Skip to content

chore(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.… #180

chore(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.…

chore(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.… #180

Triggered via push July 2, 2026 15:14
Status Cancelled
Total duration 23s
Artifacts

governance.yml

on: push
governance  /  Check Workflow Staleness
8s
governance / Check Workflow Staleness
governance  /  ...  /  package anti-pattern policy
10s
governance / Language / package anti-pattern policy
governance  /  ...  /  Nix fallback policy
7s
governance / Guix primary / Nix fallback policy
governance  /  Security policy checks
10s
governance / Security policy checks
governance  /  Code quality + docs
18s
governance / Code quality + docs
governance  /  Well-Known (RFC 9116 + RSR)
9s
governance / Well-Known (RFC 9116 + RSR)
governance  /  Workflow security linter
9s
governance / Workflow security linter
governance  /  Trusted-base reduction policy
10s
governance / Trusted-base reduction policy
governance  /  Licence consistency
9s
governance / Licence consistency
governance  /  Validate Hypatia Baseline
governance / Validate Hypatia Baseline
Fit to window
Zoom out
Zoom in

Annotations

18 errors and 2 notices
governance / Check Workflow Staleness
Canceling since a higher priority waiting request for Governance-refs/heads/main exists
governance / Check Workflow Staleness
Process completed with exit code 1.
governance / Check Workflow Staleness
Remove legacy scorecard-enforcer.yml, refresh out-of-window standards reusable pins toward a recent commit, and keep Scorecard out of GitHub Code Scanning unless it runs for every PR head commit.
governance / Check Workflow Staleness: ./.github/workflows/scorecard.yml#L0
OSSF Scorecard must not upload SARIF to GitHub Code Scanning unless it runs for every PR head commit.
governance / Guix primary / Nix fallback policy
Canceling since a higher priority waiting request for Governance-refs/heads/main exists
governance / Well-Known (RFC 9116 + RSR)
Canceling since a higher priority waiting request for Governance-refs/heads/main exists
governance / Well-Known (RFC 9116 + RSR)
The operation was canceled.
governance / Workflow security linter
Canceling since a higher priority waiting request for Governance-refs/heads/main exists
governance / Licence consistency
Canceling since a higher priority waiting request for Governance-refs/heads/main exists
governance / Security policy checks
Canceling since a higher priority waiting request for Governance-refs/heads/main exists
governance / Trusted-base reduction policy
Canceling since a higher priority waiting request for Governance-refs/heads/main exists
governance / Trusted-base reduction policy
The operation was canceled.
governance / Language / package anti-pattern policy
Canceling since a higher priority waiting request for Governance-refs/heads/main exists
governance / Language / package anti-pattern policy
The operation was canceled.
governance / Code quality + docs
Canceling since a higher priority waiting request for Governance-refs/heads/main exists
governance / Code quality + docs
The operation was canceled.
Governance
Canceling since a higher priority waiting request for Governance-refs/heads/main exists
Governance
Canceling since a higher priority waiting request for Governance-refs/heads/main exists
governance / Check Workflow Staleness: ./.github/workflows/hypatia-scan.yml#L0
hypatia-scan-reusable.yml pin d7c22711e830 is 12 commit(s) / 5d behind standards HEAD — within the recency window (<=50 commits or <=14d). Bump deliberately with scripts/propagate-workflow-pins.sh when convenient.
governance / Check Workflow Staleness: ./.github/workflows/governance.yml#L0
governance-reusable.yml pin d7c22711e830 is 12 commit(s) / 5d behind standards HEAD — within the recency window (<=50 commits or <=14d). Bump deliberately with scripts/propagate-workflow-pins.sh when convenient.