Skip to content

fix(setup): checksum-verified just install instead of curl|bash (CWE-494) #267

fix(setup): checksum-verified just install instead of curl|bash (CWE-494)

fix(setup): checksum-verified just install instead of curl|bash (CWE-494) #267

Triggered via pull request September 30, 2026 23:13
Status Success
Total duration 1m 40s
Artifacts –

dogfood-gate.yml

on: pull_request
Validate DEED manifests
6s
Validate DEED manifests
Validate K9 contracts
6s
Validate K9 contracts
Empty-linter (invisible characters)
5s
Empty-linter (invisible characters)
Groove manifest check
6s
Groove manifest check
Validate eclexiaiser manifest
5s
Validate eclexiaiser manifest
Dogfooding compliance summary
6s
Dogfooding compliance summary
Fit to window
Zoom out
Zoom in

Annotations

9 warnings and 9 notices
Validate K9 contracts
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4.3.1. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Validate eclexiaiser manifest
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4.3.1. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Validate eclexiaiser manifest
Containerfile present but no eclexiaiser.toml. Run `eclexiaiser init` to scaffold energy/carbon budgets.
Empty-linter (invisible characters)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4.3.1. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Empty-linter (invisible characters): docs/tech-debt-2026-05-26.adoc#L0
Invisible Unicode characters detected (zero-width space, BOM, NBSP, etc.)
Empty-linter (invisible characters): PROOF-NEEDS.adoc#L0
Invisible Unicode characters detected (zero-width space, BOM, NBSP, etc.)
Validate DEED manifests
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4.3.1. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Groove manifest check
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4.3.1. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Dogfooding compliance summary
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4.3.1. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Validate K9 contracts: ./session/custom-checks.k9#L0
Skipped non-target K9 path
Validate K9 contracts: ./coordination.k9#L0
Skipped non-target K9 path
Validate K9 contracts
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Validate eclexiaiser manifest
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Empty-linter (invisible characters)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Validate DEED manifests
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Groove manifest check
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Dogfooding compliance summary
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"