Skip to content

Commit 51325c8

Browse files
author
Hypatia Dispatch Intake
committed
dispatch-intake: hypatia-security-alert from hyperpolymath/snifs
1 parent 322f7d5 commit 51325c8

2 files changed

Lines changed: 301 additions & 0 deletions

File tree

‎shared-context/dispatch/events.jsonl‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -382,3 +382,11 @@
382382
"findings_count": "2",
383383
"event_file": "shared-context/dispatch/events/20260524-043058-26351916499-hypatia-security-alert.json"
384384
}
385+
{
386+
"received_at": "2026-05-24T04:31:01Z",
387+
"event_type": "hypatia-security-alert",
388+
"source_repo": "hyperpolymath/snifs",
389+
"source_sha": "unknown",
390+
"findings_count": "17",
391+
"event_file": "shared-context/dispatch/events/20260524-043101-26351917025-hypatia-security-alert.json"
392+
}

‎shared-context/dispatch/events/20260524-043101-26351917025-hypatia-security-alert.json‎

Lines changed: 293 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,293 @@
1+
{
2+
"action": "hypatia-security-alert",
3+
"branch": "main",
4+
"client_payload": {
5+
"findings": [
6+
{
7+
"ecosystem": "RUST",
8+
"ghsa": "GHSA-vc8c-j3xm-xj73",
9+
"package": "wasmtime",
10+
"patched": "40.0.3",
11+
"range": ">= 37.0.0, < 40.0.3",
12+
"severity": "MODERATE"
13+
},
14+
{
15+
"ecosystem": "RUST",
16+
"ghsa": "GHSA-xjhv-v822-pf94",
17+
"package": "wasmtime",
18+
"patched": "40.0.4",
19+
"range": ">= 39.0.0, < 40.0.4",
20+
"severity": "MODERATE"
21+
},
22+
{
23+
"ecosystem": "RUST",
24+
"ghsa": "GHSA-852m-cvvp-9p4w",
25+
"package": "wasmtime",
26+
"patched": "40.0.4",
27+
"range": ">= 37.0.0, < 40.0.4",
28+
"severity": "MODERATE"
29+
},
30+
{
31+
"ecosystem": "RUST",
32+
"ghsa": "GHSA-243v-98vx-264h",
33+
"package": "wasmtime",
34+
"patched": "40.0.4",
35+
"range": ">= 37.0.0, < 40.0.4",
36+
"severity": "MODERATE"
37+
},
38+
{
39+
"ecosystem": "RUST",
40+
"ghsa": "GHSA-pwjx-qhcg-rvj4",
41+
"package": "rustls-webpki",
42+
"patched": "0.103.10",
43+
"range": ">= 0.102.0-alpha.0, < 0.103.10",
44+
"severity": "MODERATE"
45+
},
46+
{
47+
"ecosystem": "RUST",
48+
"ghsa": "GHSA-hx6p-xpx3-jvvv",
49+
"package": "wasmtime",
50+
"patched": "42.0.2",
51+
"range": ">= 37.0.0, < 42.0.2",
52+
"severity": "MODERATE"
53+
},
54+
{
55+
"ecosystem": "RUST",
56+
"ghsa": "GHSA-jxhv-7h78-9775",
57+
"package": "wasmtime",
58+
"patched": "42.0.2",
59+
"range": ">= 37.0.0, < 42.0.2",
60+
"severity": "MODERATE"
61+
},
62+
{
63+
"ecosystem": "RUST",
64+
"ghsa": "GHSA-m758-wjhj-p3jq",
65+
"package": "wasmtime",
66+
"patched": "42.0.2",
67+
"range": ">= 37.0.0, < 42.0.2",
68+
"severity": "MODERATE"
69+
},
70+
{
71+
"ecosystem": "RUST",
72+
"ghsa": "GHSA-qqfj-4vcm-26hv",
73+
"package": "wasmtime",
74+
"patched": "42.0.2",
75+
"range": ">= 37.0.0, < 42.0.2",
76+
"severity": "MODERATE"
77+
},
78+
{
79+
"ecosystem": "RUST",
80+
"ghsa": "GHSA-m9w2-8782-2946",
81+
"package": "wasmtime",
82+
"patched": "42.0.2",
83+
"range": ">= 37.0.0, < 42.0.2",
84+
"severity": "LOW"
85+
},
86+
{
87+
"ecosystem": "RUST",
88+
"ghsa": "GHSA-q49f-xg75-m9xw",
89+
"package": "wasmtime",
90+
"patched": "42.0.2",
91+
"range": ">= 37.0.0, < 42.0.2",
92+
"severity": "MODERATE"
93+
},
94+
{
95+
"ecosystem": "RUST",
96+
"ghsa": "GHSA-jhxm-h53p-jm7w",
97+
"package": "wasmtime",
98+
"patched": "42.0.2",
99+
"range": ">= 37.0.0, < 42.0.2",
100+
"severity": "CRITICAL"
101+
},
102+
{
103+
"ecosystem": "RUST",
104+
"ghsa": "GHSA-6wgr-89rj-399p",
105+
"package": "wasmtime",
106+
"patched": "42.0.2",
107+
"range": ">= 37.0.0, < 42.0.2",
108+
"severity": "LOW"
109+
},
110+
{
111+
"ecosystem": "RUST",
112+
"ghsa": "GHSA-394w-hwhg-8vgm",
113+
"package": "wasmtime",
114+
"patched": "42.0.2",
115+
"range": ">= 37.0.0, < 42.0.2",
116+
"severity": "MODERATE"
117+
},
118+
{
119+
"ecosystem": "RUST",
120+
"ghsa": "GHSA-xx5w-cvp6-jv83",
121+
"package": "wasmtime",
122+
"patched": "42.0.2",
123+
"range": ">= 37.0.0, < 42.0.2",
124+
"severity": "CRITICAL"
125+
},
126+
{
127+
"ecosystem": "RUST",
128+
