Repository navigation

Static Analysis Gate

fix: the Hypatia gate could never fire — the defects that made it unconditionally vacuous #234

Sign in to view logs

Triggered via pull request September 3, 2026 03:42

opened #107

fix/hypatia-gate-repair

Status Failure

Total duration 7m 34s

Artifacts 3

static-analysis-gate.yml

on: pull_request

panic-attack assail

Hypatia neurosymbolic scan

Deposit findings for gitbot-fleet

Annotations

12 errors, 10 warnings, and 1 notice

Hypatia neurosymbolic scan

Process completed with exit code 1.

Hypatia neurosymbolic scan

Hypatia found 8 critical security issue(s) — blocking merge

Hypatia neurosymbolic scan: .machine_readable/6a2/STATE.a2ml#L1

[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/

Hypatia neurosymbolic scan: satellites/a2mliser/.envrc#L24

[hypatia] Secret found: Generic API key

Hypatia neurosymbolic scan: .envrc#L23

[hypatia] Secret found: Generic API key

Hypatia neurosymbolic scan: satellites/a2mliser/src/interface/ffi/src/main.zig#L1

[hypatia] Zig @aligncast performs unchecked alignment cast (1 occurrences, CWE-704)

Hypatia neurosymbolic scan: satellites/a2mliser/src/interface/ffi/src/main.zig#L1

[hypatia] Zig @ptrCast performs unchecked pointer type conversion (2 occurrences, CWE-704)

Hypatia neurosymbolic scan: src/codegen/templates/cartridge_shim.zig#L1

[hypatia] Zig @ptrCast performs unchecked pointer type conversion (1 occurrences, CWE-704)

Hypatia neurosymbolic scan: setup.sh#L1

[hypatia] Download-and-execute pattern (curl|wget pipe to shell) -- verify integrity before execution (2 occurrences, CWE-494)

Hypatia neurosymbolic scan: src/abi/idris_emitter.rs#L1

[hypatia] unwrap() without prior check -- DoS via panic (1 occurrences, CWE-754)

Hypatia neurosymbolic scan: scorecard.yml#L1

[hypatia] Issue in scorecard.yml

Hypatia neurosymbolic scan: instant-sync.yml#L1

[hypatia] Issue in instant-sync.yml

Hypatia neurosymbolic scan: dogfood-gate.yml#L1

[hypatia] Issue in dogfood-gate.yml

Hypatia neurosymbolic scan: dogfood-gate.yml#L1

[hypatia] Issue in dogfood-gate.yml

Hypatia neurosymbolic scan: dogfood-gate.yml#L1

[hypatia] Issue in dogfood-gate.yml

Hypatia neurosymbolic scan: dogfood-gate.yml#L1

[hypatia] Issue in dogfood-gate.yml

Hypatia neurosymbolic scan: codeql.yml#L1

[hypatia] Issue in codeql.yml

Hypatia neurosymbolic scan: casket-pages.yml#L1

[hypatia] Issue in casket-pages.yml

Hypatia neurosymbolic scan: casket-pages.yml#L1

[hypatia] Issue in casket-pages.yml

Hypatia neurosymbolic scan: boj-build.yml#L1

[hypatia] Issue in boj-build.yml

Hypatia neurosymbolic scan: abi-ffi-gate.yml#L1

[hypatia] Issue in abi-ffi-gate.yml

Hypatia neurosymbolic scan: abi-ffi-gate.yml#L1

[hypatia] Issue in abi-ffi-gate.yml

panic-attack assail

panic-attack binary not available — skipping assail

Artifacts

Produced during runtime

Name	Size	Digest
hypatia-findings	1.37 KB	`sha256:3028774f003461d74451b0ae3dcc9abc1526f620a18e3c0014b8075c1b7207e5`
panic-attack-findings	171 Bytes	`sha256:09ac2e019a62c17f1d213e53f24c03ed597f6dd108c1639374f40ae4884f1ede`
unified-findings	1.56 KB	`sha256:e43b1b5661a1ebb659b4ed40bb7d3159bcfcb795f79fdda92e4effc564bc94a6`