Skip to content

ci(codeql): cron weekly→monthly (cut 3, standards#288) #40

ci(codeql): cron weekly→monthly (cut 3, standards#288)

ci(codeql): cron weekly→monthly (cut 3, standards#288) #40

Triggered via pull request June 23, 2026 16:36
Status Failure
Total duration 9s
Artifacts

governance.yml

on: pull_request
governance  /  Check Workflow Staleness
6s
governance / Check Workflow Staleness
governance  /  Validate Hypatia Baseline
0s
governance / Validate Hypatia Baseline
Fit to window
Zoom out
Zoom in

Annotations

5 errors
governance / Check Workflow Staleness
Process completed with exit code 1.
governance / Check Workflow Staleness
Remove legacy scorecard-enforcer.yml, refresh out-of-window standards reusable pins toward a recent commit, and keep Scorecard out of GitHub Code Scanning unless it runs for every PR head commit.
governance / Check Workflow Staleness: ./.github/workflows/scorecard.yml#L0
scorecard-reusable.yml pin e0caf11508a3 is 137 commit(s) / 27d behind standards HEAD — outside the recency window (>50 commits AND >14d). Refresh toward e8fe153b568a (e.g. scripts/propagate-workflow-pins.sh).
governance / Check Workflow Staleness: ./.github/workflows/scorecard-enforcer.yml#L0
OSSF Scorecard must not upload SARIF to GitHub Code Scanning unless it runs for every PR head commit.
governance / Check Workflow Staleness
scorecard-enforcer.yml is retired. Use scorecard.yml -> standards scorecard-reusable.yml instead.