Skip to content

fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump#34

Merged
hyperpolymath merged 3 commits into
mainfrom
fix/governance-gate-sweep
Jul 21, 2026
Merged

fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump#34
hyperpolymath merged 3 commits into
mainfrom
fix/governance-gate-sweep

fix(ci): use the canonical Scorecard wrapper instead of a local copy

4a80e66
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / Hypatia failed Jul 21, 2026 in 5s

4 new alerts

New alerts in code changed by this pull request

  • 4 warnings

See annotations below for details.

View all branch alerts.

Annotations

Check warning on line 1 in .github/workflows/pages.yml

See this annotation in the file changed.

Code scanning / Hypatia

Hypatia code_scanning_alerts: CSA001 Warning

Code scanning (Scorecard): PinnedDependenciesID -- Pinned-Dependencies -- 6 day(s) old

Check warning on line 1 in .github/workflows/pages.yml

See this annotation in the file changed.

Code scanning / Hypatia

Hypatia code_scanning_alerts: CSA001 Warning

Code scanning (Scorecard): PinnedDependenciesID -- Pinned-Dependencies -- 6 day(s) old

Check warning on line 1 in .github/workflows/pages.yml

See this annotation in the file changed.

Code scanning / Hypatia

Hypatia code_scanning_alerts: CSA001 Warning

Code scanning (Scorecard): PinnedDependenciesID -- Pinned-Dependencies -- 6 day(s) old

Check warning on line 1 in .github/workflows/pages.yml

See this annotation in the file changed.

Code scanning / Hypatia

Hypatia code_scanning_alerts: CSA001 Warning

Code scanning (Scorecard): PinnedDependenciesID -- Pinned-Dependencies -- 6 day(s) old