Governance

fix(ci): restore reachable standards workflow pins #118

Sign in to view logs

Triggered via pull request September 4, 2026 16:35

opened #85

fix/restore-reachable-standards-pin

Status Failure

Total duration 8m 10s

Artifacts –

governance.yml

on: pull_request

governance / Check Workflow Staleness

governance / Allowlist Preflight

governance / Live Actions policy (credentialed advisory)

governance / ... / package anti-pattern policy

governance / Guix packaging policy (Nix retired)

governance / Security policy checks

governance / Code quality + docs

governance / Well-Known (RFC 9116 + RSR)

governance / Workflow security linter

governance / Actions lockfile verify

governance / Trusted-base reduction policy

governance / Licence consistency

governance / Exemption ratchet

governance / Debt ratchet

governance / Validate Hypatia Baseline

Annotations

4 errors, 2 warnings, and 1 notice

governance / Workflow security linter

Process completed with exit code 1.

governance / Workflow security linter: .github/workflows/workflow-linter.yml#L0

workflow does not parse; an unloaded workflow produces no check run

governance / Workflow security linter: .github/workflows/cargo-audit.yml#L0

workflow does not parse; an unloaded workflow produces no check run

governance / Code quality + docs

Error: The binary 'ec-linux-amd64*' not found

governance / Live Actions policy (credentialed advisory)

Live Actions policy was not evaluated: HYPATIA_SCAN_PAT was not supplied by the caller. The separate tree allowlist gate still ran.

governance / Actions lockfile verify

actions-lock gate: no .github/workflows/actions.lock. All refs are SHA-pinned, but the lockfile becomes REQUIRED on 2026-10-01 (today is 2026-09-04). Run scripts/update-actions-lock.sh.

governance / Guix packaging policy (Nix retired)

Guix is the estate primary; a sealed container is the accepted escape hatch for the not-in-Guix / non-free tail.