fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump #125
static-analysis-gate.yml
on: pull_request
panic-attack assail
4s
Hypatia neurosymbolic scan
33s
Deposit findings for gitbot-fleet
8s
Annotations
3 warnings and 1 notice
|
panic-attack assail
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Hypatia neurosymbolic scan
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02, erlef/setup-beam@e6d7c94229049569db56a7ad5a540c051a010af9. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Deposit findings for gitbot-fleet
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
panic-attack assail
panic-attack binary not available — skipping assail
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
hypatia-findings
|
161 Bytes |
sha256:4bdd140f0bff8c4d861b15938676409b20ba7e166a04652461dd805fcb6992bb
|
|
|
panic-attack-findings
|
171 Bytes |
sha256:7c58b3e3c88c81796b4646646d5927ffa77e88cae47a38ac205837badbb0174c
|
|
|
unified-findings
|
348 Bytes |
sha256:ace3c7aed8a093b043ebef5027191a9b0281be99e24b6f54fdecf2d8bbf0d3c5
|
|