Skip to content

Commit 33369fb

Browse files
hyperpolymathclaude
hyperpolymath
and
claude
committed
ci(baseline): seed/refresh .hypatia-baseline.json from new workflow's first scan
Captured from run 25856336153 on this branch. 13 critical+high entries accepted as pre-existing baseline. Net-new findings going forward will still fail the gate. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
1 parent f4de649 commit 33369fb

1 file changed

Lines changed: 80 additions & 0 deletions

File tree

‎.hypatia-baseline.json‎

Lines changed: 80 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,80 @@
1+
[
2+
{
3+
"severity": "critical",
4+
"rule_module": "security_errors",
5+
"type": "secret_detected",
6+
"file": ".envrc"
7+
},
8+
{
9+
"severity": "critical",
10+
"rule_module": "workflow_audit",
11+
"type": "actions_expression_injection",
12+
"file": "boj-build.yml"
13+
},
14+
{
15+
"severity": "critical",
16+
"rule_module": "workflow_audit",
17+
"type": "actions_expression_injection",
18+
"file": "hypatia-scan.yml"
19+
},
20+
{
21+
"severity": "critical",
22+
"rule_module": "workflow_audit",
23+
"type": "actions_expression_injection",
24+
"file": "mirror.yml"
25+
},
26+
{
27+
"severity": "critical",
28+
"rule_module": "workflow_audit",
29+
"type": "actions_expression_injection",
30+
"file": "quality.yml"
31+
},
32+
{
33+
"severity": "high",
34+
"rule_module": "cicd_rules",
35+
"type": "missing_requirement",
36+
"file": ".github/dependabot.yml"
37+
},
38+
{
39+
"severity": "high",
40+
"rule_module": "cicd_rules",
41+
"type": "missing_requirement",
42+
"file": ".github/workflows/scorecard.yml"
43+
},
44+
{
45+
"severity": "high",
46+
"rule_module": "cicd_rules",
47+
"type": "missing_requirement",
48+
"file": "permissions: read-all"
49+
},
50+
{
51+
"severity": "high",
52+
"rule_module": "git_state",
53+
"type": "GS005",
54+
"file": "."
55+
},
56+
{
57+
"severity": "high",
58+
"rule_module": "scorecard",
59+
"type": "TokenPermissions",
60+
"file": "/home/runner/work/cloudguard-cli/cloudguard-cli"
61+
},
62+
{
63+
"severity": "high",
64+
"rule_module": "workflow_audit",
65+
"type": "download_then_run",
66+
"file": "mirror.yml"
67+
},
68+
{
69+
"severity": "high",
70+
"rule_module": "workflow_audit",
71+
"type": "unsafe_curl_payload",
72+
"file": "boj-build.yml"
73+
},
74+
{
75+
"severity": "high",
76+
"rule_module": "workflow_audit",
77+
"type": "unsafe_curl_payload",
78+
"file": "hypatia-scan.yml"
79+
}
80+
]

0 commit comments

Comments
 (0)