Skip to content

fix(ci): pin third-party actions to full commit SHAs (#80) #198

fix(ci): pin third-party actions to full commit SHAs (#80)

fix(ci): pin third-party actions to full commit SHAs (#80) #198

Triggered via push September 20, 2026 01:03
Status Failure
Total duration 4m 44s
Artifacts –

dogfood-gate.yml

on: push
Validate A2ML manifests
4s
Validate A2ML manifests
Validate K9 contracts
5s
Validate K9 contracts
Empty-linter (invisible characters)
5s
Empty-linter (invisible characters)
Groove manifest check
4s
Groove manifest check
Validate eclexiaiser manifest
5s
Validate eclexiaiser manifest
Dogfooding compliance summary
4s
Dogfooding compliance summary
Fit to window
Zoom out
Zoom in

Annotations

7 errors, 8 warnings, and 6 notices
Validate A2ML manifests
Process completed with exit code 1.
Validate A2ML manifests
A2ML validation failed with 1 error(s)
Validate A2ML manifests: ./docs/governance/MAINTENANCE-CHECKLIST.a2ml#L1
Missing required identity field (agent-id, name, or project)
Validate K9 contracts
Process completed with exit code 1.
Validate K9 contracts
K9 validation failed with 2 error(s)
Validate K9 contracts: ./container/deploy.k9.ncl#L1
Pedigree block missing 'name' field (in pedigree.metadata.name or pedigree.name)
Validate K9 contracts: ./container/deploy.k9.ncl#L1
Missing K9! magic number. First non-empty line must be exactly 'K9!'
Validate A2ML manifests: ./verification/tests/0.2-AI-MANIFEST.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
Validate A2ML manifests: ./examples/0.1-AI-MANIFEST.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
Validate A2ML manifests: ./0-AI-MANIFEST.a2ml#L134
Attestation block found but missing proof/signature/hash fields
Validate A2ML manifests: ./0-AI-MANIFEST.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
Validate A2ML manifests: ./.machine_readable/ai/AI.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
Validate A2ML manifests: ./.github/0.1-AI-MANIFEST.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
Validate K9 contracts: ./container/deploy.k9.ncl#L1
No security level (leash/security_level) found in pedigree block
Validate K9 contracts: ./container/deploy.k9.ncl#L1
Pedigree block missing 'version' or 'schema_version' field
Empty-linter (invisible characters)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Validate A2ML manifests
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Validate eclexiaiser manifest
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Groove manifest check
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Validate K9 contracts
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Dogfooding compliance summary
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"