Repository navigation
chore(deps): bump github/codeql-action from 4.38.1 to 4.38.2 in the actions group #207
dependabot[bot]static-analysis-gate.yml
on: pull_request
panic-attack assail
9s
Hypatia neurosymbolic scan
32s
Deposit findings for gitbot-fleet
7s
Annotations
10 warnings and 4 notices
|
Hypatia neurosymbolic scan:
.github/workflows/dogfood-gate.yml#L1
[hypatia] Job `a2ml-validate` in dogfood-gate.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
.github/workflows/codeql.yml#L1
[hypatia] Job `analyze` in codeql.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
.github/workflows/casket-pages.yml#L1
[hypatia] Job `deploy` in casket-pages.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
.github/workflows/casket-pages.yml#L1
[hypatia] Job `build` in casket-pages.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
.github/workflows/boj-build.yml#L1
[hypatia] Job `trigger-boj` in boj-build.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
.github/workflows/abi-ffi-gate.yml#L1
[hypatia] Job `zig-build` in abi-ffi-gate.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
.github/workflows/abi-ffi-gate.yml#L1
[hypatia] Job `conformance` in abi-ffi-gate.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
.github/workflows/codeql.yml#L1
[hypatia] Action `github/codeql-action/analyze@v4.38.2` in codeql.yml is not pinned to a commit SHA — `v4.38.2` is a tag, and a tag can be moved to a different commit. Pin it to a full 40-character commit SHA, with the version in a trailing comment.
|
|
Hypatia neurosymbolic scan:
.github/workflows/codeql.yml#L1
[hypatia] Action `github/codeql-action/init@v4.38.2` in codeql.yml is not pinned to a commit SHA — `v4.38.2` is a tag, and a tag can be moved to a different commit. Pin it to a full 40-character commit SHA, with the version in a trailing comment.
|
|
Hypatia neurosymbolic scan:
.github/workflows/casket-pages.yml#L1
[hypatia] Action `haskell-actions/setup@v2.12.1` in casket-pages.yml is not pinned to a commit SHA — `v2.12.1` is a tag, and a tag can be moved to a different commit. Pin it to a full 40-character commit SHA, with the version in a trailing comment.
|
|
panic-attack assail
panic-attack binary not available — skipping assail
|
|
panic-attack assail
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
|
Hypatia neurosymbolic scan
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
|
Deposit findings for gitbot-fleet
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
hypatia-findings
|
2.06 KB |
sha256:7a51daaa69789e6d843651d4153c41ba88a9731377b90d6c8d016be49dd48cc2
|
|
|
panic-attack-findings
|
171 Bytes |
sha256:7f14649e153a57f2780d00165df839283e63058d1bd0447ff65f8c3771a5f0c9
|
|
|
unified-findings
|
2.25 KB |
sha256:ead1f1763c4281068831afefda94001b6af207f0e1eff0c8d16d2f7d904a67f9
|
|