Skip to content

fix(ci): codeql-action v4.38.1 -> v4.38.0 SHA pin + dependabot hold (… #125

fix(ci): codeql-action v4.38.1 -> v4.38.0 SHA pin + dependabot hold (…

fix(ci): codeql-action v4.38.1 -> v4.38.0 SHA pin + dependabot hold (… #125

Triggered via push September 22, 2026 12:34
Status Success
Total duration 21m 53s
Artifacts –

dogfood-gate.yml

on: push
Validate DEED manifests
7s
Validate DEED manifests
Validate K9 contracts
4s
Validate K9 contracts
Empty-linter (invisible characters)
7s
Empty-linter (invisible characters)
Groove manifest check
4s
Groove manifest check
Validate eclexiaiser manifest
7s
Validate eclexiaiser manifest
Dogfooding compliance summary
4s
Dogfooding compliance summary
Fit to window
Zoom out
Zoom in

Annotations

10 warnings and 6 notices
Validate DEED manifests: ./lith-http/0-AI-MANIFEST.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
Validate DEED manifests: ./examples/0.1-AI-MANIFEST.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
Validate DEED manifests: ./.machine_readable/descriptiles/anchors/0-AI-MANIFEST.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
Validate DEED manifests: ./.machine_readable/descriptiles/0-AI-MANIFEST.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
Validate DEED manifests: ./.machine_readable/ai/AI.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
Validate DEED manifests: ./.machine_readable/HANDOVER.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
Validate DEED manifests: ./.github/0.1-AI-MANIFEST.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
Groove manifest check
This repo has server code but no Groove endpoint. Add .well-known/groove/manifest.json for service discovery.
Validate K9 contracts: ./container/stapeln/deploy.k9.ncl#L1
No security level (leash/security_level) found in pedigree block
Validate K9 contracts: ./container/stapeln/deploy.k9.ncl#L1
Pedigree block missing 'version' or 'schema_version' field
Validate DEED manifests
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Groove manifest check
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Validate K9 contracts
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Empty-linter (invisible characters)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Validate eclexiaiser manifest
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Dogfooding compliance summary
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"