[pipeline][HIGH] Agent Law Provisioner fails on default branch

[simongonzalezdc]

Pipeline issue-surfacing finding

This issue was created or refreshed automatically by the pipeline issue surfacing worker. It is designed to be picked up later by a fixer/triage agent without rediscovering the failure from scratch.

Signal

• Repo: KyaniteLabs/.github
• Kind: ci_failure
• Severity: HIGH
• Source: kyanite/pr-status
• Fingerprint: issue-surfacing:c5167f628f5118827f28
• Generated at: 2026-05-27T07:50:01Z

Root cause hypothesis

Latest default-branch workflow run failed; see captured failed job log excerpt.

Recommended fix

Inspect the failed job/step, reproduce locally or on the same runner lane, and make the smallest targeted fix.

Acceptance criteria

• The latest default-branch workflow run passes.
• The issue includes updated evidence if the root cause changes.

Evidence

{
  "failed_run_details": {
    "conclusion": "failure",
    "databaseId": 26447773019,
    "displayTitle": "Agent Law Provisioner",
    "event": "schedule",
    "failed_annotations": [
      "provision-agent-law: .github:2: warning: Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/upload-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/",
      "provision-agent-law: .github:71: failure: The process '/usr/bin/git' failed with exit code 128",
      "provision-agent-law: .github:70: failure: unable to access 'https://github.com/KyaniteLabs/.github/': The requested URL returned error: 403",
      "provision-agent-law: .github:65: failure: unable to access 'https://github.com/KyaniteLabs/.github/': The requested URL returned error: 403",
      "provision-agent-law: .github:60: failure: unable to access 'https://github.com/KyaniteLabs/.github/': The requested URL returned error: 403"
    ],
    "failed_log_excerpt": "provision-agent-law: .github:71: failure: The process '/usr/bin/git' failed with exit code 128\nprovision-agent-law: .github:70: failure: unable to access 'https://github.com/KyaniteLabs/.github/': The requested URL returned error: 403\nprovision-agent-law: .github:65: failure: unable to access 'https://github.com/KyaniteLabs/.github/': The requested URL returned error: 403\nprovision-agent-law: .github:60: failure: unable to access 'https://github.com/KyaniteLabs/.github/': The requested URL returned error: 403",
    "headBranch": "main",
    "jobs": [
      {
        "completedAt": "2026-05-26T12:22:27Z",
        "conclusion": "failure",
        "databaseId": 77860412726,
        "name": "provision-agent-law",
        "startedAt": "2026-05-26T12:21:48Z",
        "status": "completed",
        "steps": [
          {
            "conclusion": "success",
            "name": "Set up job",
            "number": 1,
            "status": "completed"
          },
          {
            "conclusion": "failure",
            "name": "Checkout hub",
            "number": 2,
            "status": "completed"
          },
          {
            "conclusion": "skipped",
            "name": "Provision Agent Law",
            "number": 3,
            "status": "completed"
          },
          {
            "conclusion": "success",
            "name": "Upload provisioner report",
            "number": 4,
            "status": "completed"
          },
          {
            "conclusion": "success",
            "name": "Post Checkout hub",
            "number": 8,
            "status": "completed"
          },
          {
            "conclusion": "success",
            "name": "Complete job",
            "number": 9,
            "status": "completed"
          }
        ],
        "url": "https://github.com/KyaniteLabs/.github/actions/runs/26447773019/job/77860412726"
      }
    ],
    "status": "completed",
    "url": "https://github.com/KyaniteLabs/.github/actions/runs/26447773019",
    "workflowName": "Agent Law Provisioner"
  },
  "kyanite_row": {
    "action_lane": "factory-fixer",
    "auto_actionable": true,
    "bad_checks": [
      {
        "annotations": [
          "Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, actions/upload-artifact@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/",
          "The process '/usr/bin/git' failed with exit code 128",
          "unable to access 'https://github.com/KyaniteLabs/.github/': The requested URL returned error: 403",
          "unable to access 'https://github.com/KyaniteLabs/.github/': The requested URL returned error: 403",
          "unable to access 'https://github.com/KyaniteLabs/.github/': The requested URL returned error: 403"
        ],
        "
... <truncated>

Self-hosted inference

Not used.

(🤖 Pipeline Issues)