Skip to content

Commit 3f39507

Browse files
author
Hypatia Dispatch Intake
committed
dispatch-intake: hypatia-security-alert from hyperpolymath/git-reticulator
1 parent e9f0dff commit 3f39507

2 files changed

Lines changed: 293 additions & 0 deletions

File tree

‎shared-context/dispatch/events.jsonl‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -398,3 +398,11 @@
398398
"findings_count": "2",
399399
"event_file": "shared-context/dispatch/events/20260524-064800-26354377579-hypatia-security-alert.json"
400400
}
401+
{
402+
"received_at": "2026-05-24T06:48:04Z",
403+
"event_type": "hypatia-security-alert",
404+
"source_repo": "hyperpolymath/git-reticulator",
405+
"source_sha": "unknown",
406+
"findings_count": "16",
407+
"event_file": "shared-context/dispatch/events/20260524-064804-26354378924-hypatia-security-alert.json"
408+
}

‎shared-context/dispatch/events/20260524-064804-26354378924-hypatia-security-alert.json‎

Lines changed: 285 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,285 @@
1+
{
2+
"action": "hypatia-security-alert",
3+
"branch": "main",
4+
"client_payload": {
5+
"findings": [
6+
{
7+
"ecosystem": "RUST",
8+
"ghsa": "GHSA-g98v-hv3f-hcfr",
9+
"package": "atty",
10+
"patched": null,
11+
"range": "<= 0.2.14",
12+
"severity": "LOW"
13+
},
14+
{
15+
"ecosystem": "RUST",
16+
"ghsa": "GHSA-cq8v-f236-94qc",
17+
"package": "rand",
18+
"patched": "0.10.1",
19+
"range": "= 0.10.0",
20+
"severity": "LOW"
21+
},
22+
{
23+
"ecosystem": "RUST",
24+
"ghsa": "GHSA-xgp8-3hg3-c2mh",
25+
"package": "rustls-webpki",
26+
"patched": "0.103.12",
27+
"range": ">= 0.101.0, < 0.103.12",
28+
"severity": "LOW"
29+
},
30+
{
31+
"ecosystem": "RUST",
32+
"ghsa": "GHSA-965h-392x-2mh5",
33+
"package": "rustls-webpki",
34+
"patched": "0.103.12",
35+
"range": ">= 0.101.0, < 0.103.12",
36+
"severity": "LOW"
37+
},
38+
{
39+
"ecosystem": "RUST",
40+
"ghsa": "GHSA-xhj4-vrgc-hr34",
41+
"package": "actix-http",
42+
"patched": "3.12.1",
43+
"range": "< 3.12.1",
44+
"severity": "MODERATE"
45+
},
46+
{
47+
"ecosystem": "RUST",
48+
"ghsa": "GHSA-cq8v-f236-94qc",
49+
"package": "rand",
50+
"patched": "0.9.3",
51+
"range": ">= 0.9.0, < 0.9.3",
52+
"severity": "LOW"
53+
},
54+
{
55+
"ecosystem": "RUST",
56+
"ghsa": "GHSA-ghm9-cr32-g9qj",
57+
"package": "openssl",
58+
"patched": "0.10.78",
59+
"range": ">= 0.10.39, < 0.10.78",
60+
"severity": "HIGH"
61+
},
62+
{
63+
"ecosystem": "RUST",
64+
"ghsa": "GHSA-hppc-g8h3-xhp3",
65+
"package": "openssl",
66+
"patched": "0.10.78",
67+
"range": ">= 0.9.24, < 0.10.78",
68+
"severity": "HIGH"
69+
},
70+
{
71+
"ecosystem": "RUST",
72+
"ghsa": "GHSA-8c75-8mhr-p7r9",
73+
"package": "openssl",
74+
"patched": "0.10.78",
75+
"range": ">= 0.10.24, < 0.10.78",
76+
"severity": "HIGH"
77+
},
78+
{
79+
"ecosystem": "RUST",
80+
"ghsa": "GHSA-xmgf-hq76-4vx2",
81+
"package": "openssl",
82+
"patched": "0.10.78",
83+
"range": ">= 0.9.0, < 0.10.78",
84+
"severity": "LOW"
85+
},
86+
{
87+
"ecosystem": "RUST",
88+
"ghsa": "GHSA-pqf5-4pqq-29f5",
89+
"package": "openssl",
90+
"patched": "0.10.78",
91+
"range": ">= 0.9.27, < 0.10.78",
92+
"severity": "HIGH"
93+
},
94+
{
95+
"ecosystem": "RUST",
96+
"ghsa": "GHSA-cq8v-f236-94qc",
97+
"package": "rand",
98+
"patched": "0.8.6",
99+
"range": ">= 0.7.0, < 0.8.6",
100+
"severity": "LOW"
101+
},
102+
{
103+
"ecosystem": "RUST",
104+
"ghsa": "GHSA-82j2-j2ch-gfr8",
105+
"package": "rustls-webpki",
106+
"patched": "0.103.13",
107+
"range": "< 0.103.13",
108+
"severity": "HIGH"
109+
},
110+
{
111+
"ecosystem": "RUST",
112+
"ghsa": "GHSA-xp3w-r5p5-63rr",
113+
"package": "openssl",
114+
"patched": "0.10.79",
115+
"range": ">= 0.9.7, < 0.10.79",
116+
"severity": "HIGH"
117+
},
118+
{
119+
"ecosystem": "RUST",
120+
"ghsa": "GHSA-xv59-967r-8726",
121+
"package": "openssl",
122+
"patched": "0.10.79",
123+
"range": ">= 0.10.0, < 0.10.79",
124+
"severity": "MODERATE"
125+
},
126+
{
127+
"ecosystem": "RUST",
