Skip to content

chore: remove accidentally-tracked runtime artifacts in impl/rust-cli/ - #75

Merged
hyperpolymath merged 1 commit into
mainfrom
chore/remove-accidental-artifacts-2026-06-01
Jun 1, 2026
Merged

chore: remove accidentally-tracked runtime artifacts in impl/rust-cli/#75
hyperpolymath merged 1 commit into
mainfrom
chore/remove-accidental-artifacts-2026-06-01

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

Summary

Two files slipped into the tree via #73 (cargo fmt sweep) when a prior `vsh` test session left runtime state behind that `git add -A` captured:

  • `impl/rust-cli/$FILE` (5 bytes, literal `test\n`) — the result of an unescaped `> $FILE` shell redirection
  • `impl/rust-cli/.vsh_state.json` (414 bytes) — the vsh transaction history from that test session, references `/var$REPOS_DIR/valence-shell/impl/rust-cli/$FILE` in its history

Add `.vsh_state.json` and `$FILE` to root `.gitignore` so this can't recur.

Test plan

  • Both files are now untracked-by-rule (gitignore) and removed from the tree
  • Auto-merge `--squash --delete-branch` enabled

Two files slipped into the tree via #73 (cargo fmt sweep agent) when a
prior `vsh` test session left runtime state behind that `git add -A`
captured:
- `impl/rust-cli/$FILE` (5 bytes, literal "test\n") — the result of
an unescaped `> $FILE` shell redirection
- `impl/rust-cli/.vsh_state.json` (414 bytes) — the vsh transaction
history from that test session
Add `.vsh_state.json` and `$FILE` to root `.gitignore` so this can't
recur.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@hyperpolymath
hyperpolymath enabled auto-merge (squash) June 1, 2026 19:29
@hyperpolymath
hyperpolymath merged commit 6fd059a into mainJun 1, 2026
25 of 55 checks passed
@hyperpolymath
hyperpolymath deleted the chore/remove-accidental-artifacts-2026-06-01 branch June 1, 2026 19:40
@github-actions

Copy link
Copy Markdown

🔍 Hypatia Security Scan

Findings: 134 issues detected

SeverityCount
🔴 Critical10
🟠 High24
🟡 Medium100

⚠️Action Required: Critical security issues found!

View findings
[
{
"reason": "Action perpolymath/standards/.github/workflows/governance-reusable.yml@main\n needs attention",
"type": "unpinned_action",
"file": "governance.yml",
"action": "pin_sha",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Workflow executes remote script directly (curl/wget piped to shell). Download, verify checksum/signature, then execute.",
"type": "download_then_run",
"file": "lean-verification.yml",
"action": "verify_download_integrity",
"rule_module": "workflow_audit",
"severity": "high"
},
{
"reason": "Workflow executes remote script directly (curl/wget piped to shell). Download, verify checksum/signature, then execute.",
"type": "download_then_run",
"file": "rust-cli.yml",
"action": "verify_download_integrity",
"rule_module": "workflow_audit",
"severity": "high"
},
{
"reason": "Issue in boj-build.yml",
"type": "missing_timeout_minutes",
"file": "boj-build.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in casket-pages.yml",
"type": "missing_timeout_minutes",
"file": "casket-pages.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in casket-pages.yml",
"type": "missing_timeout_minutes",
"file": "casket-pages.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in cflite_batch.yml",
"type": "missing_timeout_minutes",
"file": "cflite_batch.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in cflite_pr.yml",
"type": "missing_timeout_minutes",
"file": "cflite_pr.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in codeql.yml",
"type": "missing_timeout_minutes",
"file": "codeql.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in compilation_tests.yml",
"type": "missing_timeout_minutes",
"file": "compilation_tests.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
}
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@hyperpolymath