Skip to content

fix(ci): update reusable workflow SHAs to @7fdc2705df74b4e352d2a1cde3e87a5923fdf329 #78

fix(ci): update reusable workflow SHAs to @7fdc2705df74b4e352d2a1cde3e87a5923fdf329

fix(ci): update reusable workflow SHAs to @7fdc2705df74b4e352d2a1cde3e87a5923fdf329 #78

Triggered via pull request August 13, 2026 04:01
Status Failure
Total duration 45s
Artifacts –

governance.yml

on: pull_request
governance  /  Check Workflow Staleness
13s
governance / Check Workflow Staleness
governance  /  Allowlist Preflight
5s
governance / Allowlist Preflight
governance  /  ...  /  package anti-pattern policy
15s
governance / Language / package anti-pattern policy
governance  /  Guix packaging policy (Nix retired)
10s
governance / Guix packaging policy (Nix retired)
governance  /  Security policy checks
5s
governance / Security policy checks
governance  /  Code quality + docs
6s
governance / Code quality + docs
governance  /  Well-Known (RFC 9116 + RSR)
7s
governance / Well-Known (RFC 9116 + RSR)
governance  /  Workflow security linter
21s
governance / Workflow security linter
governance  /  Trusted-base reduction policy
9s
governance / Trusted-base reduction policy
governance  /  Licence consistency
8s
governance / Licence consistency
governance  /  Validate Hypatia Baseline
0s
governance / Validate Hypatia Baseline
Fit to window
Zoom out
Zoom in

Annotations

4 errors and 2 notices
governance / Check Workflow Staleness
Process completed with exit code 1.
governance / Check Workflow Staleness
Staleness gate failed. Each error above names a specific defect: a pin predating a known false-green fix (refresh it — waiting will not help), a pin that is not a published standards commit, a retired scorecard-enforcer.yml, or Scorecard uploading SARIF to Code Scanning. Pins that are merely old are reported as notices and do not fail.
governance / Check Workflow Staleness: ./.github/workflows/scorecard.yml#L0
scorecard-reusable.yml pin 7fdc2705df74 is not a commit of hyperpolymath/standards reachable from main (confirmed against the GitHub compare API, not just this runner's clone). It may be forged, from a fork, or from rewritten history. Pin a published standards commit.
governance / Check Workflow Staleness: ./.github/workflows/governance.yml#L0
governance-reusable.yml pin 7fdc2705df74 is not a commit of hyperpolymath/standards reachable from main (confirmed against the GitHub compare API, not just this runner's clone). It may be forged, from a fork, or from rewritten history. Pin a published standards commit.
governance / Guix packaging policy (Nix retired)
Guix is the estate primary; a sealed container is the accepted escape hatch for the not-in-Guix / non-free tail.
governance / Language / package anti-pattern policy
affinescript compiler unavailable on runner — skipping drift check