github-actions-test-jobs

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Anomaly
AnomalyLOW
evals/test-artifacts-vanish-exactly-when-the-run-is-red/task.md

The fragment shows a significant CI release-integrity weakness: a run with six failing unit tests is marked successful, and its image is promoted to :latest despite a skipped failure-enforcement step. Because :latest is consumed by staging and other users, this can deploy unverified or defective code. The evidence indicates unsafe or misconfigured release behavior, not clear malware or intentional sabotage; the reason for the skipped gate is not established by this fragment.

Confidence: 96%Severity: 68%
Audit Metadata
Analyzed At
Oct 2, 2026, 10:02 AM
Package URL
pkg:socket/skills-sh/testland%2Fqa%2Fgithub-actions-test-jobs%2F@3ead3a3c2ff9283baed7de7544438d5819186a27d75f4fb8b7b39a858da953a3