refactor: rename Hexadeca → unified-api-adapter (estate-wide) #115
Triggered via pull request
September 21, 2026 00:50
hyperpolymath
Status
Failure
Total duration
1h 20m 42s
Artifacts
4
static-analysis-gate.yml
on: pull_request
panic-attack assail
6s
Hypatia neurosymbolic scan
33s
Patch Bridge CVE triage
7s
Deposit findings for gitbot-fleet
10s
Annotations
11 errors, 10 warnings, and 6 notices
|
Hypatia neurosymbolic scan
Process completed with exit code 1.
|
|
Hypatia neurosymbolic scan
Hypatia found 1 critical security issue(s) — blocking merge
|
|
Hypatia neurosymbolic scan:
ffi/zig/src/bridge.zig#L1
[hypatia] Zig @ptrCast performs unchecked pointer type conversion (3 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
core-zig/src/bridge.zig#L1
[hypatia] Zig @aligncast performs unchecked alignment cast (12 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
core-zig/src/bridge.zig#L1
[hypatia] Zig @ptrCast performs unchecked pointer type conversion (14 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
beam/native/src/beam.zig#L1
[hypatia] Zig @aligncast performs unchecked alignment cast (1 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
beam/native/src/beam.zig#L1
[hypatia] Zig @ptrCast performs unchecked pointer type conversion (1 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
beam/native/src/lith_nif.zig#L1
[hypatia] Zig @aligncast performs unchecked alignment cast (7 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
beam/native/src/lith_nif.zig#L1
[hypatia] Zig @ptrCast performs unchecked pointer type conversion (9 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
beam/native_rust/src/lib.rs#L1
[hypatia] from_raw constructs types from raw pointers without safety checks (10 occurrences, CWE-676)
|
|
Hypatia neurosymbolic scan:
.github/workflows/dependabot-automerge.yml#L55
[hypatia] workflow .github/workflows/dependabot-automerge.yml:55 gates on `github.actor == 'dependabot[bot]'` — `github.actor` is the run-triggering user, which an attacker controls on `pull_request_target` from a fork
|
|
Hypatia neurosymbolic scan:
zig-tests.yml#L1
[hypatia] Job `check-todos` in zig-tests.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
test-suite.yml#L1
[hypatia] Job `test-zig-core` in test-suite.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
test-suite.yml#L1
[hypatia] Job `test-lean` in test-suite.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
test-suite.yml#L1
[hypatia] Job `test-forth` in test-suite.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
test-suite.yml#L1
[hypatia] Job `test-ffi` in test-suite.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
labels.yml#L1
[hypatia] Job `sync` in labels.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
label-triage.yml#L1
[hypatia] Job `triage` in label-triage.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
ci.yml#L1
[hypatia] Job `test-forth` in ci.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
ci.yml#L1
[hypatia] Job `test-ffi` in ci.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
ci.yml#L1
[hypatia] Job `build-zig` in ci.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Patch Bridge CVE triage
panic-attack binary not available — skipping Patch Bridge
|
|
Patch Bridge CVE triage
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
|
panic-attack assail
panic-attack binary not available — skipping assail
|
|
panic-attack assail
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
|
Hypatia neurosymbolic scan
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
|
Deposit findings for gitbot-fleet
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
bridge-report
|
218 Bytes |
sha256:08916b3f685237aabde3a46693e786e621b5a89828d16f8cc7dab92c88ae624d
|
|
|
hypatia-findings
|
3.19 KB |
sha256:00d4ef1547a029642220fca1a2133dbdb94dc526c2fc23e25f94c9e230296a7f
|
|
|
panic-attack-findings
|
171 Bytes |
sha256:f31479de42d27642249516a8fe2a0b1d0ee0980c0d98e979ef04d33b40921275
|
|
|
unified-findings
|
3.45 KB |
sha256:537ddf3ee3d0a6cb40a79899f97c91aa8f881b969febbb51e9d5c54a3524b6ac
|
|