New scanner module content_patterns flags hardcoded /tmp/ paths (recommends mktemp). 30 instances across scripts and docs — acknowledged as tracked debt pending a systematic pass.
Acknowledged in .hypatia-baseline.json (hypatia triage 2026-09-22, expires 2026-12-22) by the main-red fix-forward. This issue is the tracking item; closing it requires either remediating the instances or renewing the acknowledgement.
Instances (30):
content_patterns/hardcoded_tmp medium — 1-formats/sub-specs/inline-annotations/extractor/batch-extract.sh
Hardcoded /tmp/ paths -- use mktempcontent_patterns/hardcoded_tmp medium — docs/UX-standards/comprehensive-launcher-template.sh
Hardcoded /tmp/ paths -- use mktempcontent_patterns/hardcoded_tmp medium — docs/UX-standards/comprehensive-launcher-template.sh
Hardcoded /tmp/ paths -- use mktempcontent_patterns/hardcoded_tmp medium — docs/UX-standards/dustfile-template.sh
Hardcoded /tmp/ paths -- use mktempcontent_patterns/hardcoded_tmp medium — docs/UX-standards/dustfile-template.sh
Hardcoded /tmp/ paths -- use mktempcontent_patterns/hardcoded_tmp medium — docs/UX-standards/e-grade-launcher-template.sh
Hardcoded /tmp/ paths -- use mktempcontent_patterns/hardcoded_tmp medium — launcher/soft-attach.sh
Hardcoded /tmp/ paths -- use mktempcontent_patterns/hardcoded_tmp medium — rhodium-standard-repositories/ux-test-harness/run-ux-test.sh
Hardcoded /tmp/ paths -- use mktempcontent_patterns/hardcoded_tmp medium — rhodium-standard-repositories/ux-test-harness/test-repo.sh
Hardcoded /tmp/ paths -- use mktempcontent_patterns/hardcoded_tmp medium — rhodium-standard-repositories/ux-test-harness/test-repo.sh
Hardcoded /tmp/ paths -- use mktempcontent_patterns/hardcoded_tmp medium — scripts/check-lockfile-drift.sh
Hardcoded /tmp/ paths -- use mktempcontent_patterns/hardcoded_tmp medium — scripts/check-lockfile-drift.sh
Hardcoded /tmp/ paths -- use mktempcontent_patterns/hardcoded_tmp medium — scripts/check-lockfile-drift.sh
Hardcoded /tmp/ paths -- use mktempcontent_patterns/hardcoded_tmp medium — scripts/check-lockfile-drift.sh
Hardcoded /tmp/ paths -- use mktempcontent_patterns/hardcoded_tmp medium — scripts/check-lockfile-drift.sh
Hardcoded /tmp/ paths -- use mktempcontent_patterns/hardcoded_tmp medium — scripts/check-lockfile-drift.sh
Hardcoded /tmp/ paths -- use mktempcontent_patterns/hardcoded_tmp medium — scripts/check-lockfile-drift.sh
Hardcoded /tmp/ paths -- use mktempcontent_patterns/hardcoded_tmp medium — scripts/registry-readiness.sh
Hardcoded /tmp/ paths -- use mktempcontent_patterns/hardcoded_tmp medium — scripts/registry-readiness.sh
Hardcoded /tmp/ paths -- use mktempcontent_patterns/hardcoded_tmp medium — scripts/registry-readiness.sh
Hardcoded /tmp/ paths -- use mktempcontent_patterns/hardcoded_tmp medium — scripts/sweep-classifiers/classify-codeql.sh
Hardcoded /tmp/ paths -- use mktempcontent_patterns/hardcoded_tmp medium — scripts/sweep-classifiers/classify-codeql.sh
Hardcoded /tmp/ paths -- use mktempcontent_patterns/hardcoded_tmp medium — scripts/sweep-classifiers/classify-hypatia-scan.sh
Hardcoded /tmp/ paths -- use mktempcontent_patterns/hardcoded_tmp medium — scripts/sweep-classifiers/classify-hypatia-scan.sh
Hardcoded /tmp/ paths -- use mktempcontent_patterns/hardcoded_tmp medium — scripts/sweep-classifiers/classify-mirror.sh
Hardcoded /tmp/ paths -- use mktempcontent_patterns/hardcoded_tmp medium — scripts/sweep-classifiers/classify-mirror.sh
Hardcoded /tmp/ paths -- use mktempcontent_patterns/hardcoded_tmp medium — scripts/sweep-classifiers/classify-mirror.sh
Hardcoded /tmp/ paths -- use mktempcontent_patterns/hardcoded_tmp medium — scripts/sweep-classifiers/classify-secret-scanner.sh
Hardcoded /tmp/ paths -- use mktempcontent_patterns/hardcoded_tmp medium — scripts/sweep-classifiers/classify-secret-scanner.sh
Hardcoded /tmp/ paths -- use mktempcontent_patterns/hardcoded_tmp medium — scripts/sweep-classifiers/list-workflow-paths.sh
