ShipShadow proof

hisopo/elbato

Repository

hisopo/elbato

Head SHA

38285e6a38c39c26b672c3de8b7bcd56e0e8219a

Branch

dev

Status

completed

Conclusion

failure

Run

run_46eb1bca4b35b0af6d936158

Gate Results

Gate	Conclusion	Summary
ShipShadow / CR Routing Gate	failure	This changeset has routed paths but no changed or cited change-record document. This check is advisory.
ShipShadow / Change Request Gate	failure	No configured pull request field contains a valid change request identifier. This check is advisory.
ShipShadow / Policy Gate	success	No blocked workflow or release-evidence policy violations were found.
ShipShadow / Publish Gate	failure	Publication is blocked by: ShipShadow / Security Gate.
ShipShadow / Secret Gate	success	Changed-file content passed the ShipShadow secret gate.
ShipShadow / Security Gate	failure	HIGH CWE-99-ALL-001 in scripts/codex_handoff_worker.py CRITICAL SQLI-CONCAT-001 in scripts/codex_handoff_worker.py HIGH CWE-915-ALL-001 in tests/test_codex_handoff_worker.py HIGH CWE-99-ALL-001 in tests/test_codex_handoff_worker.py 68 blocking findings from an earlier commit on this repository have not been resolved: CRITICAL AI03-001 in tests/test_change_control_hygiene.py (introduced in 0bd8b68) HIGH AI-FLOW-MODEL in elbato/exec_runtime.py (introduced in 8403e38) HIGH CWE-394-ALL-001 in mac_daemons/bin/elbato_range_gate_runner.py (introduced in 131c019) CRITICAL AI03-001 in tests/test_fleet_push_gate.py (introduced in ae1bc33) HIGH AI-FLOW-MODEL in elbato/llm_runner.py (introduced in 5a7e67e) HIGH AI-CONV-UNBOUNDE in elbato/llm_runner.py (introduced in 5a7e67e) HIGH CWE-99-ALL-001 in elbato/qa_candidate_reconciliation.py (introduced in 6bf253c) HIGH CWE-915-ALL-001 in tests/test_codex_handoff_worker.py (introduced in 6bf253c) HIGH CWE-99-ALL-001 in tests/test_codex_handoff_worker.py (introduced in 6bf253c) HIGH P01-004 in scripts/promote_change.py (introduced in 8ad3ce2) HIGH CWE-394-ALL-001 in scripts/verify_fleet_prod_boundary_installed.py (introduced in 8ad3ce2) CRITICAL AI03-001 in tests/test_cf_apply.py (introduced in 8ad3ce2) CRITICAL AI03-001 in tests/test_install_fleet_prod_boundary.py (introduced in 8ad3ce2) HIGH CWE-80-ALL-003 in tests/test_install_fleet_prod_boundary.py (introduced in 8ad3ce2) CRITICAL AI03-001 in tests/test_promote_change.py (introduced in 8ad3ce2) HIGH XF04 in tests/test_canonical_runtime_exec.py (introduced in 8ad3ce2) CRITICAL H25 in scripts/promote_change.py (introduced in 8ad3ce2) HIGH P01-004 in scripts/siteshadow_qa_runner_control_guard.py (introduced in 8e12922) HIGH CWE-915-ALL-001 in tests/test_siteshadow_qa_runner_control_guard.py (introduced in 8e12922) HIGH CWE-99-ALL-001 in scripts/codex_handoff_worker.py (introduced in 3b8d847) CRITICAL AI01-005 in elbato/qa_candidate_reconciliation.py (introduced in 746aa55) CRITICAL AI03-001 in elbato/dogfood_fp_remediation_sweep.py (introduced in 72eafe5) HIGH CWE-676-ALL-006 in elbato/dogfood_fp_remediation_sweep.py (introduced in 72eafe5) HIGH AI02-009 in elbato/exec_tasks.py (introduced in 72eafe5) HIGH AI-CONV-UNBOUNDE in elbato/garbage_collector.py (introduced in 72eafe5) HIGH CWE-294-ALL-001 in elbato/shipshadow_integration.py (introduced in 72eafe5) HIGH AI-TOOLINJ-TRUST in elbato/shipshadow_integration.py (introduced in 72eafe5) HIGH P01-004 in elbato/shipshadow_integration_cli.py (introduced in 72eafe5) HIGH AI02-009 in elbato/subagents/siteshadow_cto.py (introduced in 72eafe5) CRITICAL AI03-013 in elbato/subagents/siteshadow_cto.py (introduced in 72eafe5) CRITICAL AI03-001 