fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump #89
static-analysis-gate.yml
on: pull_request
panic-attack assail
4s
Hypatia neurosymbolic scan
36s
Deposit findings for gitbot-fleet
6s
Annotations
3 warnings and 1 notice
|
panic-attack assail
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Hypatia neurosymbolic scan
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02, erlef/setup-beam@e6d7c94229049569db56a7ad5a540c051a010af9. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Deposit findings for gitbot-fleet
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
panic-attack assail
panic-attack binary not available — skipping assail
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
hypatia-findings
|
161 Bytes |
sha256:c27c137f3118dc3b77f03ff770e70e2105fb8c7b2ad943709437c02049a3bcd3
|
|
|
panic-attack-findings
|
171 Bytes |
sha256:23def160359e7e4763d36d185e175532937cee249af83039f7e2c98468013a50
|
|
|
unified-findings
|
345 Bytes |
sha256:b003dc8feabf81589c3b52015648dae2f41e5d4f9d196d9187917f7c77e07356
|
|