fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump #287
governance.yml
on: pull_request
governance
/
Check Workflow Staleness
6s
governance
/
...
/
package anti-pattern policy
10s
governance
/
...
/
Nix fallback policy
5s
governance
/
Security policy checks
4s
governance
/
Code quality + docs
8s
governance
/
Well-Known (RFC 9116 + RSR)
6s
governance
/
Workflow security linter
7s
governance
/
Trusted-base reduction policy
9s
governance
/
Licence consistency
5s
governance
/
Validate Hypatia Baseline
0s
Annotations
2 warnings and 1 notice
|
governance / Well-Known (RFC 9116 + RSR)
Missing RSR recommended files: security.txt ai.txt humans.txt
|
|
governance / Well-Known (RFC 9116 + RSR)
No security.txt found.
|
|
governance / Language / package anti-pattern policy
affinescript compiler unavailable on runner — skipping drift check
|