dispatch-intake: hypatia-security-alert from hyperpolymath/misinformation-defence-platform

Author: Hypatia Dispatch Intake

shared-context/dispatch/events.jsonl

@@ -358,3 +358,11 @@
   "findings_count": "8",
   "event_file": "shared-context/dispatch/events/20260524-043045-26351915930-hypatia-security-alert.json"
 }
+{
+  "received_at": "2026-05-24T04:30:50Z",
+  "event_type": "hypatia-security-alert",
+  "source_repo": "hyperpolymath/misinformation-defence-platform",
+  "source_sha": "unknown",
+  "findings_count": "5",
+  "event_file": "shared-context/dispatch/events/20260524-043050-26351915966-hypatia-security-alert.json"
+}

shared-context/dispatch/events/20260524-043050-26351915966-hypatia-security-alert.json

@@ -0,0 +1,197 @@
+{
+  "action": "hypatia-security-alert",
+  "branch": "main",
+  "client_payload": {
+    "findings": [
+      {
+        "ecosystem": "RUST",
+        "ghsa": "GHSA-pwjx-qhcg-rvj4",
+        "package": "rustls-webpki",
+        "patched": "0.103.10",
+        "range": ">= 0.102.0-alpha.0, < 0.103.10",
+        "severity": "MODERATE"
+      },
+      {
+        "ecosystem": "RUST",
+        "ghsa": "GHSA-xgp8-3hg3-c2mh",
+        "package": "rustls-webpki",
+        "patched": "0.103.12",
+        "range": ">= 0.101.0, < 0.103.12",
+        "severity": "LOW"
+      },
+      {
+        "ecosystem": "RUST",
+        "ghsa": "GHSA-965h-392x-2mh5",
+        "package": "rustls-webpki",
+        "patched": "0.103.12",
+        "range": ">= 0.101.0, < 0.103.12",
+        "severity": "LOW"
+      },
+      {
+        "ecosystem": "RUST",
+        "ghsa": "GHSA-cq8v-f236-94qc",
+        "package": "rand",
+        "patched": "0.8.6",
+        "range": ">= 0.7.0, < 0.8.6",
+        "severity": "LOW"
+      },
+      {
+        "ecosystem": "RUST",
+        "ghsa": "GHSA-82j2-j2ch-gfr8",
+        "package": "rustls-webpki",
+        "patched": "0.103.13",
+        "range": "< 0.103.13",
+        "severity": "HIGH"
+      }
+    ],
+    "findings_count": 5,
+    "run_url": "https://github.com/hyperpolymath/hypatia/actions/runs/26351906112",
+    "scan_kind": "fleet_dependabot_sweep",
+    "source": "hypatia-remediation-sweep",
+    "source_repo": "hyperpolymath/misinformation-defence-platform",
+    "top_severity": "HIGH"
+  },
+  "repository": {
+    "allow_forking": true,
+    "archive_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/{archive_format}{/ref}",
+    "archived": false,
+    "assignees_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/assignees{/user}",
+    "blobs_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/git/blobs{/sha}",
+    "branches_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/branches{/branch}",
+    "clone_url": "https://github.com/hyperpolymath/gitbot-fleet.git",
+    "collaborators_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/collaborators{/collaborator}",
+    "comments_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/comments{/number}",
+    "commits_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/commits{/sha}",
+    "compare_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/compare/{base}...{head}",
+    "contents_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/contents/{+path}",
+    "contributors_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/contributors",
+    "created_at": "2026-01-04T14:56:49Z",
+    "default_branch": "main",
+    "deployments_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/deployments",
+    "description": "Bot fleet for repository quality enforcement",
+    "disabled": false,
+    "downloads_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/downloads",
+    "events_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/events",
+    "fork": false,
+    "forks": 0,
+    "forks_count": 0,
+    "forks_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/forks",
+    "full_name": "hyperpolymath/gitbot-fleet",
+    "git_commits_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/git/commits{/sha}",
+    "git_refs_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/git/refs{/sha}",
+    "git_tags_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/git/tags{/sha}",
+    "git_url": "git://github.com/hyperpolymath/gitbot-fleet.git",
+    "has_discussions": true,
+    "has_downloads": true,
+    "has_issues": true,
+    "has_pages": false,
+    "has_projects": true,
+    "has_pull_requests": true,
+    "has_wiki": true,
+    "homepage": null,
+    "hooks_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/hooks",
+    "html_url": "https://github.com/hyperpolymath/gitbot-fleet",
+    "id": 1127765949,
+    "is_template": false,
+    "issue_comment_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/issues/comments{/number}",
+    "issue_events_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/issues/events{/number}",
