[hypatia] Zig @ptrCast performs unchecked pointer type conversion (3 occurrences, CWE-704, line 173, 226, 750)

[hypatia] Zig @aligncast performs unchecked alignment cast (1 occurrences, CWE-704, line 139)

[hypatia] Zig @ptrCast performs unchecked pointer type conversion (1 occurrences, CWE-704, line 139)

[hypatia] Zig @aligncast performs unchecked alignment cast (7 occurrences, CWE-704, line 293, 319, 409, 449, 488, 613, 686)

[hypatia] Zig @ptrCast performs unchecked pointer type conversion (8 occurrences, CWE-704, line 293, 319, 409, 449, 488, 613, 686, 815)

[hypatia] Zig @aligncast performs unchecked alignment cast (12 occurrences, CWE-704, line 227, 273, 323, 398, 435, 517, 576, 607, 714, 782, 830, 877)

[hypatia] Zig @ptrCast performs unchecked pointer type conversion (14 occurrences, CWE-704, line 213, 227, 273, 308, 323, 398, 435, 517, 576, 607, 714, 782, 830, 877)

[hypatia] from_raw constructs types from raw pointers without safety checks (10 occurrences, CWE-676, line 74, 239, 341, 366, 413, 450, 476, 518, 563, 606)

[hypatia] Job `test-forth` in test-suite.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).

[hypatia] Job `test-ffi` in test-suite.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).

[hypatia] Job `sync` in labels.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).

[hypatia] Job `triage` in label-triage.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).

[hypatia] Job `test-forth` in ci.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).

[hypatia] Job `test-ffi` in ci.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).

[hypatia] Job `build-zig` in ci.yml has no `timeout-minutes:` declaration. Default is 6 hours — a stuck codeload fetch or runner hang can burn budget. Add `timeout-minutes: 10` (or proportional).

[hypatia] Action `SonarSource/sonarqube-scan-action@v8.3.0` in sonarqube.yml is not pinned to a commit SHA — `v8.3.0` is a tag, and a tag can be moved to a different commit. Pin it to a full 40-character commit SHA, with the version in a trailing comment.

[hypatia] Action `trufflesecurity/trufflehog@v3.97.9` in quality.yml is not pinned to a commit SHA — `v3.97.9` is a tag, and a tag can be moved to a different commit. Pin it to a full 40-character commit SHA, with the version in a trailing comment.

[hypatia] Action `haskell-actions/setup@v2.12.1` in pages.yml is not pinned to a commit SHA — `v2.12.1` is a tag, and a tag can be moved to a different commit. Pin it to a full 40-character commit SHA, with the version in a trailing comment.

panic-attack binary not available — skipping assail

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

panic-attack binary not available — skipping Patch Bridge

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"