Skip to content
Hypatia Security Scan

fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump #137

Sign in to view logs

fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump

fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump #137

Triggered via pull request July 21, 2026 20:24
@hyperpolymathhyperpolymath
opened #47
fix/governance-gate-sweep
Status Success
Total duration 16m 51s
Artifacts 1

hypatia-scan.yml

on: pull_request
Hypatia Neurosymbolic Analysis
48s
Hypatia Neurosymbolic Analysis
Fit to window
Zoom out
Zoom in

Annotations

1 error and 3 warnings
Hypatia Neurosymbolic Analysis
Unhandled error: HttpError: Resource not accessible by integration
Hypatia Neurosymbolic Analysis
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Hypatia Neurosymbolic Analysis
Hypatia found critical security issue(s) — advisory.
Hypatia Neurosymbolic Analysis
git push to hyperpolymath/gitbot-fleet failed — findings not persisted. Set FLEET_PUSH_TOKEN with contents:write on hyperpolymath/gitbot-fleet to enable delivery.

Artifacts

Produced during runtime
Name Size Digest
hypatia-findings
1.69 KB
sha256:cea2ab3f4e769f68283a365b1adfdb13de802f8fe36b325e00cbbc2adec02955