Repository navigation
Tranche A remediation + GNPL design documents #4
governance.yml
on: pull_request
governance
/
Check Workflow Staleness
6s
governance
/
...
/
package anti-pattern policy
14s
governance
/
...
/
Nix fallback policy
10s
governance
/
Security policy checks
4s
governance
/
Code quality + docs
12s
governance
/
Well-Known (RFC 9116 + RSR)
4s
governance
/
Workflow security linter
7s
governance
/
Trusted-base reduction policy
6s
governance
/
Licence consistency
6s
governance
/
Validate Hypatia Baseline
Annotations
4 errors, 3 warnings, and 1 notice
|
governance / Check Workflow Staleness
Process completed with exit code 1.
|
|
governance / Check Workflow Staleness
Remove legacy scorecard-enforcer.yml, refresh out-of-window standards reusable pins toward a recent commit, and keep Scorecard out of GitHub Code Scanning unless it runs for every PR head commit.
|
|
governance / Check Workflow Staleness:
./.github/workflows/scorecard.yml#L0
OSSF Scorecard must not upload SARIF to GitHub Code Scanning unless it runs for every PR head commit.
|
|
governance / Trusted-base reduction policy
Process completed with exit code 1.
|
|
governance / Guix primary / Nix fallback policy
No Guix or Nix packaging found — this becomes a BLOCKING failure on 2026-08-21 (today is 2026-07-21).
|
|
governance / Well-Known (RFC 9116 + RSR)
Missing RSR recommended files: security.txt ai.txt humans.txt
|
|
governance / Well-Known (RFC 9116 + RSR)
No security.txt found.
|
|
governance / Language / package anti-pattern policy
affinescript compiler unavailable on runner — skipping drift check
|