Hardcoded /tmp/ paths -- use mktemp
New scanner module
content_patternsflags hardcoded/tmp/paths (recommendsmktemp). 30 instances across scripts and docs — acknowledged as tracked debt pending a systematic pass.Acknowledged in
.hypatia-baseline.json(hypatia triage 2026-09-22, expires 2026-12-22) by the main-red fix-forward. This issue is the tracking item; closing it requires either remediating the instances or renewing the acknowledgement.Instances (30):
content_patterns/hardcoded_tmpmedium —1-formats/sub-specs/inline-annotations/extractor/batch-extract.shHardcoded /tmp/ paths -- use mktemp
content_patterns/hardcoded_tmpmedium —docs/UX-standards/comprehensive-launcher-template.shHardcoded /tmp/ paths -- use mktemp
content_patterns/hardcoded_tmpmedium —docs/UX-standards/comprehensive-launcher-template.shHardcoded /tmp/ paths -- use mktemp
content_patterns/hardcoded_tmpmedium —docs/UX-standards/dustfile-template.shHardcoded /tmp/ paths -- use mktemp
content_patterns/hardcoded_tmpmedium —docs/UX-standards/dustfile-template.shHardcoded /tmp/ paths -- use mktemp
content_patterns/hardcoded_tmpmedium —docs/UX-standards/e-grade-launcher-template.shHardcoded /tmp/ paths -- use mktemp
content_patterns/hardcoded_tmpmedium —launcher/soft-attach.shHardcoded /tmp/ paths -- use mktemp
content_patterns/hardcoded_tmpmedium —rhodium-standard-repositories/ux-test-harness/run-ux-test.shHardcoded /tmp/ paths -- use mktemp
content_patterns/hardcoded_tmpmedium —rhodium-standard-repositories/ux-test-harness/test-repo.shHardcoded /tmp/ paths -- use mktemp
content_patterns/hardcoded_tmpmedium —rhodium-standard-repositories/ux-test-harness/test-repo.shHardcoded /tmp/ paths -- use mktemp
content_patterns/hardcoded_tmpmedium —scripts/check-lockfile-drift.shHardcoded /tmp/ paths -- use mktemp
content_patterns/hardcoded_tmpmedium —scripts/check-lockfile-drift.shHardcoded /tmp/ paths -- use mktemp
content_patterns/hardcoded_tmpmedium —scripts/check-lockfile-drift.shHardcoded /tmp/ paths -- use mktemp
content_patterns/hardcoded_tmpmedium —scripts/check-lockfile-drift.shHardcoded /tmp/ paths -- use mktemp
content_patterns/hardcoded_tmpmedium —scripts/check-lockfile-drift.shHardcoded /tmp/ paths -- use mktemp
content_patterns/hardcoded_tmpmedium —scripts/check-lockfile-drift.shHardcoded /tmp/ paths -- use mktemp
content_patterns/hardcoded_tmpmedium —scripts/check-lockfile-drift.shHardcoded /tmp/ paths -- use mktemp
content_patterns/hardcoded_tmpmedium —scripts/registry-readiness.shHardcoded /tmp/ paths -- use mktemp
content_patterns/hardcoded_tmpmedium —scripts/registry-readiness.shHardcoded /tmp/ paths -- use mktemp
content_patterns/hardcoded_tmpmedium —scripts/registry-readiness.shHardcoded /tmp/ paths -- use mktemp
content_patterns/hardcoded_tmpmedium —scripts/sweep-classifiers/classify-codeql.shHardcoded /tmp/ paths -- use mktemp
content_patterns/hardcoded_tmpmedium —scripts/sweep-classifiers/classify-codeql.shHardcoded /tmp/ paths -- use mktemp
content_patterns/hardcoded_tmpmedium —scripts/sweep-classifiers/classify-hypatia-scan.shHardcoded /tmp/ paths -- use mktemp
content_patterns/hardcoded_tmpmedium —scripts/sweep-classifiers/classify-hypatia-scan.shHardcoded /tmp/ paths -- use mktemp
content_patterns/hardcoded_tmpmedium —scripts/sweep-classifiers/classify-mirror.shHardcoded /tmp/ paths -- use mktemp
content_patterns/hardcoded_tmpmedium —scripts/sweep-classifiers/classify-mirror.shHardcoded /tmp/ paths -- use mktemp
content_patterns/hardcoded_tmpmedium —scripts/sweep-classifiers/classify-mirror.shHardcoded /tmp/ paths -- use mktemp
content_patterns/hardcoded_tmpmedium —scripts/sweep-classifiers/classify-secret-scanner.shHardcoded /tmp/ paths -- use mktemp
content_patterns/hardcoded_tmpmedium —scripts/sweep-classifiers/classify-secret-scanner.shHardcoded /tmp/ paths -- use mktemp
content_patterns/hardcoded_tmpmedium —scripts/sweep-classifiers/list-workflow-paths.shHardcoded /tmp/ paths -- use mktemp