom in

Annotations

10 warnings and 4 notices
Hypatia neurosymbolic scan: dogfood-gate.yml#L1
[hypatia] Job `a2ml-validate` in dogfood-gate.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
Hypatia neurosymbolic scan: codeql.yml#L1
[hypatia] Job `analyze` in codeql.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
Hypatia neurosymbolic scan: casket-pages.yml#L1
[hypatia] Job `deploy` in casket-pages.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
Hypatia neurosymbolic scan: casket-pages.yml#L1
[hypatia] Job `build` in casket-pages.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
Hypatia neurosymbolic scan: boj-build.yml#L1
[hypatia] Job `trigger-boj` in boj-build.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
Hypatia neurosymbolic scan: abi-ffi-gate.yml#L1
[hypatia] Job `zig-build` in abi-ffi-gate.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
Hypatia neurosymbolic scan: abi-ffi-gate.yml#L1
[hypatia] Job `conformance` in abi-ffi-gate.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
Hypatia neurosymbolic scan: push-email-notify.yml#L1
[hypatia] Action `hyperpolymath/smtp-notify-action@v0.3.0` in push-email-notify.yml is not pinned to a commit SHA — `v0.3.0` is a tag, and a tag can be moved to a different commit. Pin it to a full 40-character commit SHA, with the version in a trailing comment.
Hypatia neurosymbolic scan: codeql.yml#L1
[hypatia] Action `github/codeql-action/analyze@v4.38.0` in codeql.yml is not pinned to a commit SHA — `v4.38.0` is a tag, and a tag can be moved to a different commit. Pin it to a full 40-character commit SHA, with the version in a trailing comment.
Hypatia neurosymbolic scan: codeql.yml#L1
[hypatia] Action `github/codeql-action/init@v4.38.0` in codeql.yml is not pinned to a commit SHA — `v4.38.0` is a tag, and a tag can be moved to a different commit. Pin it to a full 40-character commit SHA, with the version in a trailing comment.
panic-attack assail
panic-attack binary not available — skipping assail
panic-attack assail
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Hypatia neurosymbolic scan
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Deposit findings for gitbot-fleet
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

Artifacts

Produced during runtime
Name Size Digest
hypatia-findings
2.1 KB
sha256:df2bd96e7c785dbe66b4f8c3a0c14d9f7ace31b59aaf79827245eabb343ae43c
panic-attack-findings
171 Bytes
sha256:fb8c574b53e1cff67a40c3da04fe1255acf5138fe8ec886565bc254e40ed6d47
unified-findings
2.27 KB
sha256:8015fa3bce7112f0626a99b408b4d6d42159d4e221d0defe4edaaef8fa249d92