Skip to content

Commit a2af29a

Browse files
committed
Findings submissions (#198)
1 parent 0db9fd5 commit a2af29a

10 files changed

Lines changed: 1750 additions & 0 deletions

.hypatia-ignore

Lines changed: 30 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,30 @@
1+
# SPDX-License-Identifier: PMPL-1.0-or-later
2+
# .hypatia-ignore - Exemptions for banned language files (ReScript)
3+
# These ReScript files in bots/sustainabot are legacy and approved for use
4+
# in the sustainabot integration. See robot-repo-automaton for the migration path.
5+
6+
cicd_rules/banned_language_file:bots/sustainabot/bot-integration/src/Analysis.res
7+
cicd_rules/banned_language_file:bots/sustainabot/bot-integration/src/Config.res
8+
cicd_rules/banned_language_file:bots/sustainabot/bot-integration/src/GitHubAPI.res
9+
cicd_rules/banned_language_file:bots/sustainabot/bot-integration/src/GitHubApp.res
10+
cicd_rules/banned_language_file:bots/sustainabot/bot-integration/src/Main.res
11+
cicd_rules/banned_language_file:bots/sustainabot/bot-integration/src/Oikos.res
12+
cicd_rules/banned_language_file:bots/sustainabot/bot-integration/src/Report.res
13+
cicd_rules/banned_language_file:bots/sustainabot/bot-integration/src/Router.res
14+
cicd_rules/banned_language_file:bots/sustainabot/bot-integration/src/ServerTea.res
15+
cicd_rules/banned_language_file:bots/sustainabot/bot-integration/src/Types.res
16+
cicd_rules/banned_language_file:bots/sustainabot/bot-integration/src/Webhook.res
17+
cicd_rules/banned_language_file:bots/sustainabot/bot-integration/bindings/Deno.res
18+
cicd_rules/banned_language_file:bots/sustainabot/bot-integration/bindings/Fetch.res
19+
cicd_rules/banned_language_file:bots/sustainabot/bot-integration/lib/ocaml/Analysis.res
20+
cicd_rules/banned_language_file:bots/sustainabot/bot-integration/lib/ocaml/Config.res
21+
cicd_rules/banned_language_file:bots/sustainabot/bot-integration/lib/ocaml/GitHubAPI.res
22+
cicd_rules/banned_language_file:bots/sustainabot/bot-integration/lib/ocaml/GitHubApp.res
23+
cicd_rules/banned_language_file:bots/sustainabot/bot-integration/lib/ocaml/Main.res
24+
cicd_rules/banned_language_file:bots/sustainabot/bot-integration/lib/ocaml/Oikos.res
25+
cicd_rules/banned_language_file:bots/sustainabot/bot-integration/lib/ocaml/Report.res
26+
cicd_rules/banned_language_file:bots/sustainabot/bot-integration/lib/ocaml/Router.res
27+
cicd_rules/banned_language_file:bots/sustainabot/bot-integration/lib/ocaml/ServerTea.res
28+
cicd_rules/banned_language_file:bots/sustainabot/bot-integration/lib/ocaml/Types.res
29+
cicd_rules/banned_language_file:bots/sustainabot/bot-integration/lib/ocaml/Webhook.res
30+
cicd_rules/banned_language_file:bots/sustainabot/bot-integration/rescript-runtime/package.json

