Skip to content

Commit d1742b3

Browse files
author
Hypatia Finding Submitter
committed
findings: hyperpolymath/hypatia @ 2026-06-13
Submitted: 47 findings Commit: ed5267fca6e089dab9973eba2095042d74cf8014 Scanner: hypatia-v2 Automated submission from GitHub Actions.
1 parent a0d79e9 commit d1742b3

2 files changed

Lines changed: 389 additions & 1 deletion

File tree

‎shared-context/findings/hyperpolymath-hypatia/20260613-145406.json‎

Lines changed: 388 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,388 @@
1+
{
2+
"findings": [
3+
{
4+
"reason": "Action actions/add-to-project@v1.0.2 needs attention",
5+
"type": "unpinned_action",
6+
"file": "add-to-roadmap.yml",
7+
"action": "pin_sha",
8+
"rule_module": "workflow_audit",
9+
"severity": "medium"
10+
},
11+
{
12+
"reason": "Issue in add-to-roadmap.yml",
13+
"type": "missing_timeout_minutes",
14+
"file": "add-to-roadmap.yml",
15+
"action": "flag",
16+
"rule_module": "workflow_audit",
17+
"severity": "medium"
18+
},
19+
{
20+
"reason": "Issue in codeql.yml",
21+
"type": "codeql_missing_actions_language",
22+
"file": "codeql.yml",
23+
"action": "flag",
24+
"rule_module": "workflow_audit",
25+
"severity": "medium"
26+
},
27+
{
28+
"reason": "1 workflow(s) with tag-pinned (not SHA-pinned) actions in hypatia",
29+
"type": "DependencyPinning",
30+
"file": "/home/runner/work/hypatia/hypatia",
31+
"action": "auto_fix",
32+
"rule_module": "scorecard",
33+
"severity": "medium",
34+
"remediation": "Pin GitHub Actions and Docker base images by SHA hash.",
35+
"scorecard_check": "Pinned-Dependencies"
36+
},
37+
{
38+
"reason": "Repository has 5 non-main remote branch(es). Policy: single main branch only.",
39+
"type": "GS007",
40+
"file": ".",
41+
"action": "delete_remote_branches",
42+
"rule_module": "git_state",
43+
"severity": "medium"
44+
},
45+
{
46+
"reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 10 day(s) old",
47+
"type": "CSA001",
48+
"file": "src/ui/gossamer/README.adoc",
49+
"action": "review",
50+
"rule_module": "code_scanning_alerts",
51+
"severity": "medium"
52+
},
53+
{
54+
"reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 10 day(s) old",
55+
"type": "CSA001",
56+
"file": "scripts/ci-tools/Cargo.toml",
57+
"action": "review",
58+
"rule_module": "code_scanning_alerts",
59+
"severity": "medium"
60+
},
61+
{
62+
"reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 10 day(s) old",
63+
"type": "CSA001",
64+
"file": "scripts/bench-tools/Cargo.toml",
65+
"action": "review",
66+
"rule_module": "code_scanning_alerts",
67+
"severity": "medium"
68+
},
69+
{
70+
"reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 10 day(s) old",
71+
"type": "CSA001",
72+
"file": "ffi/zig/README.adoc",
73+
"action": "review",
74+
"rule_module": "code_scanning_alerts",
75+
"severity": "medium"
76+
},
77+
{
78+
"reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 10 day(s) old",
79+
"type": "CSA001",
80+
"file": "docs/reports/audit/audit-2026-04-15-post.md",
81+
"action": "review",
82+
"rule_module": "code_scanning_alerts",
83+
"severity": "medium"
84+
},
85+
{
86+
"reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 10 day(s) old",
87+
"type": "CSA001",
88+
"file": "docs/integration/github-registry.adoc",
89+
"action": "review",
90+
"rule_module": "code_scanning_alerts",
91+
"severity": "medium"
92+
},
93+
{
94+
"reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 10 day(s) old",
95+
"type": "CSA001",
96+
"file": "docs/integration/github-registry.adoc",
97+
"action": "review",
98+
"rule_module": "code_scanning_alerts",
99+
"severity": "medium"
