findings: hyperpolymath/hypatia @ 2026-05-26

Submitted: 11 findings
Commit: 3253f9b5b27d50852c283011dda1d83d353bb585
Scanner: hypatia-v2

Automated submission from GitHub Actions.

Author: Hypatia Finding Submitter

shared-context/findings/hyperpolymath-hypatia/20260526-003952.json

@@ -0,0 +1,98 @@
+{
+  "findings": [
+    {
+      "reason": "Repository has 4 non-main remote branch(es). Policy: single main branch only.",
+      "type": "GS007",
+      "file": ".",
+      "action": "delete_remote_branches",
+      "rule_module": "git_state",
+      "severity": "medium"
+    },
+    {
+      "reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
+      "type": "CSA001",
+      "file": "test/soundness/fixtures/code_safety/getexn_on_external.res",
+      "action": "update",
+      "rule_module": "code_scanning_alerts",
+      "severity": "high"
+    },
+    {
+      "reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
+      "type": "CSA001",
+      "file": "test/soundness/fixtures/code_safety/getexn_on_external.res",
+      "action": "update",
+      "rule_module": "code_scanning_alerts",
+      "severity": "high"
+    },
+    {
+      "reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
+      "type": "CSA001",
+      "file": "test/soundness/fixtures/code_safety/getexn_on_external.res",
+      "action": "update",
+      "rule_module": "code_scanning_alerts",
+      "severity": "high"
+    },
+    {
+      "reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
+      "type": "CSA001",
+      "file": "test/soundness/fixtures/code_safety/getexn_on_external.res",
+      "action": "update",
+      "rule_module": "code_scanning_alerts",
+      "severity": "high"
+    },
+    {
+      "reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
+      "type": "CSA001",
+      "file": "test/soundness/fixtures/code_safety/getexn_on_external.res",
+      "action": "update",
+      "rule_module": "code_scanning_alerts",
+      "severity": "high"
+    },
+    {
+      "reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 0 day(s) old",
+      "type": "CSA001",
+      "file": "test/soundness/fixtures/code_safety/shell_download_then_run.sh",
+      "action": "review",
+      "rule_module": "code_scanning_alerts",
+      "severity": "medium"
+    },
+    {
+      "reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 1 day(s) old",
+      "type": "CSA001",
+      "file": ".github/workflows/dependabot-automerge.yml",
+      "action": "update",
+      "rule_module": "code_scanning_alerts",
+      "severity": "high"
+    },
+    {
+      "reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 1 day(s) old",
+      "type": "CSA001",
+      "file": "hyperpolymath/hypatia",
+      "action": "review",
+      "rule_module": "code_scanning_alerts",
+      "severity": "medium"
+    },
+    {
+      "reason": "Code scanning (Hypatia): hypatia/code_scanning_alerts/CSA001 -- Hypatia code_scanning_alerts: CSA001 -- 1 day(s) old",
+      "type": "CSA001",
+      "file": "test/soundness/fixtures/code_safety/shell_download_then_run.sh",
+      "action": "review",
+      "rule_module": "code_scanning_alerts",
+      "severity": "medium"
+    },
+    {
+      "reason": "91 total open code-scanning alert(s) -- security hygiene review",
+      "type": "CSA002",
+      "file": "hyperpolymath/hypatia",
+      "action": "review",
+      "rule_module": "code_scanning_alerts",
+      "severity": "medium"
+    }
+  ],
+  "submission_metadata": {
+    "repo": "hyperpolymath/hypatia",
+    "commit": "3253f9b5b27d50852c283011dda1d83d353bb585",
+    "submitted_at": "2026-05-26T00:39:55Z",
+    "scanner_version": "hypatia-v2"
+  }
+}

shared-context/findings/hyperpolymath-hypatia/latest.json

@@ -1 +1 @@
-20260526-003940.json
+20260526-003952.json