Skip to content

Commit 433ca38

Browse files
author
Hypatia Finding Submitter
committed
findings: hyperpolymath/hypatia @ 2026-05-24
Submitted: 43 findings Commit: 128e0fa59714487ffc8348e9fdfe1ce2c8066880 Scanner: hypatia-v2 Automated submission from GitHub Actions.
1 parent 65a8c38 commit 433ca38

2 files changed

Lines changed: 355 additions & 1 deletion

File tree

‎shared-context/findings/hyperpolymath-hypatia/20260524-200707.json‎

Lines changed: 354 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,354 @@
1+
{
2+
"findings": [
3+
{
4+
"reason": "Js.Dict deprecated -- use Dict (2 occurrences)",
5+
"type": "deprecated_api",
6+
"file": "/home/runner/work/hypatia/hypatia/test/soundness/fixtures/code_safety/getexn_on_external.res",
7+
"action": "module_replace",
8+
"rule_module": "migration_rules",
9+
"severity": "high"
10+
},
11+
{
12+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
13+
"type": "CSA001",
14+
"file": ".github/workflows/dependabot-automerge.yml",
15+
"action": "update",
16+
"rule_module": "code_scanning_alerts",
17+
"severity": "high"
18+
},
19+
{
20+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
21+
"type": "CSA001",
22+
"file": ".github/workflows/hypatia-scan.yml",
23+
"action": "update",
24+
"rule_module": "code_scanning_alerts",
25+
"severity": "high"
26+
},
27+
{
28+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
29+
"type": "CSA001",
30+
"file": "test/soundness/fixtures/code_safety/getexn_on_external.res",
31+
"action": "update",
32+
"rule_module": "code_scanning_alerts",
33+
"severity": "high"
34+
},
35+
{
36+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
37+
"type": "CSA001",
38+
"file": ".github/workflows/dependabot-automerge.yml",
39+
"action": "update",
40+
"rule_module": "code_scanning_alerts",
41+
"severity": "high"
42+
},
43+
{
44+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
45+
"type": "CSA001",
46+
"file": "hyperpolymath/hypatia",
47+
"action": "review",
48+
"rule_module": "code_scanning_alerts",
49+
"severity": "medium"
50+
},
51+
{
52+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
53+
"type": "CSA001",
54+
"file": "adapters/src/main.rs",
55+
"action": "review",
56+
"rule_module": "code_scanning_alerts",
57+
"severity": "medium"
58+
},
59+
{
60+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
61+
"type": "CSA001",
62+
"file": "test/soundness/fixtures/code_safety/shell_download_then_run.sh",
63+
"action": "review",
64+
"rule_module": "code_scanning_alerts",
65+
"severity": "medium"
66+
},
67+
{
68+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
69+
"type": "CSA001",
70+
"file": ".github/workflows/dependabot-automerge.yml",
71+
"action": "update",
72+
"rule_module": "code_scanning_alerts",
73+
"severity": "high"
74+
},
75+
{
76+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
77+
"type": "CSA001",
78+
"file": ".",
79+
"action": "review",
80+
"rule_module": "code_scanning_alerts",
81+
"severity": "medium"
82+
},
83+
{
84+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
85+
"type": "CSA001",
86+
"file": ".github/workflows/hypatia-scan.yml",
87+
"action": "update",
88+
"rule_module": "code_scanning_alerts",
89+
"severity": "high"
90+
},
91+
{
92+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
93+
"type": "CSA001",
94+
"file": "test/soundness/fixtures/code_safety/getexn_on_external.res",
95+
"action": "update",
96+
"rule_module": "code_scanning_alerts",
97+
"severity": "high"
98+
},
99+
{
100+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
101+
"type": "CSA001",
102+
"file": ".github/workflows/dependabot-automerge.yml",
103+
"action": "update",
104+
"rule_module": "code_scanning_alerts",
105+
"severity": "high"
106+
},
107+
{
108+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
109+
"type": "CSA001",
110+
"file": "hyperpolymath/hypatia",
111+
"action": "review",
112+
"rule_module": "code_scanning_alerts",
113+
"severity": "medium"
114+
},
115+
{
116+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