100+
},
101+
{
102+
"reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 10 day(s) old",
103+
"type": "CSA001",
104+
"file": "docs/integration/a2ml-k9.md",
105+
"action": "review",
106+
"rule_module": "code_scanning_alerts",
107+
"severity": "medium"
108+
},
109+
{
110+
"reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 10 day(s) old",
111+
"type": "CSA001",
112+
"file": "docs/architecture/system-integration.md",
113+
"action": "review",
114+
"rule_module": "code_scanning_alerts",
115+
"severity": "medium"
116+
},
117+
{
118+
"reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 10 day(s) old",
119+
"type": "CSA001",
120+
"file": "docs/architecture/boundary-design-options.adoc",
121+
"action": "review",
122+
"rule_module": "code_scanning_alerts",
123+
"severity": "medium"
124+
},
125+
{
126+
"reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 10 day(s) old",
127+
"type": "CSA001",
128+
"file": "docs/architecture/boundary-design-options.adoc",
129+
"action": "review",
130+
"rule_module": "code_scanning_alerts",
131+
"severity": "medium"
132+
},
133+
{
134+
"reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 10 day(s) old",
135+
"type": "CSA001",
136+
"file": "docs/EXPLAINME.adoc",
137+
"action": "review",
138+
"rule_module": "code_scanning_alerts",
139+
"severity": "medium"
140+
},
141+
{
142+
"reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 10 day(s) old",
143+
"type": "CSA001",
144+
"file": "docs/EXPLAINME.adoc",
145+
"action": "review",
146+
"rule_module": "code_scanning_alerts",
147+
"severity": "medium"
148+
},
149+
{
150+
"reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 10 day(s) old",
151+
"type": "CSA001",
152+
"file": "docs/EXPLAINME.adoc",
153+
"action": "review",
154+
"rule_module": "code_scanning_alerts",
155+
"severity": "medium"
156+
},
157+
{
158+
"reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 10 day(s) old",
159+
"type": "CSA001",
160+
"file": "0-AI-MANIFEST.a2ml",
161+
"action": "review",
162+
"rule_module": "code_scanning_alerts",
163+
"severity": "medium"
164+
},
165+
{
166+
"reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 10 day(s) old",
167+
"type": "CSA001",
168+
"file": ".audittraining/security-errors/polyglot-i18n.md",
169+
"action": "review",
170+
"rule_module": "code_scanning_alerts",
171+
"severity": "medium"
172+
},
173+
{
174+
"reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 10 day(s) old",
175+
"type": "CSA001",
176+
"file": ".audittraining/security-errors/polyglot-i18n.md",
177+
"action": "review",
178+
"rule_module": "code_scanning_alerts",
179+
"severity": "medium"
180+
},
181+
{
182+
"reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 10 day(s) old",
183+
"type": "CSA001",
184+
"file": ".audittraining/security-errors/echidnabot.md",
185+
"action": "review",
186+
"rule_module": "code_scanning_alerts",
187+
"severity": "medium"
188+
},
189+
{
190+
"reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 10 day(s) old",
191+
"type": "CSA001",
192+
"file": ".audittraining/security-errors/SUMMARY.md",
193+
"action": "review",
194+
"rule_module": "code_scanning_alerts",
195+
"severity": "medium"
196+
},
197+
{
198+
"reason": "Code scanning (Hypatia): hypatia/structural_drift/SD022 -- Hypatia structural_drift: SD022 -- 10 day(s) old",
199+
"type": "CSA001",
200+
"file": ".audittraining/package-candidates/REPORT.md",
201+
"action": "review",
202+
"rule_module": "code_scanning_alerts",
203+
"severity": "medium"
204+
},
205+
{
206+