shared-context/dispatch/events.jsonl

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -390,3 +390,43 @@
390390
"findings_count": "17",
391391
"event_file": "shared-context/dispatch/events/20260524-043101-26351917025-hypatia-security-alert.json"
392392
}
393+
{
394+
"received_at": "2026-05-24T06:48:00Z",
395+
"event_type": "hypatia-security-alert",
396+
"source_repo": "hyperpolymath/rrecord-verity",
397+
"source_sha": "unknown",
398+
"findings_count": "2",
399+
"event_file": "shared-context/dispatch/events/20260524-064800-26354377579-hypatia-security-alert.json"
400+
}
401+
{
402+
"received_at": "2026-05-24T06:48:04Z",
403+
"event_type": "hypatia-security-alert",
404+
"source_repo": "hyperpolymath/git-reticulator",
405+
"source_sha": "unknown",
406+
"findings_count": "16",
407+
"event_file": "shared-context/dispatch/events/20260524-064804-26354378924-hypatia-security-alert.json"
408+
}
409+
{
410+
"received_at": "2026-05-24T06:48:08Z",
411+
"event_type": "hypatia-security-alert",
412+
"source_repo": "hyperpolymath/social-media-polygraph",
413+
"source_sha": "unknown",
414+
"findings_count": "4",
415+
"event_file": "shared-context/dispatch/events/20260524-064808-26354379123-hypatia-security-alert.json"
416+
}
417+
{
418+
"received_at": "2026-05-24T20:04:14Z",
419+
"event_type": "hypatia-security-alert",
420+
"source_repo": "hyperpolymath/hypatia",
421+
"source_sha": "4258322a55338e8423a7454b648db4d2fe8c58ec",
422+
"findings_count": "44",
423+
"event_file": "shared-context/dispatch/events/20260524-200414-26371413359-hypatia-security-alert.json"
424+
}
425+
{
426+
"received_at": "2026-05-24T20:07:20Z",
427+
"event_type": "hypatia-security-alert",
428+
"source_repo": "hyperpolymath/hypatia",
429+
"source_sha": "128e0fa59714487ffc8348e9fdfe1ce2c8066880",
430+
"findings_count": "43",
431+
"event_file": "shared-context/dispatch/events/20260524-200720-26371481384-hypatia-security-alert.json"
432+
}
Lines changed: 173 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,173 @@
1+
{
2+
"action": "hypatia-security-alert",
3+
"branch": "main",
4+
"client_payload": {
5+
"findings": [
6+
{
7+
"ecosystem": "NPM",
8+
"ghsa": "GHSA-5c6j-r48x-rmvq",
9+
"package": "serialize-javascript",
10+
"patched": "7.0.3",
11+
"range": "<= 7.0.2",
12+
"severity": "HIGH"
13+
},
14+
{
15+
"ecosystem": "NPM",
16+
"ghsa": "GHSA-qj8w-gfj5-8c6v",
17+
"package": "serialize-javascript",
18+
"patched": "7.0.5",
19+
"range": ">= 5.0.0, < 7.0.5",
20+
"severity": "MODERATE"
21+
}
22+
],
23+
"findings_count": 2,
24+
"run_url": "https://github.com/hyperpolymath/hypatia/actions/runs/26354368583",
25+
"scan_kind": "fleet_dependabot_sweep",
26+
"source": "hypatia-remediation-sweep",
27+
"source_repo": "hyperpolymath/rrecord-verity",
28+
"top_severity": "HIGH"
29+
},
30+
"repository": {
31+
"allow_forking": true,
32+
"archive_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/{archive_format}{/ref}",
33+
"archived": false,
34+
"assignees_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/assignees{/user}",
35+
"blobs_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/git/blobs{/sha}",
36+
"branches_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/branches{/branch}",
37+
"clone_url": "https://github.com/hyperpolymath/gitbot-fleet.git",
38+
"collaborators_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/collaborators{/collaborator}",
39+
"comments_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/comments{/number}",
40+
"commits_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/commits{/sha}",
41+
"compare_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/compare/{base}...{head}",
42+
"contents_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/contents/{+path}",
43+
"contributors_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/contributors",
44+
"created_at": "2026-01-04T14:56:49Z",
45+
"default_branch": "main",
46+
"deployments_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/deployments",
47+
"description": "Bot fleet for repository quality enforcement",
48+
"disabled": false,
49+
"downloads_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/downloads",
50+
"events_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/events",
51+
"fork": false,
52+
"forks": 0,
53+
"forks_count": 0,
54+
"forks_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/forks",
55+
"full_name": "hyperpolymath/gitbot-fleet",
56+
"git_commits_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/git/commits{/sha}",
57+
"git_refs_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/git/refs{/sha}",
58+
"git_tags_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/git/tags{/sha}",
59+
"git_url": "git://github.com/hyperpolymath/gitbot-fleet.git",
60+
"has_discussions": true,
61+
"has_downloads": true,
62+
"has_issues": true,
63+
"has_pages": false,
64+
"has_projects": true,
65+
"has_pull_requests": true,
66+
"has_wiki": true,
67+
"homepage": null,
68+
"hooks_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/hooks",
69+
"html_url": "https://github.com/hyperpolymath/gitbot-fleet",
