Skip to content
Static Analysis Gate

fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump #96

Sign in to view logs

fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump

fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump #96

Triggered via pull request July 21, 2026 20:33
@hyperpolymathhyperpolymath
opened #35
fix/governance-gate-sweep
Status Success
Total duration 4h 18m 54s
Artifacts 4

static-analysis-gate.yml

on: pull_request
panic-attack assail
5s
panic-attack assail
Hypatia neurosymbolic scan
36s
Hypatia neurosymbolic scan
Patch Bridge CVE triage
7s
Patch Bridge CVE triage
Deposit findings for gitbot-fleet
9s
Deposit findings for gitbot-fleet
Fit to window
Zoom out
Zoom in

Annotations

4 warnings and 2 notices
panic-attack assail
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Patch Bridge CVE triage
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Hypatia neurosymbolic scan
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02, erlef/setup-beam@e6d7c94229049569db56a7ad5a540c051a010af9. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Deposit findings for gitbot-fleet
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
panic-attack assail
panic-attack binary not available — skipping assail
Patch Bridge CVE triage
panic-attack binary not available — skipping Patch Bridge

Artifacts

Produced during runtime
Name Size Digest
bridge-report
218 Bytes
sha256:d2b6878883932e5f817c2f6a511c826051a8a8c6c8aa3ecfe62f0f062bec4ff9
hypatia-findings
161 Bytes
sha256:317cbe9f2019d7db1533b8ebe60e5a36f64b1a2203998f52a620a3b333a7ab3e
panic-attack-findings
171 Bytes
sha256:b9db6c72f369070593c9e406ab173a1f0db17f23cb5835943431a3328bbc0c6f
unified-findings
400 Bytes
sha256:8bf629161b5c877bce2e57603300f893dad0d07c787d1838ae50e018e23baa0b