Skip to content

fix(ci): grant the secret-scanner reusable its required job permissions #75

fix(ci): grant the secret-scanner reusable its required job permissions

fix(ci): grant the secret-scanner reusable its required job permissions #75

Triggered via pull request July 21, 2026 05:24
Status Failure
Total duration 2m 48s
Artifacts

governance.yml

on: pull_request
governance  /  Check Workflow Staleness
5s
governance / Check Workflow Staleness
governance  /  ...  /  package anti-pattern policy
13s
governance / Language / package anti-pattern policy
governance  /  ...  /  Nix fallback policy
5s
governance / Guix primary / Nix fallback policy
governance  /  Security policy checks
4s
governance / Security policy checks
governance  /  Code quality + docs
14s
governance / Code quality + docs
governance  /  Well-Known (RFC 9116 + RSR)
4s
governance / Well-Known (RFC 9116 + RSR)
governance  /  Workflow security linter
4s
governance / Workflow security linter
governance  /  Trusted-base reduction policy
7s
governance / Trusted-base reduction policy
governance  /  Licence consistency
9s
governance / Licence consistency
governance  /  Validate Hypatia Baseline
governance / Validate Hypatia Baseline
Fit to window
Zoom out
Zoom in

Annotations

8 errors and 1 notice
governance / Workflow security linter
Process completed with exit code 1.
governance / Security policy checks
Process completed with exit code 1.
governance / Check Workflow Staleness
Process completed with exit code 1.
governance / Check Workflow Staleness
Remove legacy scorecard-enforcer.yml, refresh out-of-window standards reusable pins toward a recent commit, and keep Scorecard out of GitHub Code Scanning unless it runs for every PR head commit.
governance / Check Workflow Staleness: ./.github/workflows/scorecard.yml#L0
scorecard-reusable.yml pin d7c22711e830 is 59 commit(s) / 24d behind standards HEAD — outside the recency window (>50 commits AND >14d). Refresh toward 8813ecf2a841 (e.g. scripts/propagate-workflow-pins.sh).
governance / Check Workflow Staleness: ./.github/workflows/hypatia-scan.yml#L0
hypatia-scan-reusable.yml pin d7c22711e830 is 59 commit(s) / 24d behind standards HEAD — outside the recency window (>50 commits AND >14d). Refresh toward 8813ecf2a841 (e.g. scripts/propagate-workflow-pins.sh).
governance / Check Workflow Staleness: ./.github/workflows/governance.yml#L0
governance-reusable.yml pin d7c22711e830 is 59 commit(s) / 24d behind standards HEAD — outside the recency window (>50 commits AND >14d). Refresh toward 8813ecf2a841 (e.g. scripts/propagate-workflow-pins.sh).
governance / Language / package anti-pattern policy
Process completed with exit code 1.
governance / Language / package anti-pattern policy
affinescript compiler unavailable on runner — skipping drift check