chore(guix): quality pass - fix stub/invalid names (#139)

[hyperpolymath]

Automated Guix-quality pass to fix invalid names and populate dependencies from mise.toml/.tool-versions.

[gitar-bot]

Important

You are using the Gitar free plan. Upgrade to unlock code review, CI analysis, auto-apply, custom automations, and more.

_Gitar

[github-actions]

🔍 Hypatia Security Scan

Findings: 48 issues detected

Severity	Count
🔴 Critical	6
🟠 High	25
🟡 Medium	17

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "No test directory or test files found",
    "type": "no_tests",
    "file": "/home/runner/work/docmatrix/docmatrix",
    "action": "flag",
    "rule_module": "honest_completion",
    "severity": "high",
    "deduction": 20
  },
  {
    "reason": "Issue in push-email-notify.yml",
    "type": "missing_timeout_minutes",
    "file": "push-email-notify.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in instant-sync.yml",
    "type": "secret_action_without_presence_gate",
    "file": "instant-sync.yml",
    "action": "peter-evans/repository-dispatch",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "unwrap() without prior check -- DoS via panic (2 occurrences, CWE-754)",
    "type": "unwrap_without_check",
    "file": "/home/runner/work/docmatrix/docmatrix/crates/formatrix-core/src/formats/djot.rs",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "high"
  },
  {
    "reason": "from_raw constructs types from raw pointers without safety checks (2 occurrences, CWE-676)",
    "type": "from_raw",
    "file": "/home/runner/work/docmatrix/docmatrix/crates/formatrix-core/src/ffi.rs",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "high"
  },
  {
    "reason": "as_ptr exposes raw pointer that may dangle or alias unsafely (8 occurrences, CWE-676)",
    "type": "as_ptr",
    "file": "/home/runner/work/docmatrix/docmatrix/crates/formatrix-core/src/ffi.rs",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD004 -- Hypatia structural_drift: SD004 -- 7 day(s) old",
    "type": "CSA001",
    "file": ".machine_readable/6a2/PLAYBOOK.a2ml",
    "action": "update",
    "rule_module": "code_scanning_alerts",
    "severity": "high"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD004 -- Hypatia structural_drift: SD004 -- 7 day(s) old",
    "type": "CSA001",
    "file": ".machine_readable/6a2/NEUROSYM.a2ml",
    "action": "update",
    "rule_module": "code_scanning_alerts",
    "severity": "high"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD004 -- Hypatia structural_drift: SD004 -- 7 day(s) old",
    "type": "CSA001",
    "file": ".machine_readable/6a2/AGENTIC.a2ml",
    "action": "update",
    "rule_module": "code_scanning_alerts",
    "severity": "high"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/structural_drift/SD004 -- Hypatia structural_drift: SD004 -- 7 day(s) old",
    "type": "CSA001",
    "file": ".machine_readable/6a2/ECOSYSTEM.a2ml",
    "action": "update",
    "rule_module": "code_scanning_alerts",
    "severity": "high"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence