ci: re-pin codeql-action to the true v4.38.0 commit #4
standards-pipeline.yml
on: pull_request
pipeline
/
Detect ecosystems
3s
pipeline
/
...
/
gitleaks
10s
pipeline
/
...
/
rust-secrets
3s
pipeline
/
...
/
shell-secrets
5s
pipeline
/
SAST (semgrep)
27s
pipeline
/
Nickel
0s
pipeline
/
Deno (banned)
0s
pipeline
/
ReScript
0s
pipeline
/
V
0s
pipeline
/
Haskell
0s
pipeline
/
...
/
Cargo audit (security)
pipeline
/
...
/
llvm-cov line coverage
pipeline
/
Pipeline report
4s
Annotations
1 error, 1 warning, and 7 notices
|
pipeline / Detect ecosystems
Detected Ada (3), but this pipeline has no lint or format job for any of them, so NOTHING was checked. This is measured debt, not an unrecognised repository — see hyperpolymath/standards#967.
|
|
pipeline / SAST (semgrep)
semgrep reported 8 finding(s). Advisory by standing ruling — raise an issue with acceptance criteria. Set sast_blocking: true to gate on these.
|
|
pipeline / Detect ecosystems
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
|
pipeline / SAST (semgrep)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
|
pipeline / Secret scanning / shell-secrets
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
|
pipeline / Secret scanning / gitleaks
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
|
pipeline / Secret scanning / rust-secrets
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
|
pipeline / Pipeline report
hyperpolymath/modshells is on the pipeline exemption ledger (pipeline debt: 4 repos). NOTHING WAS CHECKED — Detected Ada (3), but this pipeline has no lint or format job for any of them, so NOTHING was checked. This is measured debt, not an unrecognised repository — see hyperpolymath/standards#967.. Add a gate for the ecosystems named above (see hyperpolymath/standards#967). Until one exists this repository cannot be made green by fixing its own code. Then delete this repository's line from .machine_readable/pipeline-allow.txt.
|
|
pipeline / Pipeline report
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|