Static Analysis Gate

fix: the Hypatia gate could never fire — the defects that made it unconditionally vacuous #172

Sign in to view logs

Triggered via pull request September 3, 2026 03:42

opened #75

fix/hypatia-gate-repair

Status Failure

Total duration 7m 41s

Artifacts 4

static-analysis-gate.yml

on: pull_request

panic-attack assail

Hypatia neurosymbolic scan

Patch Bridge CVE triage

Deposit findings for gitbot-fleet

Annotations

11 errors, 10 warnings, and 2 notices

Hypatia neurosymbolic scan

Process completed with exit code 1.

Hypatia neurosymbolic scan

Hypatia found 7 critical security issue(s) — blocking merge

Hypatia neurosymbolic scan: .machine_readable/6a2/PLAYBOOK.a2ml#L1

[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/

Hypatia neurosymbolic scan: .machine_readable/6a2/NEUROSYM.a2ml#L1

[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/

Hypatia neurosymbolic scan: .machine_readable/6a2/AGENTIC.a2ml#L1

[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/

Hypatia neurosymbolic scan: .machine_readable/6a2/ECOSYSTEM.a2ml#L1

[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/

Hypatia neurosymbolic scan: .machine_readable/6a2/META.a2ml#L1

[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/

Hypatia neurosymbolic scan: .machine_readable/6a2/STATE.a2ml#L1

[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/

Hypatia neurosymbolic scan: .envrc#L23

[hypatia] Secret found: Generic API key

Hypatia neurosymbolic scan: setup.sh#L1

[hypatia] Download-and-execute pattern (curl|wget pipe to shell) -- verify integrity before execution (2 occurrences, CWE-494)

Hypatia neurosymbolic scan: instant-sync.yml#L1

[hypatia] Issue in instant-sync.yml

Hypatia neurosymbolic scan: dogfood-gate.yml#L1

[hypatia] Issue in dogfood-gate.yml

Hypatia neurosymbolic scan: dogfood-gate.yml#L1

[hypatia] Issue in dogfood-gate.yml

Hypatia neurosymbolic scan: dogfood-gate.yml#L1

[hypatia] Issue in dogfood-gate.yml

Hypatia neurosymbolic scan: dogfood-gate.yml#L1

[hypatia] Issue in dogfood-gate.yml

Hypatia neurosymbolic scan: dogfood-gate.yml#L1

[hypatia] Issue in dogfood-gate.yml

Hypatia neurosymbolic scan: dependabot-automerge.yml#L1

[hypatia] Issue in dependabot-automerge.yml

Hypatia neurosymbolic scan: codeql.yml#L1

[hypatia] Issue in codeql.yml

Hypatia neurosymbolic scan: casket-pages.yml#L1

[hypatia] Issue in casket-pages.yml

Hypatia neurosymbolic scan: casket-pages.yml#L1

[hypatia] Issue in casket-pages.yml

Hypatia neurosymbolic scan: boj-build.yml#L1

[hypatia] Issue in boj-build.yml

Patch Bridge CVE triage

panic-attack binary not available — skipping Patch Bridge

panic-attack assail

panic-attack binary not available — skipping assail

Artifacts

Produced during runtime

Name	Size	Digest
bridge-report	218 Bytes	`sha256:8e37873ac241c5724a35af8803c24378c3214b4d0cbf6f26d49195b41f9bda33`
hypatia-findings	1013 Bytes	`sha256:9777abd6f72723481bc819972122e11a40a6c9d19a90d9490b911ef537b21cd0`
panic-attack-findings	171 Bytes	`sha256:e8c25e64758a20046fd9db9f7093deefbc14853162aaef77f7bff957670fe08d`
unified-findings	1.24 KB	`sha256:9b1b8209a7aa7d2cdacdc653076f99eac2d6ff622f765856bb4b8fd05e1ce4e1`