"ghsa": "GHSA-965h-392x-2mh5",
129+
"package": "rustls-webpki",
130+
"patched": "0.103.12",
131+
"range": ">= 0.101.0, < 0.103.12",
132+
"severity": "LOW"
133+
},
134+
{
135+
"ecosystem": "RUST",
136+
"ghsa": "GHSA-p8xm-42r7-89xg",
137+
"package": "wasmtime",
138+
"patched": "43.0.2",
139+
"range": ">= 37.0.0, < 43.0.2",
140+
"severity": "MODERATE"
141+
}
142+
],
143+
"findings_count": 17,
144+
"run_url": "https://github.com/hyperpolymath/hypatia/actions/runs/26351906112",
145+
"scan_kind": "fleet_dependabot_sweep",
146+
"source": "hypatia-remediation-sweep",
147+
"source_repo": "hyperpolymath/snifs",
148+
"top_severity": "CRITICAL"
149+
},
150+
"repository": {
151+
"allow_forking": true,
152+
"archive_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/{archive_format}{/ref}",
153+
"archived": false,
154+
"assignees_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/assignees{/user}",
155+
"blobs_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/git/blobs{/sha}",
156+
"branches_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/branches{/branch}",
157+
"clone_url": "https://github.com/hyperpolymath/gitbot-fleet.git",
158+
"collaborators_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/collaborators{/collaborator}",
159+
"comments_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/comments{/number}",
160+
"commits_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/commits{/sha}",
161+
"compare_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/compare/{base}...{head}",
162+
"contents_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/contents/{+path}",
163+
"contributors_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/contributors",
164+
"created_at": "2026-01-04T14:56:49Z",
165+
"default_branch": "main",
166+
"deployments_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/deployments",
167+
"description": "Bot fleet for repository quality enforcement",
168+
"disabled": false,
169+
"downloads_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/downloads",
170+
"events_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/events",
171+
"fork": false,
172+
"forks": 0,
173+
"forks_count": 0,
174+
"forks_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/forks",
175+
"full_name": "hyperpolymath/gitbot-fleet",
176+
"git_commits_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/git/commits{/sha}",
177+
"git_refs_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/git/refs{/sha}",
178+
"git_tags_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/git/tags{/sha}",
179+
"git_url": "git://github.com/hyperpolymath/gitbot-fleet.git",
180+
"has_discussions": true,
181+
"has_downloads": true,
182+
"has_issues": true,
183+
"has_pages": false,
184+
"has_projects": true,
185+
"has_pull_requests": true,
186+
"has_wiki": true,
187+
"homepage": null,
188+
"hooks_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/hooks",
189+
"html_url": "https://github.com/hyperpolymath/gitbot-fleet",
190+
"id": 1127765949,
191+
"is_template": false,
192+
"issue_comment_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/issues/comments{/number}",
193+
"issue_events_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/issues/events{/number}",
194+
"issues_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/issues{/number}",
195+
"keys_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/keys{/key_id}",
196+
"labels_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/labels{/name}",
197+
"language": "Rust",
198+
"languages_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/languages",
199+
"license": {
200+
"key": "other",
201+
"name": "Other",
202+
"node_id": "MDc6TGljZW5zZTA=",
203+
"spdx_id": "NOASSERTION",
204+
"url": null
205+
},
206+
"merges_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/merges",
207+
"milestones_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/milestones{/number}",
208+
"mirror_url": null,
209+
"name": "gitbot-fleet",
210+
"node_id": "R_kgDOQzhXvQ",
211+
