Skip to content

chore(ci): make Scorecard periodic, not per-push #143

chore(ci): make Scorecard periodic, not per-push

chore(ci): make Scorecard periodic, not per-push #143

Triggered via pull request August 6, 2026 11:47
Status Success
Total duration 1h 53m 40s
Artifacts 4

static-analysis-gate.yml

on: pull_request
panic-attack assail
8s
panic-attack assail
Hypatia neurosymbolic scan
31s
Hypatia neurosymbolic scan
Patch Bridge CVE triage
9s
Patch Bridge CVE triage
Deposit findings for gitbot-fleet
10s
Deposit findings for gitbot-fleet
Fit to window
Zoom out
Zoom in

Annotations

4 warnings and 2 notices
Patch Bridge CVE triage
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
panic-attack assail
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Hypatia neurosymbolic scan
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02, erlef/setup-beam@e6d7c94229049569db56a7ad5a540c051a010af9. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Deposit findings for gitbot-fleet
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Patch Bridge CVE triage
panic-attack binary not available — skipping Patch Bridge
panic-attack assail
panic-attack binary not available — skipping assail

Artifacts

Produced during runtime
Name Size Digest
bridge-report
218 Bytes
sha256:0094609ea6fb632c6ca8226f18f20dd4f49ff6360fc21131f92e9758f017fc3a
hypatia-findings
161 Bytes
sha256:09817bbdc4144f924cd5f7cf0331bada83bbb14dab4ea0b0fcc38c5f540d9d47
panic-attack-findings
171 Bytes
sha256:ae7fb261210e3cc7f753860fd5dbcb29b54347e25dc91539ec6a5cc451212fbd
unified-findings
400 Bytes
sha256:8e4159b0a9fc1117b87ea9bab581d9e1c7fc1984c01929279a4cd618b339183e