Repository navigation
chore(deps): bump the actions group with 2 updates (#55) #127
hyperpolymathstatic-analysis-gate.yml
on: push
panic-attack assail
6s
Hypatia neurosymbolic scan
37s
Patch Bridge CVE triage
5s
Deposit findings for gitbot-fleet
7s
Annotations
11 errors, 10 warnings, and 6 notices
|
Hypatia neurosymbolic scan
Process completed with exit code 1.
|
|
Hypatia neurosymbolic scan
Hypatia found 1 critical security issue(s) — blocking merge
|
|
Hypatia neurosymbolic scan:
ffi/zig/src/bridge.zig#L1
[hypatia] Zig @ptrCast performs unchecked pointer type conversion (3 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
core-zig/src/bridge.zig#L1
[hypatia] Zig @aligncast performs unchecked alignment cast (12 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
core-zig/src/bridge.zig#L1
[hypatia] Zig @ptrCast performs unchecked pointer type conversion (14 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
beam/native/src/beam.zig#L1
[hypatia] Zig @aligncast performs unchecked alignment cast (1 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
beam/native/src/beam.zig#L1
[hypatia] Zig @ptrCast performs unchecked pointer type conversion (1 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
beam/native/src/lith_nif.zig#L1
[hypatia] Zig @aligncast performs unchecked alignment cast (7 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
beam/native/src/lith_nif.zig#L1
[hypatia] Zig @ptrCast performs unchecked pointer type conversion (9 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
beam/native_rust/src/lib.rs#L1
[hypatia] from_raw constructs types from raw pointers without safety checks (10 occurrences, CWE-676)
|
|
Hypatia neurosymbolic scan:
.github/workflows/dependabot-automerge.yml#L55
[hypatia] workflow .github/workflows/dependabot-automerge.yml:55 gates on `github.actor == 'dependabot[bot]'` — `github.actor` is the run-triggering user, which an attacker controls on `pull_request_target` from a fork
|
|
Hypatia neurosymbolic scan:
zig-tests.yml#L1
[hypatia] Job `check-todos` in zig-tests.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
test-suite.yml#L1
[hypatia] Job `test-zig-core` in test-suite.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
test-suite.yml#L1
[hypatia] Job `test-lean` in test-suite.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
test-suite.yml#L1
[hypatia] Job `test-forth` in test-suite.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
test-suite.yml#L1
[hypatia] Job `test-ffi` in test-suite.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
labels.yml#L1
[hypatia] Job `sync` in labels.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
label-triage.yml#L1
[hypatia] Job `triage` in label-triage.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
ci.yml#L1
[hypatia] Job `test-forth` in ci.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
ci.yml#L1
[hypatia] Job `test-ffi` in ci.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
ci.yml#L1
[hypatia] Job `build-zig` in ci.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Patch Bridge CVE triage
panic-attack binary not available — skipping Patch Bridge
|
|
Patch Bridge CVE triage
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
|
panic-attack assail
panic-attack binary not available — skipping assail
|
|
panic-attack assail
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
|
Hypatia neurosymbolic scan
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
|
Deposit findings for gitbot-fleet
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
bridge-report
|
218 Bytes |
sha256:813bfe7d6346c2aca84849af34a45989a5c18c05dcd20ba03f9b21adbe42d7ea
|
|
|
hypatia-findings
|
3.19 KB |
sha256:64c9188a24da44e0c7af172a5586525b2309e501d9bb9318000e4ba295584eaf
|
|
|
panic-attack-findings
|
171 Bytes |
sha256:66c71a4f7dacf181f0d92381f0470bf62dfdb7e307ad7e6b1dfd1839293506ae
|
|
|
unified-findings
|
3.46 KB |
sha256:a54b63cc17a5548bb751e9e0c7379ccf0b7323ce8b746e581b0f87bd2d748152
|
|