Static Analysis Gate

chore(deps): bump the actions group with 2 updates #178

Sign in to view logs

Triggered via pull request September 8, 2026 07:40

synchronize #77

dependabot/github_actions/actions-d1b54b6193

Status Failure

Total duration 49s

Artifacts 4

static-analysis-gate.yml

on: pull_request

panic-attack assail

Hypatia neurosymbolic scan

Patch Bridge CVE triage

Deposit findings for gitbot-fleet

Annotations

11 errors, 10 warnings, and 2 notices

Hypatia neurosymbolic scan

Process completed with exit code 1.

Hypatia neurosymbolic scan

Hypatia found 7 critical security issue(s) — blocking merge

Hypatia neurosymbolic scan: .machine_readable/6a2/PLAYBOOK.a2ml#L1

[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/

Hypatia neurosymbolic scan: .machine_readable/6a2/NEUROSYM.a2ml#L1

[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/

Hypatia neurosymbolic scan: .machine_readable/6a2/AGENTIC.a2ml#L1

[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/

Hypatia neurosymbolic scan: .machine_readable/6a2/ECOSYSTEM.a2ml#L1

[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/

Hypatia neurosymbolic scan: .machine_readable/6a2/META.a2ml#L1

[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/

Hypatia neurosymbolic scan: .machine_readable/6a2/STATE.a2ml#L1

[hypatia] Descriptile in retired location -- must be in .machine_readable/descriptiles/

Hypatia neurosymbolic scan: .envrc#L23

[hypatia] Secret found: Generic API key

Hypatia neurosymbolic scan: setup.sh#L1

[hypatia] Download-and-execute pattern (curl|wget pipe to shell) -- verify integrity before execution (2 occurrences, CWE-494)

Hypatia neurosymbolic scan: instant-sync.yml#L1

[hypatia] Issue in instant-sync.yml

Hypatia neurosymbolic scan: dogfood-gate.yml#L1

[hypatia] Issue in dogfood-gate.yml

Hypatia neurosymbolic scan: dogfood-gate.yml#L1

[hypatia] Issue in dogfood-gate.yml

Hypatia neurosymbolic scan: dogfood-gate.yml#L1

[hypatia] Issue in dogfood-gate.yml

Hypatia neurosymbolic scan: dogfood-gate.yml#L1

[hypatia] Issue in dogfood-gate.yml

Hypatia neurosymbolic scan: dogfood-gate.yml#L1

[hypatia] Issue in dogfood-gate.yml

Hypatia neurosymbolic scan: dependabot-automerge.yml#L1

[hypatia] Issue in dependabot-automerge.yml

Hypatia neurosymbolic scan: codeql.yml#L1

[hypatia] Issue in codeql.yml

Hypatia neurosymbolic scan: casket-pages.yml#L1

[hypatia] Issue in casket-pages.yml

Hypatia neurosymbolic scan: casket-pages.yml#L1

[hypatia] Issue in casket-pages.yml

Hypatia neurosymbolic scan: boj-build.yml#L1

[hypatia] Issue in boj-build.yml

panic-attack assail

panic-attack binary not available — skipping assail

Patch Bridge CVE triage

panic-attack binary not available — skipping Patch Bridge

Artifacts

Produced during runtime

Name	Size	Digest
bridge-report	218 Bytes	`sha256:faf4fd253b85f7b552c90c8b5f996558150f7cd1785f8a150eb6a75b18ca7f4c`
hypatia-findings	997 Bytes	`sha256:47745c313cdfb0cef4ff87394721971ee04770b04f1405d85afe908b9b05a11e`
panic-attack-findings	171 Bytes	`sha256:5712699f26d224d05911768d4fd8d773b64c3a7564b9ccc6455e921a6e4a4bbe`
unified-findings	1.22 KB	`sha256:541e428cbd77314b95ad228f2e20316eca72ef19abf5465a642546da62b00014`