Skip to content
Governance

chore(deps): bump dawidd6/action-send-mail from 6e502825a508b867ab2954ad6343b68787624c01 to 994f270325d4f7257aff241a35488ef54ba364a4 in the actions group #79

Sign in to view logs

chore(deps): bump dawidd6/action-send-mail from 6e502825a508b867ab2954ad6343b68787624c01 to 994f270325d4f7257aff241a35488ef54ba364a4 in the actions group

chore(deps): bump dawidd6/action-send-mail from 6e502825a508b867ab2954ad6343b68787624c01 to 994f270325d4f7257aff241a35488ef54ba364a4 in the actions group #79

Triggered via pull request June 27, 2026 01:43
@dependabotdependabot[bot]
opened #43
dependabot/github_actions/actions-0abc21e5fa
Status Failure
Total duration 11s
Artifacts –

governance.yml

on: pull_request
governance  /  Check Workflow Staleness
7s
governance / Check Workflow Staleness
governance  /  Validate Hypatia Baseline
0s
governance / Validate Hypatia Baseline
Fit to window
Zoom out
Zoom in

Annotations

4 errors
governance / Check Workflow Staleness
Process completed with exit code 1.
governance / Check Workflow Staleness
Remove legacy scorecard-enforcer.yml, refresh out-of-window standards reusable pins toward a recent commit, and keep Scorecard out of GitHub Code Scanning unless it runs for every PR head commit.
governance / Check Workflow Staleness: ./.github/workflows/scorecard.yml#L0
OSSF Scorecard must not upload SARIF to GitHub Code Scanning unless it runs for every PR head commit.
governance / Check Workflow Staleness: ./.github/workflows/governance.yml#L0
governance-reusable.yml pin 5a93d9d57cc0 is not a recognised ancestor of standards HEAD (d7c22711e830). It may be forged, from a fork, or too divergent to verify. Pin a published standards commit.