Repository navigation
chore(deps): bump nixpkgs from 9ae611a to 567a49d
#43
dependabot[bot]governance.yml
on: pull_request
governance
/
Check Workflow Staleness
6s
governance
/
Validate Hypatia Baseline
0s
Annotations
6 errors
|
governance / Check Workflow Staleness
Process completed with exit code 1.
|
|
governance / Check Workflow Staleness
Remove legacy scorecard-enforcer.yml, refresh out-of-window standards reusable pins toward a recent commit, and keep Scorecard out of GitHub Code Scanning unless it runs for every PR head commit.
|
|
governance / Check Workflow Staleness:
./.github/workflows/scorecard.yml#L0
scorecard-reusable.yml pin e0caf11508a3 is 134 commit(s) / 26d behind standards HEAD — outside the recency window (>50 commits AND >14d). Refresh toward 09e7023d2468 (e.g. scripts/propagate-workflow-pins.sh).
|
|
governance / Check Workflow Staleness:
./.github/workflows/scorecard-enforcer.yml#L0
OSSF Scorecard must not upload SARIF to GitHub Code Scanning unless it runs for every PR head commit.
|
|
governance / Check Workflow Staleness:
./.github/workflows/hypatia-scan.yml#L0
hypatia-scan-reusable.yml pin 97df76210750 is not a recognised ancestor of standards HEAD (09e7023d2468). It may be forged, from a fork, or too divergent to verify. Pin a published standards commit.
|
|
governance / Check Workflow Staleness
scorecard-enforcer.yml is retired. Use scorecard.yml -> standards scorecard-reusable.yml instead.
|