fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump #185
hyperpolymathdogfood-gate.yml
on: pull_request
Validate A2ML manifests
7s
Validate K9 contracts
5s
Empty-linter (invisible characters)
8s
Groove manifest check
5s
Dogfooding compliance summary
5s
Annotations
3 errors and 13 warnings
|
Validate K9 contracts
Process completed with exit code 1.
|
|
Validate K9 contracts
K9 validation failed with 1 error(s)
|
|
Validate K9 contracts:
./verisimdb/connectors/test-infra/deploy.k9.ncl#L1
Pedigree block missing 'name' field (in pedigree.metadata.name or pedigree.name)
|
|
Validate K9 contracts
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Validate K9 contracts:
./verisimdb/connectors/test-infra/deploy.k9.ncl#L1
No security level (leash/security_level) found in pedigree block
|
|
Validate K9 contracts:
./verisimdb/connectors/test-infra/deploy.k9.ncl#L1
Pedigree block missing 'version' or 'schema_version' field
|
|
Groove manifest check
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Validate A2ML manifests
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Validate A2ML manifests:
./lithoglyph/lith-http/0-AI-MANIFEST.a2ml#L104
Attestation block found but missing proof/signature/hash fields
|
|
Validate A2ML manifests:
./lithoglyph/lith-http/0-AI-MANIFEST.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
|
|
Validate A2ML manifests:
./lithoglyph/.machine_readable/HANDOVER.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
|
|
Validate A2ML manifests:
./0-AI-MANIFEST.a2ml#L115
Attestation block found but missing proof/signature/hash fields
|
|
Validate A2ML manifests:
./0-AI-MANIFEST.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
|
|
Validate A2ML manifests:
./.machine_readable/anchors/ANCHOR.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
|
|
Empty-linter (invisible characters)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Dogfooding compliance summary
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|