Skip to content
Hypatia Security Scan

fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump #159

Sign in to view logs

fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump

fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump #159

Triggered via pull request July 21, 2026 20:49
@hyperpolymathhyperpolymath
synchronize #45
fix/governance-gate-sweep
Status Success
Total duration 2h 12m 4s
Artifacts 1

hypatia-scan.yml

on: pull_request
Hypatia Neurosymbolic Analysis
52s
Hypatia Neurosymbolic Analysis
Fit to window
Zoom out
Zoom in

Annotations

3 warnings
Hypatia Neurosymbolic Analysis
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Hypatia Neurosymbolic Analysis
Hypatia found critical security issue(s) — advisory.
Hypatia Neurosymbolic Analysis
git push to hyperpolymath/gitbot-fleet failed — findings not persisted. Set FLEET_PUSH_TOKEN with contents:write on hyperpolymath/gitbot-fleet to enable delivery.

Artifacts

Produced during runtime
Name Size Digest
hypatia-findings
1.39 KB
sha256:c6575e9a9e121db20b4d7a7bb728197373edebb890878f7f8d5e6e0f0af67272