Skip to content

fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump #94

fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump

fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump #94

Triggered via pull request July 21, 2026 20:25
Status Success
Total duration 2h 35m 49s
Artifacts 4

static-analysis-gate.yml

on: pull_request
panic-attack assail
8s
panic-attack assail
Hypatia neurosymbolic scan
30s
Hypatia neurosymbolic scan
Patch Bridge CVE triage
5s
Patch Bridge CVE triage
Deposit findings for gitbot-fleet
7s
Deposit findings for gitbot-fleet
Fit to window
Zoom out
Zoom in

Annotations

4 warnings and 2 notices
Patch Bridge CVE triage
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
panic-attack assail
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Hypatia neurosymbolic scan
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02, erlef/setup-beam@e6d7c94229049569db56a7ad5a540c051a010af9. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Deposit findings for gitbot-fleet
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Patch Bridge CVE triage
panic-attack binary not available — skipping Patch Bridge
panic-attack assail
panic-attack binary not available — skipping assail

Artifacts

Produced during runtime
Name Size Digest
bridge-report
218 Bytes
sha256:2febf39da04f3d98908b8f34338f7d73c0b7b889d88aee45d5a15101a77211c0
hypatia-findings
161 Bytes
sha256:d75a97141a6565deba612276dbbb88529886b00486c59add58ee1da1c0dbf472
panic-attack-findings
171 Bytes
sha256:ab6f441018729200ad272547e1fdb470db6a27c4adb7b85175f5c87563d02ae7
unified-findings
419 Bytes
sha256:51189f7cbb95ce57e718c6bf8cf746233e8cc13d691aba52ebec0b3057df850d