Skip to content
Hypatia Security Scan

fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump #147

Sign in to view logs

fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump

fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump #147

Triggered via pull request July 21, 2026 20:21
@hyperpolymathhyperpolymath
opened #37
fix/governance-gate-sweep
Status Success
Total duration 10m 23s
Artifacts 1

hypatia-scan.yml

on: pull_request
Hypatia Neurosymbolic Analysis
47s
Hypatia Neurosymbolic Analysis
Fit to window
Zoom out
Zoom in

Annotations

3 warnings
Hypatia Neurosymbolic Analysis
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Hypatia Neurosymbolic Analysis
Hypatia found critical security issue(s) — advisory.
Hypatia Neurosymbolic Analysis
git push to hyperpolymath/gitbot-fleet failed — findings not persisted. Set FLEET_PUSH_TOKEN with contents:write on hyperpolymath/gitbot-fleet to enable delivery.

Artifacts

Produced during runtime
Name Size Digest
hypatia-findings
1.58 KB
sha256:ff63855b23a3bbd4687f4e86ac25e9d8ba4e7344620c9216a32ed74ef95e14b8