117+
"type": "CSA001",
118+
"file": "adapters/src/main.rs",
119+
"action": "review",
120+
"rule_module": "code_scanning_alerts",
121+
"severity": "medium"
122+
},
123+
{
124+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
125+
"type": "CSA001",
126+
"file": ".github/workflows/docs.yml",
127+
"action": "review",
128+
"rule_module": "code_scanning_alerts",
129+
"severity": "medium"
130+
},
131+
{
132+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
133+
"type": "CSA001",
134+
"file": ".github/workflows/dependabot-auto-merge.yml",
135+
"action": "review",
136+
"rule_module": "code_scanning_alerts",
137+
"severity": "medium"
138+
},
139+
{
140+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
141+
"type": "CSA001",
142+
"file": "cli/src/commands/batch.rs",
143+
"action": "review",
144+
"rule_module": "code_scanning_alerts",
145+
"severity": "medium"
146+
},
147+
{
148+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
149+
"type": "CSA001",
150+
"file": "no file associated with this alert",
151+
"action": "review",
152+
"rule_module": "code_scanning_alerts",
153+
"severity": "medium"
154+
},
155+
{
156+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
157+
"type": "CSA001",
158+
"file": "test/soundness/fixtures/code_safety/shell_download_then_run.sh",
159+
"action": "review",
160+
"rule_module": "code_scanning_alerts",
161+
"severity": "medium"
162+
},
163+
{
164+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
165+
"type": "CSA001",
166+
"file": ".github/workflows/dependabot-automerge.yml",
167+
"action": "update",
168+
"rule_module": "code_scanning_alerts",
169+
"severity": "high"
170+
},
171+
{
172+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
173+
"type": "CSA001",
174+
"file": ".github/workflows/hypatia-scan.yml",
175+
"action": "update",
176+
"rule_module": "code_scanning_alerts",
177+
"severity": "high"
178+
},
179+
{
180+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
181+
"type": "CSA001",
182+
"file": "test/soundness/fixtures/code_safety/getexn_on_external.res",
183+
"action": "update",
184+
"rule_module": "code_scanning_alerts",
185+
"severity": "high"
186+
},
187+
{
188+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
189+
"type": "CSA001",
190+
"file": ".github/workflows/dependabot-automerge.yml",
191+
"action": "update",
192+
"rule_module": "code_scanning_alerts",
193+
"severity": "high"
194+
},
195+
{
196+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
197+
"type": "CSA001",
198+
"file": "hyperpolymath/hypatia",
199+
"action": "review",
200+
"rule_module": "code_scanning_alerts",
201+
"severity": "medium"
202+
},
203+
{
204+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
205+
"type": "CSA001",
206+
"file": "adapters/src/main.rs",
207+
"action": "review",
208+
"rule_module": "code_scanning_alerts",
209+
"severity": "medium"
210+
},
211+
{
212+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
213+
"type": "CSA001",
214+
"file": ".github/workflows/docs.yml",
215+
"action": "review",
216+
"rule_module": "code_scanning_alerts",
217+
"severity": "medium"
218+
},
219+
{
220+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
221+
"type": "CSA001",
222+
"file": ".github/workflows/dependabot-auto-merge.yml",
223+
"action": "review",
224+
"rule_module": "code_scanning_alerts",
225+
"severity": "medium"
226+
},
227+
{
228+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
229+
"type": "CSA001",
230+
"file": "cli/src/commands/batch.rs",
231+
"action": "review",
232+
"rule_module": "code_scanning_alerts",
233+
"severity": "medium"
234+
},
235+
{
236+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
237+
"type": "CSA001",
238+
"file": "no file associated with this alert",
239+
"action": "review",
240+
"rule_module": "code_scanning_alerts",
241+
"severity": "medium"
242+
},
243+
{
244+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
245+
"type": "CSA001",
246+
"file": ".github/workflows/release.yml",
247+
