Repository navigation
fix(ci): restore the required-check producers — allow-list, actions.lock gate, K9 pedigree #3
hyperpolymathactions-lock.yml
on: pull_request
Verify actions.lock
7s
Regenerate actions.lock
0s
Annotations
2 errors, 10 warnings, and 1 notice
|
Verify actions.lock
Process completed with exit code 1.
|
|
Verify actions.lock
actions.lock is out of step with .github/workflows — every onboarded workflow will fail with startup_failure until it is regenerated
|
|
Verify actions.lock
pinned to a bare SHA without a symbolic ref — weakens supply-chain traceability
|
|
Verify actions.lock
pinned to a bare SHA without a symbolic ref — weakens supply-chain traceability
|
|
Verify actions.lock
pinned to a bare SHA without a symbolic ref — weakens supply-chain traceability
|
|
Verify actions.lock
pinned to a bare SHA without a symbolic ref — weakens supply-chain traceability
|
|
Verify actions.lock
pinned to a bare SHA without a symbolic ref — weakens supply-chain traceability
|
|
Verify actions.lock
lockfile pins actions/checkout@v4.1.7 but no uses: in this workflow references it
|
|
Verify actions.lock
pinned to a bare SHA without a symbolic ref — weakens supply-chain traceability
|
|
Verify actions.lock
pinned to a bare SHA without a symbolic ref — weakens supply-chain traceability
|
|
Verify actions.lock
lockfile pins actions/checkout@v4.2.2 but no uses: in this workflow references it
|
|
Verify actions.lock
pinned to a bare SHA without a symbolic ref — weakens supply-chain traceability
|
|
Verify actions.lock
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|