"notifications_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/notifications{?since,all,participating}",
212+
"open_issues": 1,
213+
"open_issues_count": 1,
214+
"owner": {
215+
"avatar_url": "https://avatars.githubusercontent.com/u/6759885?v=4",
216+
"events_url": "https://api.github.com/users/hyperpolymath/events{/privacy}",
217+
"followers_url": "https://api.github.com/users/hyperpolymath/followers",
218+
"following_url": "https://api.github.com/users/hyperpolymath/following{/other_user}",
219+
"gists_url": "https://api.github.com/users/hyperpolymath/gists{/gist_id}",
220+
"gravatar_id": "",
221+
"html_url": "https://github.com/hyperpolymath",
222+
"id": 6759885,
223+
"login": "hyperpolymath",
224+
"node_id": "MDQ6VXNlcjY3NTk4ODU=",
225+
"organizations_url": "https://api.github.com/users/hyperpolymath/orgs",
226+
"received_events_url": "https://api.github.com/users/hyperpolymath/received_events",
227+
"repos_url": "https://api.github.com/users/hyperpolymath/repos",
228+
"site_admin": false,
229+
"starred_url": "https://api.github.com/users/hyperpolymath/starred{/owner}{/repo}",
230+
"subscriptions_url": "https://api.github.com/users/hyperpolymath/subscriptions",
231+
"type": "User",
232+
"url": "https://api.github.com/users/hyperpolymath",
233+
"user_view_type": "public"
234+
},
235+
"private": false,
236+
"pull_request_creation_policy": "all",
237+
"pulls_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/pulls{/number}",
238+
"pushed_at": "2026-05-23T21:55:00Z",
239+
"releases_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/releases{/id}",
240+
"size": 3850,
241+
"ssh_url": "git@github.com:hyperpolymath/gitbot-fleet.git",
242+
"stargazers_count": 2,
243+
"stargazers_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/stargazers",
244+
"statuses_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/statuses/{sha}",
245+
"subscribers_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/subscribers",
246+
"subscription_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/subscription",
247+
"svn_url": "https://github.com/hyperpolymath/gitbot-fleet",
248+
"tags_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/tags",
249+
"teams_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/teams",
250+
"topics": [
251+
"automation",
252+
"bots",
253+
"ci-cd",
254+
"collaboration",
255+
"devops",
256+
"git",
257+
"git-and-workflow",
258+
"hyperpolymath",
259+
"palimpsest",
260+
"quality-enforcement",
261+
"starred",
262+
"workflow"
263+
],
264+
"trees_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/git/trees{/sha}",
265+
"updated_at": "2026-05-23T21:55:03Z",
266+
"url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet",
267+
"visibility": "public",
268+
"watchers": 2,
269+
"watchers_count": 2,
270+
"web_commit_signoff_required": true
271+
},
272+
"sender": {
273+
"avatar_url": "https://avatars.githubusercontent.com/u/6759885?v=4",
274+
"events_url": "https://api.github.com/users/hyperpolymath/events{/privacy}",
275+
"followers_url": "https://api.github.com/users/hyperpolymath/followers",
276+
"following_url": "https://api.github.com/users/hyperpolymath/following{/other_user}",
277+
"gists_url": "https://api.github.com/users/hyperpolymath/gists{/gist_id}",
278+
"gravatar_id": "",
279+
"html_url": "https://github.com/hyperpolymath",
280+
"id": 6759885,
281+
"login": "hyperpolymath",
282+
"node_id": "MDQ6VXNlcjY3NTk4ODU=",
283+
"organizations_url": "https://api.github.com/users/hyperpolymath/orgs",
284+
"received_events_url": "https://api.github.com/users/hyperpolymath/received_events",
285+
"repos_url": "https://api.github.com/users/hyperpolymath/repos",
286+
"site_admin": false,
287+
"starred_url": "https://api.github.com/users/hyperpolymath/starred{/owner}{/repo}",
288+
"subscriptions_url": "https://api.github.com/users/hyperpolymath/subscriptions",
289+
"type": "User",
290+
"url": "https://api.github.com/users/hyperpolymath",
291+
"user_view_type": "public"
292+
}
293+
}

0 commit comments

Comments
 (0)