"reason": "Code scanning (Hypatia): hypatia/workflow_audit/codeql_missing_actions_language -- Hypatia workflow_audit: codeql_missing_actions_language -- 13 day(s) old",
207+
"type": "CSA001",
208+
"file": "codeql.yml",
209+
"action": "review",
210+
"rule_module": "code_scanning_alerts",
211+
"severity": "medium"
212+
},
213+
{
214+
"reason": "21 total open code-scanning alert(s) -- security hygiene review",
215+
"type": "CSA002",
216+
"file": "hyperpolymath/hypatia",
217+
"action": "review",
218+
"rule_module": "code_scanning_alerts",
219+
"severity": "medium"
220+
},
221+
{
222+
"reason": "doc references `src/lib/` but no such directory exists in the tree (likely surviving a directory rename)",
223+
"type": "SD022",
224+
"file": ".audittraining/package-candidates/REPORT.md",
225+
"action": "rename_sweep",
226+
"rule_module": "structural_drift",
227+
"severity": "medium"
228+
},
229+
{
230+
"reason": "doc references `src/api/` but no such directory exists in the tree (likely surviving a directory rename)",
231+
"type": "SD022",
232+
"file": ".audittraining/security-errors/SUMMARY.md",
233+
"action": "rename_sweep",
234+
"rule_module": "structural_drift",
235+
"severity": "medium"
236+
},
237+
{
238+
"reason": "doc references `src/api/` but no such directory exists in the tree (likely surviving a directory rename)",
239+
"type": "SD022",
240+
"file": ".audittraining/security-errors/echidnabot.md",
241+
"action": "rename_sweep",
242+
"rule_module": "structural_drift",
243+
"severity": "medium"
244+
},
245+
{
246+
"reason": "doc references `src/i18n/` but no such directory exists in the tree (likely surviving a directory rename)",
247+
"type": "SD022",
248+
"file": ".audittraining/security-errors/polyglot-i18n.md",
249+
"action": "rename_sweep",
250+
"rule_module": "structural_drift",
251+
"severity": "medium"
252+
},
253+
{
254+
"reason": "doc references `src/greetings/` but no such directory exists in the tree (likely surviving a directory rename)",
255+
"type": "SD022",
256+
"file": ".audittraining/security-errors/polyglot-i18n.md",
257+
"action": "rename_sweep",
258+
"rule_module": "structural_drift",
259+
"severity": "medium"
260+
},
261+
{
262+
"reason": "doc references `src/rust/` but no such directory exists in the tree (likely surviving a directory rename)",
263+
"type": "SD022",
264+
"file": "0-AI-MANIFEST.a2ml",
265+
"action": "rename_sweep",
266+
"rule_module": "structural_drift",
267+
"severity": "medium"
268+
},
269+
{
270+
"reason": "doc references `src/interface/` but no such directory exists in the tree (likely surviving a directory rename)",
271+
"type": "SD022",
272+
"file": "docs/EXPLAINME.adoc",
273+
"action": "rename_sweep",
274+
"rule_module": "structural_drift",
275+
"severity": "medium"
276+
},
277+
{
278+
"reason": "doc references `src/Burble/` but no such directory exists in the tree (likely surviving a directory rename)",
279+
"type": "SD022",
280+
"file": "docs/EXPLAINME.adoc",
281+
"action": "rename_sweep",
282+
"rule_module": "structural_drift",
283+
"severity": "medium"
284+
},
285+
{
286+
"reason": "doc references `src/rust/` but no such directory exists in the tree (likely surviving a directory rename)",
287+
"type": "SD022",
288+
"file": "docs/EXPLAINME.adoc",
289+
"action": "rename_sweep",
290+
"rule_module": "structural_drift",
291+
"severity": "medium"
292+
},
293+
{
294+
"reason": "doc references `src/bridges/` but no such directory exists in the tree (likely surviving a directory rename)",
295+
"type": "SD022",
296+
"file": "docs/architecture/boundary-design-options.adoc",
297+
"action": "rename_sweep",
298+
"rule_module": "structural_drift",