"action": "review",
248+
"rule_module": "code_scanning_alerts",
249+
"severity": "medium"
250+
},
251+
{
252+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
253+
"type": "CSA001",
254+
"file": "no file associated with this alert",
255+
"action": "review",
256+
"rule_module": "code_scanning_alerts",
257+
"severity": "medium"
258+
},
259+
{
260+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
261+
"type": "CSA001",
262+
"file": "test/soundness/fixtures/code_safety/shell_download_then_run.sh",
263+
"action": "review",
264+
"rule_module": "code_scanning_alerts",
265+
"severity": "medium"
266+
},
267+
{
268+
"reason": "Code scanning (Scorecard): PinnedDependenciesID -- Pinned-Dependencies -- 0 day(s) old",
269+
"type": "CSA001",
270+
"file": "test/soundness/fixtures/code_safety/shell_download_then_run.sh",
271+
"action": "review",
272+
"rule_module": "code_scanning_alerts",
273+
"severity": "medium"
274+
},
275+
{
276+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA003 -- Hypatia code_scanning_alerts: CSA003 -- 0 day(s) old",
277+
"type": "CSA001",
278+
"file": ".github/workflows/dependabot-automerge.yml",
279+
"action": "update",
280+
"rule_module": "code_scanning_alerts",
281+
"severity": "high"
282+
},
283+
{
284+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA002 -- Hypatia code_scanning_alerts: CSA002 -- 0 day(s) old",
285+
"type": "CSA001",
286+
"file": "hyperpolymath/hypatia",
287+
"action": "review",
288+
"rule_module": "code_scanning_alerts",
289+
"severity": "medium"
290+
},
291+
{
292+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
293+
"type": "CSA001",
294+
"file": ".github/workflows/dependabot-automerge.yml",
295+
"action": "update",
296+
"rule_module": "code_scanning_alerts",
297+
"severity": "high"
298+
},
299+
{
300+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
301+
"type": "CSA001",
302+
"file": ".github/workflows/hypatia-scan.yml",
303+
"action": "update",
304+
"rule_module": "code_scanning_alerts",
305+
"severity": "high"
306+
},
307+
{
308+
"reason": "Code scanning (Hypatia): hypatia/migration_rules/deprecated_api -- Hypatia migration_rules: deprecated_api -- 0 day(s) old",
309+
"type": "CSA001",
310+
"file": "test/soundness/fixtures/code_safety/getexn_on_external.res",
311+
"action": "update",
312+
"rule_module": "code_scanning_alerts",
313+
"severity": "high"
314+
},
315+
{
316+
"reason": "Code scanning (Scorecard): TokenPermissionsID -- Token-Permissions -- 6 day(s) old",
317+
"type": "CSA001",
318+
"file": ".github/workflows/hypatia-scan.yml",
319+
"action": "update",
320+
"rule_module": "code_scanning_alerts",
321+
"severity": "high"
322+
},
323+
{
324+
"reason": "Code scanning (Scorecard): TokenPermissionsID -- Token-Permissions -- 32 day(s) old [STALE]",
325+
"type": "CSA001",
326+
"file": ".github/workflows/dependabot-automerge.yml",
327+
"action": "escalate",
328+
"rule_module": "code_scanning_alerts",
329+
"severity": "high"
330+
},
331+
{
332+
"reason": "62 total open code-scanning alert(s) -- security hygiene review",
333+
"type": "CSA002",
334+
"file": "hyperpolymath/hypatia",
335+
"action": "review",
336+
"rule_module": "code_scanning_alerts",
337+
"severity": "medium"
338+
},
339+
{
340+
"reason": "Code-scanning alert TokenPermissionsID (high) at .github/workflows/dependabot-automerge.yml is 32 days old (threshold: 7 days) -- overdue for remediation",
341+
"type": "CSA003",
342+
"file": ".github/workflows/dependabot-automerge.yml",
343+
"action": "escalate",
344+
"rule_module": "code_scanning_alerts",
345+
"severity": "high"
346+
}
347+
],
348+
"submission_metadata": {
349+
"repo": "hyperpolymath/hypatia",
350+
"commit": "128e0fa59714487ffc8348e9fdfe1ce2c8066880",
351+
"submitted_at": "2026-05-24T20:07:09Z",
352+
"scanner_version": "hypatia-v2"
353+
}
354+
}

‎shared-context/findings/hyperpolymath-hypatia/latest.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
20260524-200356.json
1+
20260524-200707.json

0 commit comments

Comments
 (0)