fix(ci): close the governance gate — SPDX, permissions, SHA pins, reu… #179
hyperpolymathdogfood-gate.yml
on: push
Validate A2ML manifests
5s
Validate K9 contracts
5s
Empty-linter (invisible characters)
11s
Groove manifest check
4s
Dogfooding compliance summary
4s
Annotations
15 warnings
|
Validate K9 contracts
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Groove manifest check
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Validate A2ML manifests
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Validate A2ML manifests:
./asdf-augmenters/asdf-plugin-collection/plugins/borg/AI.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
|
|
Validate A2ML manifests:
./asdf-augmenters/asdf-plugin-collection/plugins/bebop/AI.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
|
|
Validate A2ML manifests:
./asdf-augmenters/asdf-plugin-collection/plugins/arangodb/AI.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
|
|
Validate A2ML manifests:
./asdf-augmenters/asdf-plugin-collection/plugins/apko/AI.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
|
|
Validate A2ML manifests:
./asdf-augmenters/asdf-plugin-collection/plugins/age/AI.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
|
|
Validate A2ML manifests:
./asdf-augmenters/asdf-plugin-collection/plugins/ada/AI.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
|
|
Validate A2ML manifests:
./asdf-augmenters/asdf-ghjk/0-AI-MANIFEST.a2ml#L104
Attestation block found but missing proof/signature/hash fields
|
|
Validate A2ML manifests:
./asdf-augmenters/asdf-ghjk/0-AI-MANIFEST.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
|
|
Validate A2ML manifests:
./.machine_readable/policies/MAINTENANCE-CHECKLIST.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
|
|
Validate A2ML manifests:
./.machine_readable/anchors/ANCHOR.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
|
|
Empty-linter (invisible characters)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Dogfooding compliance summary
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|