Skip to content

fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump #413

fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump

fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump #413

Triggered via pull request July 21, 2026 20:22
Status Success
Total duration 1h 29m 25s
Artifacts

dogfood-gate.yml

on: pull_request
Validate A2ML manifests
41s
Validate A2ML manifests
Validate K9 contracts
10s
Validate K9 contracts
Empty-linter (invisible characters)
33s
Empty-linter (invisible characters)
Groove manifest check
9s
Groove manifest check
Dogfooding compliance summary
9s
Dogfooding compliance summary
Fit to window
Zoom out
Zoom in

Annotations

20 warnings
Validate K9 contracts: ./iser-tools/anvomidaviser/container/deploy.k9.ncl#L1
No security level (leash/security_level) found in pedigree block
Validate K9 contracts: ./iser-tools/anvomidaviser/container/deploy.k9.ncl#L1
Pedigree block missing 'version' or 'schema_version' field
Validate K9 contracts: ./iser-tools/alloyiser/container/deploy.k9.ncl#L1
No security level (leash/security_level) found in pedigree block
Validate K9 contracts: ./iser-tools/alloyiser/container/deploy.k9.ncl#L1
Pedigree block missing 'version' or 'schema_version' field
Validate K9 contracts: ./affinescript-ecosystem/rattlescript/container/deploy.k9.ncl#L1
No security level (leash/security_level) found in pedigree block
Validate K9 contracts: ./affinescript-ecosystem/rattlescript/container/deploy.k9.ncl#L1
Pedigree block missing 'version' or 'schema_version' field
Validate K9 contracts: ./affinescript-ecosystem/affinescriptiser/container/deploy.k9.ncl#L1
No security level (leash/security_level) found in pedigree block
Validate K9 contracts: ./affinescript-ecosystem/affinescriptiser/container/deploy.k9.ncl#L1
Pedigree block missing 'version' or 'schema_version' field
Validate K9 contracts: ./affinescript-ecosystem/affinescript-vite/container/deploy.k9.ncl#L1
No security level (leash/security_level) found in pedigree block
Validate K9 contracts: ./affinescript-ecosystem/affinescript-vite/container/deploy.k9.ncl#L1
Pedigree block missing 'version' or 'schema_version' field
Validate A2ML manifests: ./affinescript-ecosystem/affinescriptiser/0-AI-MANIFEST.a2ml#L119
Attestation block found but missing proof/signature/hash fields
Validate A2ML manifests: ./affinescript-ecosystem/affinescriptiser/0-AI-MANIFEST.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
Validate A2ML manifests: ./affinescript-ecosystem/affinescriptiser/.machine_readable/ai/AI.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
Validate A2ML manifests: ./affinescript-ecosystem/affinescriptiser/.github/0.1-AI-MANIFEST.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
Validate A2ML manifests: ./affinescript-ecosystem/affinescript-vite/0-AI-MANIFEST.a2ml#L129
Attestation block found but missing proof/signature/hash fields
Validate A2ML manifests: ./affinescript-ecosystem/affinescript-vite/0-AI-MANIFEST.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
Validate A2ML manifests: ./affinescript-ecosystem/affinescript-vite/.machine_readable/ai/AI.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
Validate A2ML manifests: ./0-AI-MANIFEST.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
Validate A2ML manifests: ./.machine_readable/anchors/ANCHOR.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines