Skip to content

Commit 8a5f28f

Browse files
hyperpolymathHypatia Finding Submitter
hyperpolymath
and
Hypatia Finding Submitter
authored
Findings submissions (#205)
Co-authored-by: Hypatia Finding Submitter <hypatia@reposystem.dev>
1 parent e4163dd commit 8a5f28f

15 files changed

Lines changed: 3653 additions & 1 deletion

‎shared-context/findings/hyperpolymath-hypatia/20260525-192610.json‎

Lines changed: 394 additions & 0 deletions
Large diffs are not rendered by default.

‎shared-context/findings/hyperpolymath-hypatia/20260525-193347.json‎

Lines changed: 370 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,370 @@
1+
{
2+
"findings": [
3+
{
4+
"reason": "Repository has 2 non-main remote branch(es). Policy: single main branch only.",
5+
"type": "GS007",
6+
"file": ".",
7+
"action": "delete_remote_branches",
8+
"rule_module": "git_state",
9+
"severity": "medium"
10+
},
11+
{
12+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
13+
"type": "CSA001",
14+
"file": "test/soundness/fixtures/code_safety/getexn_on_external.res",
15+
"action": "update",
16+
"rule_module": "code_scanning_alerts",
17+
"severity": "high"
18+
},
19+
{
20+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
21+
"type": "CSA001",
22+
"file": "test/soundness/fixtures/code_safety/getexn_on_external.res",
23+
"action": "update",
24+
"rule_module": "code_scanning_alerts",
25+
"severity": "high"
26+
},
27+
{
28+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
29+
"type": "CSA001",
30+
"file": "test/soundness/fixtures/code_safety/getexn_on_external.res",
31+
"action": "update",
32+
"rule_module": "code_scanning_alerts",
33+
"severity": "high"
34+
},
35+
{
36+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
37+
"type": "CSA001",
38+
"file": "test/soundness/fixtures/code_safety/getexn_on_external.res",
39+
"action": "update",
40+
"rule_module": "code_scanning_alerts",
41+
"severity": "high"
42+
},
43+
{
44+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
45+
"type": "CSA001",
46+
"file": "test/soundness/fixtures/code_safety/getexn_on_external.res",
47+
"action": "update",
48+
"rule_module": "code_scanning_alerts",
49+
"severity": "high"
50+
},
51+
{
52+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
53+
"type": "CSA001",
54+
"file": ".github/workflows/dependabot-automerge.yml",
55+
"action": "update",
56+
"rule_module": "code_scanning_alerts",
57+
"severity": "high"
58+
},
59+
{
60+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
61+
"type": "CSA001",
62+
"file": ".github/workflows/hypatia-scan.yml",
63+
"action": "update",
64+
"rule_module": "code_scanning_alerts",
65+
"severity": "high"
66+
},
67+
{
68+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
69+
"type": "CSA001",
70+
"file": ".github/workflows/dependabot-automerge.yml",
71+
"action": "update",
72+
"rule_module": "code_scanning_alerts",
73+
"severity": "high"
74+
},
75+
{
76+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
77+
"type": "CSA001",
78+
"file": "hyperpolymath/hypatia",
79+
"action": "review",
80+
"rule_module": "code_scanning_alerts",
81+
"severity": "medium"
82+
},
83+
{
84+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
85+
"type": "CSA001",
86+
"file": "test/soundness/fixtures/code_safety/shell_download_then_run.sh",
87+
"action": "review",
88+
"rule_module": "code_scanning_alerts",
89+
"severity": "medium"
90+
},
91+
{
92+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
93+
"type": "CSA001",
94+
"file": ".github/workflows/dependabot-automerge.yml",
95+
"action": "update",
96+
"rule_module": "code_scanning_alerts",
97+
"severity": "high"
98+
},
99+
{
100+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
101+
"type": "CSA001",
102+
"file": ".github/workflows/hypatia-scan.yml",
103+
"action": "update",
104+
"rule_module": "code_scanning_alerts",
105+
"severity": "high"
106+
},
107+
{
108+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
109+
"type": "CSA001",
110+
"file": ".github/workflows/dependabot-automerge.yml",
111+
"action": "update",
112+
"rule_module": "code_scanning_alerts",
113+
"severity": "high"
114+
},
115+
{
116+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
117+
"type": "CSA001",
118+
"file": "hyperpolymath/hypatia",
119+
"action": "review",
120+
"rule_module": "code_scanning_alerts",
121+
"severity": "medium"
122+
},
123+
{
124+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
125+
"type": "CSA001",
126+
"file": "test/soundness/fixtures/code_safety/shell_download_then_run.sh",
127+
"action": "review",
128+
"rule_module": "code_scanning_alerts",
129+
"severity": "medium"
130+
},
131+
{
132+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 1 day(s) old",
133+
"type": "CSA001",
134+
"file": ".github/workflows/dependabot-automerge.yml",
135+
"action": "update",
136+
"rule_module": "code_scanning_alerts",
137+
"severity": "high"
138+
},
139+
{
140+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 1 day(s) old",
141+
"type": "CSA001",
142+
"file": ".github/workflows/hypatia-scan.yml",
143+
"action": "update",
144+
"rule_module": "code_scanning_alerts",
145+
"severity": "high"
146+
},
147+
{
148+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 1 day(s) old",
149+
"type": "CSA001",
150+
"file": ".github/workflows/dependabot-automerge.yml",
151+
"action": "update",
152+
"rule_module": "code_scanning_alerts",
153+
"severity": "high"
154+
},
155+
{
156+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 1 day(s) old",
157+
"type": "CSA001",
158+
"file": "hyperpolymath/hypatia",
159+
"action": "review",
160+
"rule_module": "code_scanning_alerts",
161+
"severity": "medium"
162+
},
163+
{
164+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 1 day(s) old",
165+
"type": "CSA001",
166+
"file": "adapters/src/main.rs",
167+
"action": "review",
168+
"rule_module": "code_scanning_alerts",
169+
"severity": "medium"
170+
},
171+
{
172+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 1 day(s) old",
173+
"type": "CSA001",
174+
"file": "test/soundness/fixtures/code_safety/shell_download_then_run.sh",
175+
"action": "review",
176+
"rule_module": "code_scanning_alerts",
177+
"severity": "medium"
178+
},
179+
{
180+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 1 day(s) old",
181+
"type": "CSA001",
182+
"file": ".github/workflows/dependabot-automerge.yml",
183+
"action": "update",
184+
"rule_module": "code_scanning_alerts",
185+
"severity": "high"
186+
},
187+
{
188+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 1 day(s) old",
189+
"type": "CSA001",
190+
"file": ".github/workflows/hypatia-scan.yml",
191+
"action": "update",
192+
"rule_module": "code_scanning_alerts",
193+
"severity": "high"
194+
},
195+
{
196+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 1 day(s) old",
197+
"type": "CSA001",
198+
"file": ".github/workflows/dependabot-automerge.yml",
199+
"action": "update",
200+
"rule_module": "code_scanning_alerts",
201+
"severity": "high"
202+
},
203+
{
204+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 1 day(s) old",
205+
"type": "CSA001",
206+
"file": "hyperpolymath/hypatia",
207+
"action": "review",
208+
"rule_module": "code_scanning_alerts",
209+
"severity": "medium"
210+
},
211+
{
212+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 1 day(s) old",
213+
"type": "CSA001",
214+
"file": "adapters/src/main.rs",
215+
"action": "review",
216+
"rule_module": "code_scanning_alerts",
217+
"severity": "medium"
218+
},
219+
{
220+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 1 day(s) old",
221+
"type": "CSA001",
222+
"file": ".github/workflows/docs.yml",
223+
"action": "review",
224+
"rule_module": "code_scanning_alerts",
225+
"severity": "medium"
226+
},
227+
{
228+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 1 day(s) old",
229+
"type": "CSA001",
230+
"file": ".github/workflows/dependabot-auto-merge.yml",
231+
"action": "review",
232+
"rule_module": "code_scanning_alerts",
233+
"severity": "medium"
234+
},
235+
{
236+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 1 day(s) old",
237+
"type": "CSA001",
238+
"file": "no file associated with this alert",
239+
"action": "review",
240+
"rule_module": "code_scanning_alerts",
241+
"severity": "medium"
242+
},
243+
{
244+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 1 day(s) old",
245+
"type": "CSA001",
246+
