ci: re-pin codeql-action to the true v4.38.0 commit #128
hyperpolymathstatic-analysis-gate.yml
on: pull_request
panic-attack assail
6s
Hypatia neurosymbolic scan
37s
Patch Bridge CVE triage
4s
Deposit findings for gitbot-fleet
14s
Annotations
11 errors, 10 warnings, and 6 notices
|
Hypatia neurosymbolic scan
Process completed with exit code 1.
|
|
Hypatia neurosymbolic scan
Hypatia found 1 critical security issue(s) — blocking merge
|
|
Hypatia neurosymbolic scan:
ffi/zig/src/bridge.zig#L1
[hypatia] Zig @ptrCast performs unchecked pointer type conversion (3 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
core-zig/src/bridge.zig#L1
[hypatia] Zig @aligncast performs unchecked alignment cast (12 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
core-zig/src/bridge.zig#L1
[hypatia] Zig @ptrCast performs unchecked pointer type conversion (14 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
beam/native/src/beam.zig#L1
[hypatia] Zig @aligncast performs unchecked alignment cast (1 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
beam/native/src/beam.zig#L1
[hypatia] Zig @ptrCast performs unchecked pointer type conversion (1 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
beam/native/src/lith_nif.zig#L1
[hypatia] Zig @aligncast performs unchecked alignment cast (7 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
beam/native/src/lith_nif.zig#L1
[hypatia] Zig @ptrCast performs unchecked pointer type conversion (9 occurrences, CWE-704)
|
|
Hypatia neurosymbolic scan:
beam/native_rust/src/lib.rs#L1
[hypatia] from_raw constructs types from raw pointers without safety checks (10 occurrences, CWE-676)
|
|
Hypatia neurosymbolic scan:
.github/workflows/dependabot-automerge.yml#L55
[hypatia] workflow .github/workflows/dependabot-automerge.yml:55 gates on `github.actor == 'dependabot[bot]'` — `github.actor` is the run-triggering user, which an attacker controls on `pull_request_target` from a fork
|
|
Hypatia neurosymbolic scan:
zig-tests.yml#L1
[hypatia] Job `check-todos` in zig-tests.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
test-suite.yml#L1
[hypatia] Job `test-zig-core` in test-suite.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
test-suite.yml#L1
[hypatia] Job `test-lean` in test-suite.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
test-suite.yml#L1
[hypatia] Job `test-forth` in test-suite.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
test-suite.yml#L1
[hypatia] Job `test-ffi` in test-suite.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
labels.yml#L1
[hypatia] Job `sync` in labels.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
label-triage.yml#L1
[hypatia] Job `triage` in label-triage.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
ci.yml#L1
[hypatia] Job `test-forth` in ci.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
ci.yml#L1
[hypatia] Job `test-ffi` in ci.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Hypatia neurosymbolic scan:
ci.yml#L1
[hypatia] Job `build-zig` in ci.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).
|
|
Patch Bridge CVE triage
panic-attack binary not available — skipping Patch Bridge
|
|
Patch Bridge CVE triage
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
|
panic-attack assail
panic-attack binary not available — skipping assail
|
|
panic-attack assail
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
|
Hypatia neurosymbolic scan
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
|
Deposit findings for gitbot-fleet
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
bridge-report
|
218 Bytes |
sha256:be7637505a9c4d2611f7b857e1dc835f3da8837bc933a154877e9b5d13c54a51
|
|
|
hypatia-findings
|
3.19 KB |
sha256:4801a785ddad66178e43c3e0270dd4b5d4804b5c9dcab1abb6df049c55df0d0c
|
|
|
panic-attack-findings
|
171 Bytes |
sha256:31481616abcf48e04e08e4025a224245d6ae0d649583f80a3cb13f3e14951abe
|
|
|
unified-findings
|
3.46 KB |
sha256:199eaff4da84a872e31a84f58b592808d56baee4fc65dd47d1ac5e186c64b548
|
|