ShipShadow

ShipShadow proof

hisopo/go-and-do

Repository
hisopo/go-and-do
Head SHA
e3b4a41941a97df12f4e1b3c79fe40580cd182f0
Branch
prod
Status
completed
Conclusion
failure
Run
run_745e83c3ac4305a37afe738c

Gate Results

GateConclusionSummary
ShipShadow / Policy Gate action_required Protected release paths changed (src/engine/time.ts, src/render3d/GameView3D.ts). Add .shipshadow/release-evidence.md with the verification evidence for this publication.
ShipShadow / Publish Gate failure Publication is blocked by: ShipShadow / Security Gate, ShipShadow / Policy Gate.
ShipShadow / Secret Gate success Changed-file content passed the ShipShadow secret gate.
ShipShadow / Security Gate failure 6 blocking findings from an earlier commit on this repository have not been resolved: HIGH CWE-326-ALL-005 in src/i18n/bible33Phrases.json (introduced in 9c4e8f2) HIGH CWE-326-ALL-005 in src/i18n/mission24Phrases.json (introduced in 48853e3) HIGH CWE-326-ALL-005 in src/i18n/mission26Phrases.json (introduced in 48853e3) HIGH CWE-451-ALL-003 in src/ui/ui.css (introduced in 575b1ae) HIGH CWE-338-ALL-001 in scripts/qc/lina-bom-chapters-5-8/captureBand.mjs (introduced in e061078) HIGH CWE-338-ALL-001 in scripts/qc/lina-bom-chapters-5-8/recaptureClear.mjs (introduced in e061078) This commit did not change the file, so ShipShadow did not re-scan it and the finding still stands. Resolve it by fixing the file - the next run that changes it will re-scan and clear the finding - or, if it is a confirmed false positive, adjudicate it in the installation FP registry or reproduce a reviewed content-bound override with a fresh scan.