chore(deps): bump the actions group with 2 updates #126
dependabot[bot]static-analysis-gate.yml
on: pull_request
panic-attack assail
8s
Hypatia neurosymbolic scan
43s
Patch Bridge CVE triage
5s
Deposit findings for gitbot-fleet
9s
Annotations
11 errors, 10 warnings, and 6 notices
|
Hypatia neurosymbolic scan
Process completed with exit code 1.
|
|
Hypatia neurosymbolic scan
Hypatia found 1 critical security issue(s) — blocking merge
|
|
Hypatia neurosymbolic scan:
ffi/zig/src/bridge.zig#L1
[hypatia] Zig @ptrCast performs unchecked pointer type conversion (3 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
core-zig/src/bridge.zig#L1
[hypatia] Zig @aligncast performs unchecked alignment cast (12 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
core-zig/src/bridge.zig#L1
[hypatia] Zig @ptrCast performs unchecked pointer type conversion (14 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
beam/native/src/beam.zig#L1
[hypatia] Zig @aligncast performs unchecked alignment cast (1 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
beam/native/src/beam.zig#L1
[hypatia] Zig @ptrCast performs unchecked pointer type conversion (1 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
beam/native/src/lith_nif.zig#L1
[hypatia] Zig @aligncast performs unchecked alignment cast (7 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
beam/native/src/lith_nif.zig#L1
[hypatia] Zig @ptrCast performs unchecked pointer type conversion (9 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
beam/native_rust/src/lib.rs#L1
[hypatia] from_raw constructs types from raw pointers without safety checks (10 occurrences, CWE-676)
|
|
Hypatia neurosymbolic scan:
.github/workflows/dependabot-automerge.yml#L55
[hypatia] workflow .github/workflows/dependabot-automerge.yml:55 gates on `github.actor == 'dependabot[bot]'` — `github.actor` is the run-triggering user, which an attacker controls on `pull_request_target` from a fork
|
|
Hypatia neurosymbolic scan:
zig-tests.yml#L1
[hypatia] Job `check-todos` in zig-tests.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
test-suite.yml#L1
[hypatia] Job `test-zig-core` in test-suite.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
test-suite.yml#L1
[hypatia] Job `test-lean` in test-suite.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
test-suite.yml#L1
[hypatia] Job `test-forth` in test-suite.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
test-suite.yml#L1
[hypatia] Job `test-ffi` in test-suite.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
labels.yml#L1
[hypatia] Job `sync` in labels.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
label-triage.yml#L1
[hypatia] Job `triage` in label-triage.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
ci.yml#L1
[hypatia] Job `test-forth` in ci.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
ci.yml#L1
[hypatia] Job `test-ffi` in ci.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
ci.yml#L1
[hypatia] Job `build-zig` in ci.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Patch Bridge CVE triage
panic-attack binary not available — skipping Patch Bridge
|
|
Patch Bridge CVE triage
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
|
panic-attack assail
panic-attack binary not available — skipping assail
|
|
panic-attack assail
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
|
Hypatia neurosymbolic scan
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
|
Deposit findings for gitbot-fleet
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
bridge-report
|
218 Bytes |
sha256:50308b1b925b76e77c28d7ac8ce268d618d07a7791dc1c83859156e093fd2434
|
|
|
hypatia-findings
|
3.19 KB |
sha256:0917306c91decec4c46be7f69b838ea6304ecdcfc859547ac8ec77b5cf1bcd2d
|
|
|
panic-attack-findings
|
171 Bytes |
sha256:149054896b482f2215ff002441888b256919b54c5bacf48ffb9bd9edc4529526
|
|
|
unified-findings
|
3.46 KB |
sha256:89f7b26513d096c3f497ca986acb10b99c702357c969e460297c09e3d754472c
|
|