128+
"ghsa": "GHSA-phqj-4mhp-q6mq",
129+
"package": "openssl",
130+
"patched": "0.10.80",
131+
"range": ">= 0.10.50, < 0.10.80",
132+
"severity": "MODERATE"
133+
}
134+
],
135+
"findings_count": 16,
136+
"run_url": "https://github.com/hyperpolymath/hypatia/actions/runs/26354368583",
137+
"scan_kind": "fleet_dependabot_sweep",
138+
"source": "hypatia-remediation-sweep",
139+
"source_repo": "hyperpolymath/git-reticulator",
140+
"top_severity": "HIGH"
141+
},
142+
"repository": {
143+
"allow_forking": true,
144+
"archive_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/{archive_format}{/ref}",
145+
"archived": false,
146+
"assignees_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/assignees{/user}",
147+
"blobs_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/git/blobs{/sha}",
148+
"branches_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/branches{/branch}",
149+
"clone_url": "https://github.com/hyperpolymath/gitbot-fleet.git",
150+
"collaborators_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/collaborators{/collaborator}",
151+
"comments_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/comments{/number}",
152+
"commits_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/commits{/sha}",
153+
"compare_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/compare/{base}...{head}",
154+
"contents_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/contents/{+path}",
155+
"contributors_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/contributors",
156+
"created_at": "2026-01-04T14:56:49Z",
157+
"default_branch": "main",
158+
"deployments_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/deployments",
159+
"description": "Bot fleet for repository quality enforcement",
160+
"disabled": false,
161+
"downloads_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/downloads",
162+
"events_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/events",
163+
"fork": false,
164+
"forks": 0,
165+
"forks_count": 0,
166+
"forks_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/forks",
167+
"full_name": "hyperpolymath/gitbot-fleet",
168+
"git_commits_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/git/commits{/sha}",
169+
"git_refs_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/git/refs{/sha}",
170+
"git_tags_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/git/tags{/sha}",
171+
"git_url": "git://github.com/hyperpolymath/gitbot-fleet.git",
172+
"has_discussions": true,
173+
"has_downloads": true,
174+
"has_issues": true,
175+
"has_pages": false,
176+
"has_projects": true,
177+
"has_pull_requests": true,
178+
"has_wiki": true,
179+
"homepage": null,
180+
"hooks_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/hooks",
181+
"html_url": "https://github.com/hyperpolymath/gitbot-fleet",
182+
"id": 1127765949,
183+
"is_template": false,
184+
"issue_comment_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/issues/comments{/number}",
185+
"issue_events_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/issues/events{/number}",
186+
"issues_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/issues{/number}",
187+
"keys_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/keys{/key_id}",
188+
"labels_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/labels{/name}",
189+
"language": "Rust",
190+
"languages_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/languages",
191+
"license": {
192+
"key": "other",
193+
"name": "Other",
194+
"node_id": "MDc6TGljZW5zZTA=",
195+
"spdx_id": "NOASSERTION",
196+
"url": null
197+
},
198+
"merges_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/merges",
199+
"milestones_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/milestones{/number}",
200+
"mirror_url": null,
201+
"name": "gitbot-fleet",
202+
"node_id": "R_kgDOQzhXvQ",
203+
"notifications_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/notifications{?since,all,participating}",
