fix(ci): update reusable workflow SHAs to @7fdc2705df74b4e352d2a1cde3… #79
governance.yml
on: push
governance
/
Check Workflow Staleness
11s
governance
/
Allowlist Preflight
9s
governance
/
...
/
package anti-pattern policy
13s
governance
/
Guix packaging policy (Nix retired)
8s
governance
/
Security policy checks
9s
governance
/
Code quality + docs
9s
governance
/
Well-Known (RFC 9116 + RSR)
6s
governance
/
Workflow security linter
21s
governance
/
Trusted-base reduction policy
9s
governance
/
Licence consistency
6s
governance
/
Validate Hypatia Baseline
0s
Annotations
4 errors and 2 notices
|
governance / Check Workflow Staleness
Process completed with exit code 1.
|
|
governance / Check Workflow Staleness
Staleness gate failed. Each error above names a specific defect: a pin predating a known false-green fix (refresh it — waiting will not help), a pin that is not a published standards commit, a retired scorecard-enforcer.yml, or Scorecard uploading SARIF to Code Scanning. Pins that are merely old are reported as notices and do not fail.
|
|
governance / Check Workflow Staleness:
./.github/workflows/scorecard.yml#L0
scorecard-reusable.yml pin 7fdc2705df74 is not a commit of hyperpolymath/standards reachable from main (confirmed against the GitHub compare API, not just this runner's clone). It may be forged, from a fork, or from rewritten history. Pin a published standards commit.
|
|
governance / Check Workflow Staleness:
./.github/workflows/governance.yml#L0
governance-reusable.yml pin 7fdc2705df74 is not a commit of hyperpolymath/standards reachable from main (confirmed against the GitHub compare API, not just this runner's clone). It may be forged, from a fork, or from rewritten history. Pin a published standards commit.
|
|
governance / Guix packaging policy (Nix retired)
Guix is the estate primary; a sealed container is the accepted escape hatch for the not-in-Guix / non-free tail.
|
|
governance / Language / package anti-pattern policy
affinescript compiler unavailable on runner — skipping drift check
|