"file": "test/soundness/fixtures/code_safety/shell_download_then_run.sh",
247+
"action": "review",
248+
"rule_module": "code_scanning_alerts",
249+
"severity": "medium"
250+
},
251+
{
252+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 1 day(s) old",
253+
"type": "CSA001",
254+
"file": ".github/workflows/dependabot-automerge.yml",
255+
"action": "update",
256+
"rule_module": "code_scanning_alerts",
257+
"severity": "high"
258+
},
259+
{
260+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 1 day(s) old",
261+
"type": "CSA001",
262+
"file": ".github/workflows/hypatia-scan.yml",
263+
"action": "update",
264+
"rule_module": "code_scanning_alerts",
265+
"severity": "high"
266+
},
267+
{
268+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 1 day(s) old",
269+
"type": "CSA001",
270+
"file": ".github/workflows/dependabot-automerge.yml",
271+
"action": "update",
272+
"rule_module": "code_scanning_alerts",
273+
"severity": "high"
274+
},
275+
{
276+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 1 day(s) old",
277+
"type": "CSA001",
278+
"file": "hyperpolymath/hypatia",
279+
"action": "review",
280+
"rule_module": "code_scanning_alerts",
281+
"severity": "medium"
282+
},
283+
{
284+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 1 day(s) old",
285+
"type": "CSA001",
286+
"file": "adapters/src/main.rs",
287+
"action": "review",
288+
"rule_module": "code_scanning_alerts",
289+
"severity": "medium"
290+
},
291+
{
292+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 1 day(s) old",
293+
"type": "CSA001",
294+
"file": ".github/workflows/docs.yml",
295+
"action": "review",
296+
"rule_module": "code_scanning_alerts",
297+
"severity": "medium"
298+
},
299+
{
300+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 1 day(s) old",
301+
"type": "CSA001",
302+
"file": ".github/workflows/dependabot-auto-merge.yml",
303+
"action": "review",
304+
"rule_module": "code_scanning_alerts",
305+
"severity": "medium"
306+
},
307+
{
308+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 1 day(s) old",
309+
"type": "CSA001",
310+
"file": "no file associated with this alert",
311+
"action": "review",
312+
"rule_module": "code_scanning_alerts",
313+
"severity": "medium"
314+
},
315+
{
316+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 1 day(s) old",
317+
"type": "CSA001",
318+
"file": ".github/workflows/release.yml",
319+
"action": "review",
320+
"rule_module": "code_scanning_alerts",
321+
"severity": "medium"
322+
},
323+
{
324+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 1 day(s) old",
325+
"type": "CSA001",
326+
"file": "no file associated with this alert",
327+
"action": "review",
328+
"rule_module": "code_scanning_alerts",
329+
"severity": "medium"
330+
},
331+
{
332+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 1 day(s) old",
333+
"type": "CSA001",
334+
"file": "test/soundness/fixtures/code_safety/shell_download_then_run.sh",
335+
"action": "review",
336+
"rule_module": "code_scanning_alerts",
337+
"severity": "medium"
338+
},
339+
{
340+
"reason": "Code scanning (Scorecard): PinnedDependenciesID -- Pinned-Dependencies -- 1 day(s) old",
341+
"type": "CSA001",
342+
"file": "test/soundness/fixtures/code_safety/shell_download_then_run.sh",
343+
"action": "review",
344+
"rule_module": "code_scanning_alerts",
345+
"severity": "medium"
346+
},
347+
{
348+
"reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA003 -- Hypatia code_scanning_alerts: CSA003 -- 1 day(s) old",
349+
"type": "CSA001",
350+
"file": ".github/workflows/dependabot-automerge.yml",
351+
"action": "update",
352+
"rule_module": "code_scanning_alerts",
353+
"severity": "high"
354+
},
355+
{
356+
"reason": "89 total open code-scanning alert(s) -- security hygiene review",
357+
"type": "CSA002",
358+
"file": "hyperpolymath/hypatia",
359+
"action": "review",
360+
"rule_module": "code_scanning_alerts",
361+
"severity": "medium"
362+
}
363+
],
364+
"submission_metadata": {
365+
"repo": "hyperpolymath/hypatia",
366+
"commit": "b1e59f33bb808a44a2f6ead5145a1249f72b0eab",
367+
"submitted_at": "2026-05-25T19:33:48Z",
368+
"scanner_version": "hypatia-v2"
369+
}
370+
}

0 commit comments

Comments
 (0)