fix(ci): re-pin codeql-action to v4.38.0 SHA

1f98bd2

Select commit

Loading

Failed to load commit list.

Uh oh!

There was an error while loading. Please reload this page.

.github/workflows/security-gate-pr-target.yml on: push 1

SonarQubeCloud

SonarCloud Code Analysis

GitGuardian

GitGuardian Security Checks

K9-SVC Contractile Validation on: pull_request 1

K9-SVC contractile validation

AffineScript Verify on: pull_request 1

AffineScript Verify

ECHIDNA Proof Verification on: pull_request 2

Detect proof changes

Agda — lol/proofs

Idris2 — AVOW consent proofs

Trust pipeline summary

Self Test on: pull_request 1

Repo self-tests

Actions Lockfile Gate on: pull_request 1

uses ⊆ actions.lock

Lock Self-Check on: pull_request 1

Lockfile self-consistency

Documentation Format Enforcement on: pull_request 1

Check Documentation Format

No-JS Scan (warn-first) on: pull_request 2

Scan for hand-authored JavaScript/TypeScript

SPARK Theatre Gate on: pull_request 1

SPARK Theatre Gate

Registry Verify on: pull_request 1

Registry + topology in sync

DYADT Verify on: pull_request 1

Verify CLAIMS.a2ml + conformance

Hypatia Security Scan on: pull_request 2

scan / Hypatia Neurosymbolic Analysis

Elixir CI on: pull_request 5

ci / Detect mix.exs

ci / Compile + test

CodeQL Security Analysis on: pull_request 4

analyze-js / analyze

analyze-actions / analyze

Scorecard on: pull_request 1

scorecard / Run Scorecard

scorecard / Run Scorecard PR

Governance on: pull_request 18

governance / Check Workflow Staleness

governance / Allowlist Preflight

governance / Live Actions policy (credentialed advisory)

governance / Language / package anti-pattern policy

governance / Guix packaging policy (Nix retired)

governance / Security policy checks

governance / Code quality + docs

governance / Well-Known (RFC 9116 + RSR)

governance / Workflow security linter

governance / Actions lockfile verify

governance / Trusted-base reduction policy

governance / Licence consistency

governance / Exemption ratchet

governance / Debt ratchet

governance / Validate Hypatia Baseline

Secret Scanner on: pull_request 3

scan / gitleaks

scan / rust-secrets

scan / shell-secrets

Code scanning results

CodeQL

Hypatia

Scorecard

fix(ci): re-pin codeql-action to v4.38.0 SHA

Uh oh!

Select a check to view from the sidebar