Repository navigation

fix(ci): codeql-action v4.38.1 -> v4.38.0 SHA pin + dependabot hold (estate-wide startup_failure) #1233

Job	Run time
governance / Check Workflow Staleness	10s
governance / Live Actions policy (credentialed advisory)	6s
governance / Security policy checks	7s
governance / Code quality + docs	11s
governance / Workflow security linter	9s
governance / Trusted-base reduction policy	7s
governance / Guix packaging policy (Nix retired)	7s
governance / Allowlist Preflight	9s
governance / Language / package anti-pattern policy	6s
governance / Actions lockfile verify	5s
governance / Debt ratchet	15s
governance / Licence consistency	9s
governance / Exemption ratchet	7s
governance / Well-Known (RFC 9116 + RSR)	7s
governance / Validate Hypatia Baseline	31s
	2m 26s