204+
"open_issues": 1,
205+
"open_issues_count": 1,
206+
"owner": {
207+
"avatar_url": "https://avatars.githubusercontent.com/u/6759885?v=4",
208+
"events_url": "https://api.github.com/users/hyperpolymath/events{/privacy}",
209+
"followers_url": "https://api.github.com/users/hyperpolymath/followers",
210+
"following_url": "https://api.github.com/users/hyperpolymath/following{/other_user}",
211+
"gists_url": "https://api.github.com/users/hyperpolymath/gists{/gist_id}",
212+
"gravatar_id": "",
213+
"html_url": "https://github.com/hyperpolymath",
214+
"id": 6759885,
215+
"login": "hyperpolymath",
216+
"node_id": "MDQ6VXNlcjY3NTk4ODU=",
217+
"organizations_url": "https://api.github.com/users/hyperpolymath/orgs",
218+
"received_events_url": "https://api.github.com/users/hyperpolymath/received_events",
219+
"repos_url": "https://api.github.com/users/hyperpolymath/repos",
220+
"site_admin": false,
221+
"starred_url": "https://api.github.com/users/hyperpolymath/starred{/owner}{/repo}",
222+
"subscriptions_url": "https://api.github.com/users/hyperpolymath/subscriptions",
223+
"type": "User",
224+
"url": "https://api.github.com/users/hyperpolymath",
225+
"user_view_type": "public"
226+
},
227+
"private": false,
228+
"pull_request_creation_policy": "all",
229+
"pulls_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/pulls{/number}",
230+
"pushed_at": "2026-05-24T05:18:22Z",
231+
"releases_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/releases{/id}",
232+
"size": 3861,
233+
"ssh_url": "git@github.com:hyperpolymath/gitbot-fleet.git",
234+
"stargazers_count": 2,
235+
"stargazers_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/stargazers",
236+
"statuses_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/statuses/{sha}",
237+
"subscribers_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/subscribers",
238+
"subscription_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/subscription",
239+
"svn_url": "https://github.com/hyperpolymath/gitbot-fleet",
240+
"tags_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/tags",
241+
"teams_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/teams",
242+
"topics": [
243+
"automation",
244+
"bots",
245+
"ci-cd",
246+
"collaboration",
247+
"devops",
248+
"git",
249+
"git-and-workflow",
250+
"hyperpolymath",
251+
"palimpsest",
252+
"quality-enforcement",
253+
"starred",
254+
"workflow"
255+
],
256+
"trees_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/git/trees{/sha}",
257+
"updated_at": "2026-05-24T05:18:25Z",
258+
"url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet",
259+
"visibility": "public",
260+
"watchers": 2,
261+
"watchers_count": 2,
262+
"web_commit_signoff_required": true
263+
},
264+
"sender": {
265+
"avatar_url": "https://avatars.githubusercontent.com/u/6759885?v=4",
266+
"events_url": "https://api.github.com/users/hyperpolymath/events{/privacy}",
267+
"followers_url": "https://api.github.com/users/hyperpolymath/followers",
268+
"following_url": "https://api.github.com/users/hyperpolymath/following{/other_user}",
269+
"gists_url": "https://api.github.com/users/hyperpolymath/gists{/gist_id}",
270+
"gravatar_id": "",
271+
"html_url": "https://github.com/hyperpolymath",
272+
"id": 6759885,
273+
"login": "hyperpolymath",
274+
"node_id": "MDQ6VXNlcjY3NTk4ODU=",
275+
"organizations_url": "https://api.github.com/users/hyperpolymath/orgs",
276+
"received_events_url": "https://api.github.com/users/hyperpolymath/received_events",
277+
"repos_url": "https://api.github.com/users/hyperpolymath/repos",
278+
"site_admin": false,
279+
"starred_url": "https://api.github.com/users/hyperpolymath/starred{/owner}{/repo}",
280+
"subscriptions_url": "https://api.github.com/users/hyperpolymath/subscriptions",
281+
"type": "User",
282+
"url": "https://api.github.com/users/hyperpolymath",
283+
"user_view_type": "public"
284+
}
285+
}

0 commit comments

Comments
 (0)