70+
"id": 1127765949,
71+
"is_template": false,
72+
"issue_comment_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/issues/comments{/number}",
73+
"issue_events_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/issues/events{/number}",
74+
"issues_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/issues{/number}",
75+
"keys_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/keys{/key_id}",
76+
"labels_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/labels{/name}",
77+
"language": "Rust",
78+
"languages_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/languages",
79+
"license": {
80+
"key": "other",
81+
"name": "Other",
82+
"node_id": "MDc6TGljZW5zZTA=",
83+
"spdx_id": "NOASSERTION",
84+
"url": null
85+
},
86+
"merges_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/merges",
87+
"milestones_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/milestones{/number}",
88+
"mirror_url": null,
89+
"name": "gitbot-fleet",
90+
"node_id": "R_kgDOQzhXvQ",
91+
"notifications_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/notifications{?since,all,participating}",
92+
"open_issues": 1,
93+
"open_issues_count": 1,
94+
"owner": {
95+
"avatar_url": "https://avatars.githubusercontent.com/u/6759885?v=4",
96+
"events_url": "https://api.github.com/users/hyperpolymath/events{/privacy}",
97+
"followers_url": "https://api.github.com/users/hyperpolymath/followers",
98+
"following_url": "https://api.github.com/users/hyperpolymath/following{/other_user}",
99+
"gists_url": "https://api.github.com/users/hyperpolymath/gists{/gist_id}",
100+
"gravatar_id": "",
101+
"html_url": "https://github.com/hyperpolymath",
102+
"id": 6759885,
103+
"login": "hyperpolymath",
104+
"node_id": "MDQ6VXNlcjY3NTk4ODU=",
105+
"organizations_url": "https://api.github.com/users/hyperpolymath/orgs",
106+
"received_events_url": "https://api.github.com/users/hyperpolymath/received_events",
107+
"repos_url": "https://api.github.com/users/hyperpolymath/repos",
108+
"site_admin": false,
109+
"starred_url": "https://api.github.com/users/hyperpolymath/starred{/owner}{/repo}",
110+
"subscriptions_url": "https://api.github.com/users/hyperpolymath/subscriptions",
111+
"type": "User",
112+
"url": "https://api.github.com/users/hyperpolymath",
113+
"user_view_type": "public"
114+
},
115+
"private": false,
116+
"pull_request_creation_policy": "all",
117+
"pulls_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/pulls{/number}",
118+
"pushed_at": "2026-05-24T05:18:22Z",
119+
"releases_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/releases{/id}",
120+
"size": 3861,
121+
"ssh_url": "git@github.com:hyperpolymath/gitbot-fleet.git",
122+
"stargazers_count": 2,
123+
"stargazers_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/stargazers",
124+
"statuses_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/statuses/{sha}",
125+
"subscribers_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/subscribers",
126+
"subscription_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/subscription",
127+
"svn_url": "https://github.com/hyperpolymath/gitbot-fleet",
128+
"tags_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/tags",
129+
"teams_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/teams",
130+
"topics": [
131+
"automation",
132+
"bots",
133+
"ci-cd",
134+
"collaboration",
135+
"devops",
136+
"git",
137+
"git-and-workflow",
138+
"hyperpolymath",
139+
"palimpsest",
140+
"quality-enforcement",
141+
"starred",
142+
"workflow"
143+
],
144+
"trees_url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet/git/trees{/sha}",
145+
"updated_at": "2026-05-24T05:18:25Z",
146+
"url": "https://api.github.com/repos/hyperpolymath/gitbot-fleet",
147+
"visibility": "public",
148+
"watchers": 2,
149+
"watchers_count": 2,
150+
"web_commit_signoff_required": true
151+
},
152+
"sender": {
153+
"avatar_url": "https://avatars.githubusercontent.com/u/6759885?v=4",
154+
"events_url": "https://api.github.com/users/hyperpolymath/events{/privacy}",
155+
"followers_url": "https://api.github.com/users/hyperpolymath/followers",
156+
"following_url": "https://api.github.com/users/hyperpolymath/following{/other_user}",
157+
"gists_url": "https://api.github.com/users/hyperpolymath/gists{/gist_id}",
158+
"gravatar_id": "",
159+
"html_url": "https://github.com/hyperpolymath",
160+
"id": 6759885,
161+
"login": "hyperpolymath",
162+
"node_id": "MDQ6VXNlcjY3NTk4ODU=",
163+
"organizations_url": "https://api.github.com/users/hyperpolymath/orgs",
164+
"received_events_url": "https://api.github.com/users/hyperpolymath/received_events",
165+
"repos_url": "https://api.github.com/users/hyperpolymath/repos",
166+
"site_admin": false,
167+
"starred_url": "https://api.github.com/users/hyperpolymath/starred{/owner}{/repo}",
168+
"subscriptions_url": "https://api.github.com/users/hyperpolymath/subscriptions",
169+
"type": "User",
170+
"url": "https://api.github.com/users/hyperpolymath",
171+
"user_view_type": "public"
172+
}
173+
}

0 commit comments

Comments
 (0)