in elbato/theo_fp_benchmark.py (introduced in 72eafe5) CRITICAL H10 in elbato/shipshadow_integration.py (introduced in 72eafe5) HIGH P01-004 in mac_daemons/bin/fleet_suppression_fn_gate.py (introduced in 72eafe5) HIGH P01-004 in mac_daemons/bin/siteshadow_api_gate.py (introduced in 72eafe5) CRITICAL AI03-009 in mac_daemons/bin/siteshadow_gate_runner.py (introduced in 72eafe5) HIGH CWE-80-ALL-003 in mac_daemons/bin/siteshadow_gate_runner.py (introduced in 72eafe5) HIGH CWE-99-ALL-001 in mac_daemons/bin/siteshadow_gate_runner.py (introduced in 72eafe5) HIGH GRPC05-004 in mac_daemons/bin/siteshadow_gate_runner.py (introduced in 72eafe5) CRITICAL AI-LOOP-INFINITE in mac_daemons/bin/siteshadow_prod_promote.py (introduced in 72eafe5) HIGH CWE-215-ALL-001 in mac_daemons/bin/theo_gate_attest.py (introduced in 72eafe5) HIGH CWE-325-ALL-002 in mac_daemons/bin/theo_gate_attest.py (introduced in 72eafe5) HIGH CWE-394-ALL-001 in mac_daemons/bin/theo_gate_attest.py (introduced in 72eafe5) HIGH CWE-532-ALL-001 in mac_daemons/bin/theo_gate_attest.py (introduced in 72eafe5) CRITICAL AI-LOOP-INFINITE in scripts/check_pages_production_branch_drift.py (introduced in 72eafe5) HIGH A08-001 in scripts/deploy_elbato_labs_site.sh (introduced in 72eafe5) CRITICAL AI03-001 in tests/test_change_control_product_repo.py (introduced in 72eafe5) HIGH CWE-550-ALL-001 in tests/test_change_control_product_repo.py (introduced in 72eafe5) CRITICAL AI03-001 in tests/test_dogfood_fp_remediation_sweep.py (introduced in 72eafe5) HIGH CWE-676-ALL-006 in tests/test_dogfood_fp_remediation_sweep.py (introduced in 72eafe5) HIGH CWE-532-ALL-001 in tests/test_product_api_auto_deploy.py (introduced in 72eafe5) HIGH CWE-918-003 in tests/test_shipshadow_integration.py (introduced in 72eafe5) HIGH CWE-80-ALL-003 in tests/test_shipshadow_legacy_mutation_guard.py (introduced in 72eafe5) HIGH XF04 in scripts/deploy_fallback_telegram.sh (introduced in 72eafe5) HIGH XF04 in scripts/deploy_llm_telemetry_worker.sh (introduced in 72eafe5) HIGH H12 in scripts/deploy_fallback_telegram.sh (introduced in 72eafe5) HIGH H12 in scripts/deploy_llm_telemetry_worker.sh (introduced in 72eafe5) CRITICAL H25 in scripts/shipshadow_integration_pre_push_guard.py (introduced in 72eafe5) HIGH CWE-915-ALL-001 in tests/test_siteshadow_prod_promote.py (introduced in 72eafe5) CRITICAL AI03-001 in tests/test_theo_fp_benchmark.py (introduced in 72eafe5) HIGH CWE-915-ALL-001 in tests/test_theo_fp_benchmark.py (introduced in 72eafe5) HIGH AI-LOOP-RECURSIV in elbato/evals/operating_rules/harness.py (introduced in 9482bfd) HIGH CWE-676-ALL-006 in elbato/valentina_site_leadership_planner.py (introduced in 9482bfd) CRITICAL AI03-022 in mac_daemons/bin/goanddo_prod_promote_deploy.py (introduced in 9d74c48) HIGH P01-004 in scripts/siteshadow_api_benchmark.py (introduced in a384fe1) CRITICAL AI03-001 in elbato/siteshadow_waf_control.py (introduced in b419d49) CRITICAL AI03-007 in mac_daemons/bin/siteshadow_worker_binding_guard.py (introduced in b419d49) HIGH CWE-394-ALL-001 in mac_daemons/bin/siteshadow_worker_binding_guard.py (introduced in b419d49) HIGH CWE-394-ALL-001 in scripts/reconcile_siteshadow_waf.py (introduced in b419d49) This commit did not change the file, so ShipShadow did not re-scan it and the finding still stands. Resolve it by fixing the file - the next run that changes it will re-scan and clear the finding - or, if it is a confirmed false positive, adjudicate it in the installation FP registry or reproduce a reviewed content-bound override with a fresh scan.