Repository
hisopo/go-and-doShipShadow proof
hisopo/go-and-do
Gate Results
| Gate | Conclusion | Summary |
|---|---|---|
| ShipShadow / Policy Gate | success | No blocked workflow or release-evidence policy violations were found. |
| ShipShadow / Publish Gate | failure | Publication is blocked by: ShipShadow / Security Gate. |
| ShipShadow / Secret Gate | success | Changed-file content passed the ShipShadow secret gate. |
| ShipShadow / Security Gate | failure | 9 blocking findings from an earlier commit on this repository have not been resolved: HIGH CWE-1240-ALL-005 in scripts/workerProductAcceptance.mjs (introduced in dd2fd12) HIGH CWE-325-ALL-002 in scripts/workerProductAcceptance.mjs (introduced in dd2fd12) HIGH CWE-89-ALL-005 in scripts/workerProductAcceptance.mjs (introduced in dd2fd12) HIGH CWE-89-ALL-006 in scripts/workerProductAcceptance.mjs (introduced in dd2fd12) HIGH CWE-328-ALL-003 in worker/index.ts (introduced in dd2fd12) HIGH CWE-614-ALL-003 in worker/index.ts (introduced in dd2fd12) HIGH CWE-89-ALL-005 in worker/index.ts (introduced in dd2fd12) HIGH CWE-89-ALL-006 in worker/index.ts (introduced in dd2fd12) HIGH H12 in scripts/workerProductAcceptance.mjs (introduced in dd2fd12) This commit did not change the file, so ShipShadow did not re-scan it and the finding still stands. Resolve it by fixing the file - the next run that changes it will re-scan and clear the finding - or, if it is a confirmed false positive, adjudicate it in the installation FP registry or reproduce a reviewed content-bound override with a fresh scan. |