Repository navigation
refactor: rename Hexadeca → unified-api-adapter (estate-wide) (#50) #116
hyperpolymathstatic-analysis-gate.yml
on: push
panic-attack assail
7s
Hypatia neurosymbolic scan
37s
Patch Bridge CVE triage
5s
Deposit findings for gitbot-fleet
9s
Annotations
11 errors, 10 warnings, and 6 notices
|
Hypatia neurosymbolic scan
Process completed with exit code 1.
|
|
Hypatia neurosymbolic scan
Hypatia found 1 critical security issue(s) — blocking merge
|
|
Hypatia neurosymbolic scan:
ffi/zig/src/bridge.zig#L1
[hypatia] Zig @ptrCast performs unchecked pointer type conversion (3 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
core-zig/src/bridge.zig#L1
[hypatia] Zig @aligncast performs unchecked alignment cast (12 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
core-zig/src/bridge.zig#L1
[hypatia] Zig @ptrCast performs unchecked pointer type conversion (14 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
beam/native/src/beam.zig#L1
[hypatia] Zig @aligncast performs unchecked alignment cast (1 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
beam/native/src/beam.zig#L1
[hypatia] Zig @ptrCast performs unchecked pointer type conversion (1 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
beam/native/src/lith_nif.zig#L1
[hypatia] Zig @aligncast performs unchecked alignment cast (7 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
beam/native/src/lith_nif.zig#L1
[hypatia] Zig @ptrCast performs unchecked pointer type conversion (9 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
beam/native_rust/src/lib.rs#L1
[hypatia] from_raw constructs types from raw pointers without safety checks (10 occurrences, CWE-676)
|
|
Hypatia neurosymbolic scan:
.github/workflows/dependabot-automerge.yml#L55
[hypatia] workflow .github/workflows/dependabot-automerge.yml:55 gates on `github.actor == 'dependabot[bot]'` — `github.actor` is the run-triggering user, which an attacker controls on `pull_request_target` from a fork
|
|
Hypatia neurosymbolic scan:
zig-tests.yml#L1
[hypatia] Job `check-todos` in zig-tests.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
test-suite.yml#L1
[hypatia] Job `test-zig-core` in test-suite.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
test-suite.yml#L1
[hypatia] Job `test-lean` in test-suite.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
test-suite.yml#L1
[hypatia] Job `test-forth` in test-suite.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
test-suite.yml#L1
[hypatia] Job `test-ffi` in test-suite.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
labels.yml#L1
[hypatia] Job `sync` in labels.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
label-triage.yml#L1
[hypatia] Job `triage` in label-triage.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
ci.yml#L1
[hypatia] Job `test-forth` in ci.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
ci.yml#L1
[hypatia] Job `test-ffi` in ci.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
ci.yml#L1
[hypatia] Job `build-zig` in ci.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Patch Bridge CVE triage
panic-attack binary not available — skipping Patch Bridge
|
|
Patch Bridge CVE triage
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
|
panic-attack assail
panic-attack binary not available — skipping assail
|
|
panic-attack assail
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
|
Hypatia neurosymbolic scan
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
|
Deposit findings for gitbot-fleet
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
bridge-report
|
218 Bytes |
sha256:f34ad86456c64d9620f8060ece9f69777ca504aab8eb7b10257b949a7da99f2c
|
|
|
hypatia-findings
|
3.19 KB |
sha256:675f3936ac5724e1c9d0529279e2d3dd294e3dc425ab93160e36619a28312b46
|
|
|
panic-attack-findings
|
171 Bytes |
sha256:a1014fc2ccf5fc6799bc993f7e963f04471a87ab136b509173ca380b31a048b7
|
|
|
unified-findings
|
3.46 KB |
sha256:d1586047e032a680010a0d98647581cf7593d5576bfec894ed57ac31b413f288
|
|