299+
"severity": "medium"
300+
},
301+
{
302+
"reason": "doc references `src/core/` but no such directory exists in the tree (likely surviving a directory rename)",
303+
"type": "SD022",
304+
"file": "docs/architecture/boundary-design-options.adoc",
305+
"action": "rename_sweep",
306+
"rule_module": "structural_drift",
307+
"severity": "medium"
308+
},
309+
{
310+
"reason": "doc references `src/auth/` but no such directory exists in the tree (likely surviving a directory rename)",
311+
"type": "SD022",
312+
"file": "docs/architecture/system-integration.md",
313+
"action": "rename_sweep",
314+
"rule_module": "structural_drift",
315+
"severity": "medium"
316+
},
317+
{
318+
"reason": "doc references `src/rust/` but no such directory exists in the tree (likely surviving a directory rename)",
319+
"type": "SD022",
320+
"file": "docs/integration/a2ml-k9.md",
321+
"action": "rename_sweep",
322+
"rule_module": "structural_drift",
323+
"severity": "medium"
324+
},
325+
{
326+
"reason": "doc references `src/commands/` but no such directory exists in the tree (likely surviving a directory rename)",
327+
"type": "SD022",
328+
"file": "docs/integration/github-registry.adoc",
329+
"action": "rename_sweep",
330+
"rule_module": "structural_drift",
331+
"severity": "medium"
332+
},
333+
{
334+
"reason": "doc references `src/registry/` but no such directory exists in the tree (likely surviving a directory rename)",
335+
"type": "SD022",
336+
"file": "docs/integration/github-registry.adoc",
337+
"action": "rename_sweep",
338+
"rule_module": "structural_drift",
339+
"severity": "medium"
340+
},
341+
{
342+
"reason": "doc references `src/ci_simulation/` but no such directory exists in the tree (likely surviving a directory rename)",
343+
"type": "SD022",
344+
"file": "docs/reports/audit/audit-2026-04-15-post.md",
345+
"action": "rename_sweep",
346+
"rule_module": "structural_drift",
347+
"severity": "medium"
348+
},
349+
{
350+
"reason": "doc references `src/connectors/` but no such directory exists in the tree (likely surviving a directory rename)",
351+
"type": "SD022",
352+
"file": "ffi/zig/README.adoc",
353+
"action": "rename_sweep",
354+
"rule_module": "structural_drift",
355+
"severity": "medium"
356+
},
357+
{
358+
"reason": "doc references `src/bin/` but no such directory exists in the tree (likely surviving a directory rename)",
359+
"type": "SD022",
360+
"file": "scripts/bench-tools/Cargo.toml",
361+
"action": "rename_sweep",
362+
"rule_module": "structural_drift",
363+
"severity": "medium"
364+
},
365+
{
366+
"reason": "doc references `src/bin/` but no such directory exists in the tree (likely surviving a directory rename)",
367+
"type": "SD022",
368+
"file": "scripts/ci-tools/Cargo.toml",
369+
"action": "rename_sweep",
370+
"rule_module": "structural_drift",
371+
"severity": "medium"
372+
},
373+
{
374+
"reason": "doc references `src/core/` but no such directory exists in the tree (likely surviving a directory rename)",
375+
"type": "SD022",
376+
"file": "src/ui/gossamer/README.adoc",
377+
"action": "rename_sweep",
378+
"rule_module": "structural_drift",
379+
"severity": "medium"
380+
}
381+
],
382+
"submission_metadata": {
383+
"repo": "hyperpolymath/hypatia",
384+
"commit": "ed5267fca6e089dab9973eba2095042d74cf8014",
385+
"submitted_at": "2026-06-13T14:54:07Z",
386+
"scanner_version": "hypatia-v2"
387+
}
388+
}

‎shared-context/findings/hyperpolymath-hypatia/latest.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
20260613-145336.json
1+
20260613-145406.json

0 commit comments

Comments
 (0)