Skip to content

fix(security): harden the exec/FS trust boundary in server_actions (#59) #178

fix(security): harden the exec/FS trust boundary in server_actions (#59)

fix(security): harden the exec/FS trust boundary in server_actions (#59) #178

Triggered via push July 2, 2026 15:38
Status Success
Total duration 53s
Artifacts 4
panic-attack assail
5s
panic-attack assail
Hypatia neurosymbolic scan
33s
Hypatia neurosymbolic scan
Patch Bridge CVE triage
7s
Patch Bridge CVE triage
Deposit findings for gitbot-fleet
9s
Deposit findings for gitbot-fleet
Fit to window
Zoom out
Zoom in

Annotations

4 warnings and 2 notices
panic-attack assail
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Patch Bridge CVE triage
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Hypatia neurosymbolic scan
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02, erlef/setup-beam@e6d7c94229049569db56a7ad5a540c051a010af9. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Deposit findings for gitbot-fleet
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
panic-attack assail
panic-attack binary not available — skipping assail
Patch Bridge CVE triage
panic-attack binary not available — skipping Patch Bridge

Artifacts

Produced during runtime
Name Size Digest
bridge-report
218 Bytes
sha256:f38152f097a8a1f470af0b66c82de759046986f2081e8420018bacb8ca3a4c79
hypatia-findings
161 Bytes
sha256:6b247e066fb5054a04ccaf87aadb7beb21f6e04997c59869a1a0607080e27406
panic-attack-findings
171 Bytes
sha256:251017a3e0c1d05ec6f187281a2a6d03b0e7f835c48db2e257942409d8eae2ba
unified-findings
405 Bytes
sha256:8d71d382dede508038aa7a619474b685e101432695554f6193d2156c7b5c5659