Skip to content

fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump #80

fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump

fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump #80

Triggered via pull request July 21, 2026 20:27
Status Success
Total duration 2h 48m 41s
Artifacts –

dogfood-gate.yml

on: pull_request
Validate A2ML manifests
7s
Validate A2ML manifests
Validate K9 contracts
7s
Validate K9 contracts
Empty-linter (invisible characters)
4s
Empty-linter (invisible characters)
Groove manifest check
5s
Groove manifest check
Dogfooding compliance summary
3s
Dogfooding compliance summary
Fit to window
Zoom out
Zoom in

Annotations

11 warnings
Empty-linter (invisible characters)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Groove manifest check
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Validate K9 contracts
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Validate K9 contracts
Found 17 config files but no K9 contracts. Run k9iser to generate contracts.
Validate A2ML manifests
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Validate A2ML manifests: ./0-AI-MANIFEST.a2ml#L104
Attestation block found but missing proof/signature/hash fields
Validate A2ML manifests: ./0-AI-MANIFEST.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
Validate A2ML manifests: ./.machine_readable/6a2/anchor/ANCHOR.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
Validate A2ML manifests: ./.machine_readable/6a2/anchor/0-AI-MANIFEST.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
Validate A2ML manifests: ./.machine_readable/6a2/0-AI-MANIFEST.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
Dogfooding compliance summary
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/