github-actions-test-jobs
Warn
Audited by Socket on Oct 2, 2026
1 alert found:
AnomalyAnomalyevals/test-artifacts-vanish-exactly-when-the-run-is-red/task.md
LOWAnomalyLOW
evals/test-artifacts-vanish-exactly-when-the-run-is-red/task.md
The fragment shows a significant CI release-integrity weakness: a run with six failing unit tests is marked successful, and its image is promoted to :latest despite a skipped failure-enforcement step. Because :latest is consumed by staging and other users, this can deploy unverified or defective code. The evidence indicates unsafe or misconfigured release behavior, not clear malware or intentional sabotage; the reason for the skipped gate is not established by this fragment.
Confidence: 96%Severity: 68%
Audit Metadata