+    "issues_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/issues{/number}",
+    "keys_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/keys{/key_id}",
+    "labels_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/labels{/name}",
+    "language": "Rust",
+    "languages_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/languages",
+    "license": {
+      "key": "other",
+      "name": "Other",
+      "node_id": "MDc6TGljZW5zZTA=",
+      "spdx_id": "NOASSERTION",
+      "url": null
+    },
+    "merges_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/merges",
+    "milestones_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/milestones{/number}",
+    "mirror_url": null,
+    "name": "gitbot-fleet",
+    "node_id": "R_kgDOQzhXvQ",
+    "notifications_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/notifications{?since,all,participating}",
+    "open_issues": 1,
+    "open_issues_count": 1,
+    "owner": {
+      "avatar_url": "https://avatars.githubusercontent.com/u/6759885?v=4",
+      "events_url": "https://api.github.com/users/hyperpolymath/events{/privacy}",
+      "followers_url": "https://api.github.com/users/hyperpolymath/followers",
+      "following_url": "https://api.github.com/users/hyperpolymath/following{/other_user}",
+      "gists_url": "https://api.github.com/users/hyperpolymath/gists{/gist_id}",
+      "gravatar_id": "",
+      "html_url": "https://github.com/hyperpolymath",
+      "id": 6759885,
+      "login": "hyperpolymath",
+      "node_id": "MDQ6VXNlcjY3NTk4ODU=",
+      "organizations_url": "https://api.github.com/users/hyperpolymath/orgs",
+      "received_events_url": "https://api.github.com/users/hyperpolymath/received_events",
+      "repos_url": "https://api.github.com/users/hyperpolymath/repos",
+      "site_admin": false,
+      "starred_url": "https://api.github.com/users/hyperpolymath/starred{/owner}{/repo}",
+      "subscriptions_url": "https://api.github.com/users/hyperpolymath/subscriptions",
+      "type": "User",
+      "url": "https://api.github.com/users/hyperpolymath",
+      "user_view_type": "public"
+    },
+    "private": false,
+    "pull_request_creation_policy": "all",
+    "pulls_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/pulls{/number}",
+    "pushed_at": "2026-05-23T21:55:00Z",
+    "releases_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/releases{/id}",
+    "size": 3850,
+    "ssh_url": "git@github.com:hyperpolymath/gitbot-fleet.git",
+    "stargazers_count": 2,
+    "stargazers_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/stargazers",
+    "statuses_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/statuses/{sha}",
+    "subscribers_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/subscribers",
+    "subscription_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/subscription",
+    "svn_url": "https://github.com/hyperpolymath/gitbot-fleet",
+    "tags_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/tags",
+    "teams_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/teams",
+    "topics": [
+      "automation",
+      "bots",
+      "ci-cd",
+      "collaboration",
+      "devops",
+      "git",
+      "git-and-workflow",
+      "hyperpolymath",
+      "palimpsest",
+      "quality-enforcement",
+      "starred",
+      "workflow"
+    ],
+    "trees_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/git/trees{/sha}",
+    "updated_at": "2026-05-23T21:55:03Z",
+    "url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet",
+    "visibility": "public",
+    "watchers": 2,
+    "watchers_count": 2,
+    "web_commit_signoff_required": true
+  },
+  "sender": {
+    "avatar_url": "https://avatars.githubusercontent.com/u/6759885?v=4",
+    "events_url": "https://api.github.com/users/hyperpolymath/events{/privacy}",
+    "followers_url": "https://api.github.com/users/hyperpolymath/followers",
+    "following_url": "https://api.github.com/users/hyperpolymath/following{/other_user}",
+    "gists_url": "https://api.github.com/users/hyperpolymath/gists{/gist_id}",
+    "gravatar_id": "",
+    "html_url": "https://github.com/hyperpolymath",
+    "id": 6759885,
+    "login": "hyperpolymath",
+    "node_id": "MDQ6VXNlcjY3NTk4ODU=",
+    "organizations_url": "https://api.github.com/users/hyperpolymath/orgs",
+    "received_events_url": "https://api.github.com/users/hyperpolymath/received_events",
+    "repos_url": "https://api.github.com/users/hyperpolymath/repos",
+    "site_admin": false,
+    "starred_url": "https://api.github.com/users/hyperpolymath/starred{/owner}{/repo}",
+    "subscriptions_url": "https://api.github.com/users/hyperpolymath/subscriptions",
+    "type": "User",
+    "url": "https://api.github.com/users/hyperpolymath",
+    "user_view_type": "public"
+  }
+}