Static Analysis Gate

fix(ci): the invisible-character gate never matched anything (#72) #176

Sign in to view logs

Triggered via push September 4, 2026 09:01

main

Status Failure

Total duration 55m 37s

Artifacts 4

static-analysis-gate.yml

on: push

panic-attack assail

Hypatia neurosymbolic scan

Patch Bridge CVE triage

Deposit findings for gitbot-fleet

Annotations

11 errors, 10 warnings, and 2 notices

Hypatia neurosymbolic scan

Process completed with exit code 1.

Hypatia neurosymbolic scan

Hypatia found 7 critical security issue(s) — blocking merge

Hypatia neurosymbolic scan: .machine_readable/6a2/PLAYBOOK.a2ml#L1

[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/

Hypatia neurosymbolic scan: .machine_readable/6a2/NEUROSYM.a2ml#L1

[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/

Hypatia neurosymbolic scan: .machine_readable/6a2/AGENTIC.a2ml#L1

[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/

Hypatia neurosymbolic scan: .machine_readable/6a2/ECOSYSTEM.a2ml#L1

[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/

Hypatia neurosymbolic scan: .machine_readable/6a2/META.a2ml#L1

[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/

Hypatia neurosymbolic scan: .machine_readable/6a2/STATE.a2ml#L1

[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/

Hypatia neurosymbolic scan: .envrc#L23

[hypatia] Secret found: Generic API key

Hypatia neurosymbolic scan: setup.sh#L1

[hypatia] Download-and-execute pattern (curl|wget pipe to shell) -- verify integrity before execution (2 occurrences, CWE-494)

Hypatia neurosymbolic scan: instant-sync.yml#L1

[hypatia] Issue in instant-sync.yml

Hypatia neurosymbolic scan: dogfood-gate.yml#L1

[hypatia] Issue in dogfood-gate.yml

Hypatia neurosymbolic scan: dogfood-gate.yml#L1

[hypatia] Issue in dogfood-gate.yml

Hypatia neurosymbolic scan: dogfood-gate.yml#L1

[hypatia] Issue in dogfood-gate.yml

Hypatia neurosymbolic scan: dogfood-gate.yml#L1

[hypatia] Issue in dogfood-gate.yml

Hypatia neurosymbolic scan: dogfood-gate.yml#L1

[hypatia] Issue in dogfood-gate.yml

Hypatia neurosymbolic scan: dependabot-automerge.yml#L1

[hypatia] Issue in dependabot-automerge.yml

Hypatia neurosymbolic scan: codeql.yml#L1

[hypatia] Issue in codeql.yml

Hypatia neurosymbolic scan: casket-pages.yml#L1

[hypatia] Issue in casket-pages.yml

Hypatia neurosymbolic scan: casket-pages.yml#L1

[hypatia] Issue in casket-pages.yml

Hypatia neurosymbolic scan: boj-build.yml#L1

[hypatia] Issue in boj-build.yml

panic-attack assail

panic-attack binary not available — skipping assail

Patch Bridge CVE triage

panic-attack binary not available — skipping Patch Bridge

Artifacts

Produced during runtime

Name	Size	Digest
bridge-report	218 Bytes	`sha256:8c420f2ab898e3875a24b9aedfe546d34640835ea29b7f2d95b0f196d0701569`
hypatia-findings	997 Bytes	`sha256:68916212865f6b1753ef76d14a25fb374c8f350c84e074fd673917320872adba`
panic-attack-findings	171 Bytes	`sha256:f9e92acfaee377e225701b69961683128f96edf723f61bb180f938e9c1a95f70`
unified-findings	1.21 KB	`sha256:2631d9dbd1de3f0e501810072db862f8a997a8687a14b24977e60166bf6f1c78`