ci(tag-ruleset-canon): read its own App slot, RULESET_APP_ID

cf66a26

Select commit

Loading

Failed to load commit list.

Uh oh!

There was an error while loading. Please reload this page.

GitGuardian

GitGuardian Security Checks

codefactor.io

CodeFactor

Semgrep Code - hyperpolymath

semgrep-cloud-platform/scan

SonarQubeCloud

SonarCloud Code Analysis

Actions Lockfile Gate on: pull_request 1

uses ⊆ actions.lock

AffineScript Verify on: pull_request 1

AffineScript Verify

UUID v7 conformance on: pull_request 1

Reject non-v7 UUID literals

Registry Verify on: pull_request 2

Registry + topology in sync

Lock Sync Gate on: pull_request 1

actions.lock is in sync with the workflow YAML

ECHIDNA Proof Verification on: pull_request 2

Detect proof changes

Agda — lol/proofs

Idris2 — AVOW consent proofs

Trust pipeline summary

Self Test on: pull_request 4

Repo self-tests

K9-SVC Contractile Validation on: pull_request 1

K9-SVC contractile validation

Lock Self-Check on: pull_request 1

Lockfile self-consistency

DYADT Verify on: pull_request 1

Verify CLAIMS.a2ml + conformance

SPARK Theatre Gate on: pull_request 1

SPARK Theatre Gate

ijson-jcs conformance on: pull_request 2

Report non-canonical JSON (report-only)

No-JS Scan (warn-first) on: pull_request 2

Scan for hand-authored JavaScript/TypeScript

Documentation Format Enforcement on: pull_request 1

Check Documentation Format

Hypatia Security Scan on: pull_request 2

scan / Hypatia Neurosymbolic Analysis

CodeQL Security Analysis on: pull_request 2

analyze-js / analyze

analyze-actions / analyze

Secret Scanner on: pull_request 3

scan / gitleaks

scan / rust-secrets

scan / shell-secrets

Elixir CI on: pull_request 1

ci / Detect mix.exs

ci / Compile + test

Scorecard on: pull_request 1

scorecard / Run Scorecard

scorecard / Run Scorecard PR

Governance on: pull_request 22

governance / Check Workflow Staleness

governance / UUID v7 conformance

governance / Allowlist Preflight

governance / Live Actions policy (credentialed advisory)

governance / Language / package anti-pattern policy

governance / Guix packaging policy (Nix retired)

governance / Security policy checks

governance / Code quality + docs

governance / Well-Known (RFC 9116 + RSR)

governance / Workflow security linter

governance / Actions lockfile verify

governance / Trusted-base reduction policy

governance / Licence consistency

governance / Exemption ratchet

governance / Debt ratchet

governance / Validate Hypatia Baseline

Self-CI on: pull_request 7

Call CI Pipeline / Detect ecosystems

Call CI Pipeline / Secret scanning / gitleaks

Call CI Pipeline / Secret scanning / rust-secrets

Call CI Pipeline / Secret scanning / shell-secrets

Call CI Pipeline / Rust / Detect Cargo.toml

Call CI Pipeline / Rust / Cargo check + clippy + fmt

Call CI Pipeline / Rust / Cargo audit (security)

Call CI Pipeline / Rust / llvm-cov line coverage

Call CI Pipeline / Rust / Cargo test

Call CI Pipeline / Nickel

Call CI Pipeline / Deno (banned)

Call CI Pipeline / ReScript

Call CI Pipeline / V

Call CI Pipeline / Haskell

Call CI Pipeline / Pipeline report

Code scanning results

CodeQL

Hypatia

Scorecard

ci(tag-ruleset-canon): read its own App slot, RULESET_APP_ID

Uh oh!

Select a check to view from the sidebar