Repository navigation
Full validation #118
duriantacoci.yml
on: schedule
Go checks
1m 0s
Kernel race tests
23s
GatemoleBench acceptance
43s
GatemoleKernelBench acceptance
25s
GatemoleTransactionBench acceptance
35s
GatemoleRuntimeBench acceptance
39s
Production OCI acceptance
1m 45s
Skylos advisory
36s
Annotations
20 errors and 10 notices
|
Skylos SKY-D215:
scripts/gatemolebench.sh#L610
User-controlled shell path reaches a filesystem sink without basename or canonical path validation.
|
|
Skylos SKY-D215:
scripts/gatemolebench.sh#L598
User-controlled shell path reaches a filesystem sink without basename or canonical path validation.
|
|
Skylos SKY-D215:
scripts/gatemolebench.sh#L583
User-controlled shell path reaches a filesystem sink without basename or canonical path validation.
|
|
Skylos SKY-D215:
scripts/gatemolebench.sh#L568
User-controlled shell path reaches a filesystem sink without basename or canonical path validation.
|
|
Skylos SKY-D215:
scripts/gatemolebench.sh#L567
User-controlled shell path reaches a filesystem sink without basename or canonical path validation.
|
|
Skylos SKY-D215:
scripts/gatemolebench.sh#L556
User-controlled shell path reaches a filesystem sink without basename or canonical path validation.
|
|
Skylos SKY-D215:
scripts/gatemolebench.sh#L109
User-controlled shell path reaches a filesystem sink without basename or canonical path validation.
|
|
Skylos SKY-D215:
scripts/gatemolebench-repo.sh#L117
User-controlled shell path reaches a filesystem sink without basename or canonical path validation.
|
|
Skylos SKY-S101:
internal/kernel/sandbox/model_broker.go#L133
High-entropy value detected (entropy=3.95)
|
|
Skylos Analysis Incomplete:
cmd/gatemole-model-broker/main.go#L1
Go analysis incomplete: Go engine binary not found (skylos-go). Skipped checks: dead code, security.
|
|
Go checks
api.Server.Handler calls http.ServeMux.HandleFunc
|
|
Go checks
api.Server.Handler calls http.ServeMux.HandleFunc
|
|
Go checks
client.Client.newRequest calls http.NewRequestWithContext
|
|
Go checks
client.Client.newRequest calls http.NewRequestWithContext
|
|
Go checks
client.Client.newRequest calls http.Header.Set
|
|
Go checks
client.Client.newRequest calls http.Header.Set
|
|
Go checks
client.Client.GetTransactionDiff calls http.Header.Get
|
|
Go checks
client.Client.GetTransactionDiff calls http.Header.Get
|
|
Go checks
client.Client.GetTransactionDiff calls http.Client.Do
|
|
Go checks
client.Client.GetTransactionDiff calls http.Client.Do
|
|
Kernel race tests
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
|
GatemoleKernelBench acceptance
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
|
GatemoleTransactionBench acceptance
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
|
Skylos Dependency Coverage
Dependency inventory: 12 packages queried · 0 supported lockfiles read · 0 manifest versions unresolved · 0 lockfile entries unresolved · 0 non-registry entries not queried · 0 lockfile entries not checked · 0 parse errors · 0 unsupported lockfiles | Dependency next step: for unresolved public-package versions, provide a supported lockfile (e.g. uv.lock, poetry.lock or package-lock.json) or exact manifest versions; version ranges are not resolved | Dependency scope: recorded versions only; installed environment, lockfile freshness and runtime reachability are not verified
|
|
Skylos Assessment
Risk: CRITICAL · 26 unresolved findings | Maintainability: 673 advice · 11 checks · 131 affected files | Dead code: Unknown · dead-code checks are incomplete | Gate: Not evaluated · use --gate to check configured limits | Coverage: incomplete; incomplete: security, quality, dead_code, ai_defects, dependencies, secrets; absence of findings does not establish a clean repository
|
|
Skylos advisory
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
|
GatemoleRuntimeBench acceptance
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
|
GatemoleBench acceptance
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
|
Go checks
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
|
Production OCI acceptance
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
gatemolebench-results
|
6.31 KB |
sha256:2bbf027c5baaf89d3cf8218884cf3f826b2269cc48847a584786955745290adf
|
|
|
gatemolekernelbench-results
|
795 Bytes |
sha256:f79beac2b1c2560fbc6be6ca106c3ab06f3211ca6dfaca08a5591f4d8f814f14
|
|
|
skylos-sarif
|
5.37 KB |
sha256:6be789a411a3ff2479c1f9f6d0de3aecf9a195a797e37582b838396840fcffa2
|
|