Static Analysis Gate

chore(deps): bump the actions group with 2 updates #177

Sign in to view logs

Triggered via pull request September 7, 2026 08:11

dependabot[bot]

opened #77

dependabot/github_actions/actions-d1b54b6193

Status Failure

Total duration 51s

Artifacts 4

static-analysis-gate.yml

on: pull_request

panic-attack assail

Hypatia neurosymbolic scan

Patch Bridge CVE triage

Deposit findings for gitbot-fleet

Annotations

11 errors, 10 warnings, and 2 notices

Hypatia neurosymbolic scan

Process completed with exit code 1.

Hypatia neurosymbolic scan

Hypatia found 7 critical security issue(s) — blocking merge

Hypatia neurosymbolic scan: .machine_readable/6a2/PLAYBOOK.a2ml#L1

[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/

Hypatia neurosymbolic scan: .machine_readable/6a2/NEUROSYM.a2ml#L1

[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/

Hypatia neurosymbolic scan: .machine_readable/6a2/AGENTIC.a2ml#L1

[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/

Hypatia neurosymbolic scan: .machine_readable/6a2/ECOSYSTEM.a2ml#L1

[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/

Hypatia neurosymbolic scan: .machine_readable/6a2/META.a2ml#L1

[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/

Hypatia neurosymbolic scan: .machine_readable/6a2/STATE.a2ml#L1

[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/

Hypatia neurosymbolic scan: .envrc#L23

[hypatia] Secret found: Generic API key

Hypatia neurosymbolic scan: setup.sh#L1

[hypatia] Download-and-execute pattern (curl|wget pipe to shell) -- verify integrity before execution (2 occurrences, CWE-494)

Hypatia neurosymbolic scan: instant-sync.yml#L1

[hypatia] Issue in instant-sync.yml

Hypatia neurosymbolic scan: dogfood-gate.yml#L1

[hypatia] Issue in dogfood-gate.yml

Hypatia neurosymbolic scan: dogfood-gate.yml#L1

[hypatia] Issue in dogfood-gate.yml

Hypatia neurosymbolic scan: dogfood-gate.yml#L1

[hypatia] Issue in dogfood-gate.yml

Hypatia neurosymbolic scan: dependabot-automerge.yml#L1

[hypatia] Issue in dependabot-automerge.yml

Hypatia neurosymbolic scan: codeql.yml#L1

[hypatia] Issue in codeql.yml

Hypatia neurosymbolic scan: casket-pages.yml#L1

[hypatia] Issue in casket-pages.yml

Hypatia neurosymbolic scan: casket-pages.yml#L1

[hypatia] Issue in casket-pages.yml

Hypatia neurosymbolic scan: boj-build.yml#L1

[hypatia] Issue in boj-build.yml

Hypatia neurosymbolic scan: release.yml#L1

[hypatia] Action softprops/action-gh-release@v3.0.3 needs attention

Hypatia neurosymbolic scan: casket-pages.yml#L1

[hypatia] Action actions/deploy-pages@v5.0.1 needs attention

Patch Bridge CVE triage

panic-attack binary not available — skipping Patch Bridge

panic-attack assail

panic-attack binary not available — skipping assail

Artifacts

Produced during runtime

Name	Size	Digest
bridge-report	218 Bytes	`sha256:8b96c97ce33df3e4c216acd02eb50bbcffcc2d4ee5b457e1397aa6c771e1d4d2`
hypatia-findings	1.06 KB	`sha256:b8e9a05775235531eb7459c36b769a4e550afbe856881fae2a95e590aa5b5eb0`
panic-attack-findings	171 Bytes	`sha256:6de55aaa090057c5e737b38f6b891f27a4cf89dc8eba1973d582e98578e73603`
unified-findings	1.31 KB	`sha256:43091b1f3ac7337436963fd26074172efc09ff968285a01aa9222ec020dc57f2`