fix(ci): repair the unbalanced jq filter in the Hypatia findings validator

[hyperpolymath]

The findings validator's jq program does not compile:

jq: error: syntax error, unexpected INVALID_CHARACTER, expecting end of file
      ["critical", "high", "medium", "warn", "low", "info", "informational"] | index($s) != null)))
jq: 1 compile error

The filter has 3 opening and 4 closing parentheses. When the check was rewritten from length == 1 and (.[0] | type == "array" and all(...)) (the form still present at 591cea1) to type == "array" and length > 0 and all(...), the (.[0] | ...) wrapper was dropped but its closing paren was not — so the program is a syntax error and every run pinned at/after that rewrite fails the step with ::error::Hypatia did not produce a valid findings array (exit 2). The scan itself succeeds; only the validator is broken.

Removing the stray paren was verified locally against a real findings file (defiant, 69 findings, 12 of them warn):

• fixed program compiles and accepts the file → rc=0
• negative control (one finding set to severity bogus) → rc=1, so the gate still gates
• the SARIF validator in the same reusable was checked too: balanced (8/8) and compiles.

Downstream: defiant's required hypatia / Hypatia Neurosymbolic Analysis context is red because of this, and any other caller pinned into this window is too.

[coderabbitai]

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: d07bfb45-e59c-4703-8c24-4b47f3c6317d

📥 Commits

Reviewing files that changed from the base of the PR and between 56723d0 and d7d57b5.

📒 Files selected for processing (1)

• .github/workflows/hypatia-scan-reusable.yml

 ______________________________
< I'm not mad, just debugging. >
 ------------------------------
  \
   \   \
        \ /\
        ( )
      .( o ).

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud