ShipShadow proof

hisopo/monthly-move

Repository

hisopo/monthly-move

Head SHA

fa9872b9853d38951103dfd78de22dad93b776c4

Branch

prod

Status

completed

Conclusion

failure

Run

run_8954a4f5e896c25fa3563728

Gate Results

Gate	Conclusion	Summary
ShipShadow / Policy Gate	success	No blocked workflow or release-evidence policy violations were found.
ShipShadow / Publish Gate	failure	Publication is blocked by: ShipShadow / Security Gate.
ShipShadow / Secret Gate	success	Changed-file content passed the ShipShadow secret gate.
ShipShadow / Security Gate	failure	CRITICAL CWE-798-021 in .env.example HIGH CWE-326-ALL-005 in lib/geocode.ts HIGH CWE-601-ALL-002 in lib/storage.ts HIGH CWE-601-ALL-002 in lib/supabase.ts HIGH H10 in lib/supabase.ts 9 blocking findings from an earlier commit on this repository have not been resolved: CRITICAL CWE-798-021 in .env.example (introduced in 94808ab) HIGH CWE-326-ALL-005 in lib/geocode.ts (introduced in 94808ab) HIGH CWE-326-ALL-005 in lib/mock-listings.ts (introduced in 94808ab) HIGH CWE-601-ALL-002 in lib/storage.ts (introduced in 94808ab) HIGH CWE-601-ALL-002 in lib/types.ts (introduced in 94808ab) HIGH H10 in lib/sources/airbnb.ts (introduced in 94808ab) HIGH H10 in lib/sources/furnished-finder.ts (introduced in 94808ab) HIGH CWE-601-ALL-002 in lib/supabase.ts (introduced in fa9872b) HIGH H10 in lib/supabase.ts (introduced in fa9872b) This commit did not change the file, so ShipShadow did not re-scan it and the finding still stands. Resolve it by fixing the file - the next run that changes it will re-scan and clear the finding - or, if it is a confirmed false positive, adjudicate it in the installation FP registry or reproduce a reviewed content-bound override with a fresh scan.