Skip to content

fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump #861

fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump

fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump #861

Triggered via pull request July 21, 2026 20:09
Status Failure
Total duration 1m 19s
Artifacts

governance.yml

on: pull_request
governance  /  Check Workflow Staleness
10s
governance / Check Workflow Staleness
governance  /  ...  /  package anti-pattern policy
10s
governance / Language / package anti-pattern policy
governance  /  ...  /  Nix fallback policy
10s
governance / Guix primary / Nix fallback policy
governance  /  Security policy checks
4s
governance / Security policy checks
governance  /  Code quality + docs
7s
governance / Code quality + docs
governance  /  Well-Known (RFC 9116 + RSR)
5s
governance / Well-Known (RFC 9116 + RSR)
governance  /  Workflow security linter
6s
governance / Workflow security linter
governance  /  Trusted-base reduction policy
5s
governance / Trusted-base reduction policy
governance  /  Licence consistency
9s
governance / Licence consistency
governance  /  Validate Hypatia Baseline
50s
governance / Validate Hypatia Baseline
Fit to window
Zoom out
Zoom in

Annotations

2 errors, 1 warning, and 1 notice
governance / Validate Hypatia Baseline
Process completed with exit code 1.
governance / Validate Hypatia Baseline
Gate failed: 49 unfiltered finding(s) at or above 'info'.
governance / Well-Known (RFC 9116 + RSR)
Missing RSR recommended files: ai.txt humans.txt
governance / Language / package anti-pattern policy
affinescript compiler unavailable on runner — skipping drift check