ci: vendor validation scripts and remove remote action pins

[hyperpolymath]

Automated PR to fix CI after deleted actions.

[sonarqubecloud]

Quality Gate passed

Issues
6 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[gitar-bot]

CI failed: CI failures in root shape and K9 contract validation caused by an unauthorized '.githooks/' directory and example files missing required magic numbers/pedigree blocks.

Overview

Two failures occurred in the CI build: a root shape check failure due to an unauthorized .githooks/ directory in the repository root, and a K9 contract validation failure due to contract files missing the required 'K9!' magic number and pedigree blocks. Both failures are directly related to the changes in the pull request.

Failures

Root Shape Check Failure (confidence: high)

• Type: build
• Affected jobs: 90126438962
• Related to change: yes
• Root cause: The script scripts/check-root-shape.sh detected .githooks/ as an unauthorized entry in the repository root directory.
• Suggested fix: Either move the .githooks directory into an appropriate subdirectory or add an entry for it in .machine_readable/root-allow.txt.

K9 Contract Validation Failure (confidence: high)

• Type: test
• Affected jobs: 90126438750
• Related to change: yes
• Root cause: The script .githooks/validate-k9.sh failed during validation because files under ./.machine_readable/self-validating/examples/ lack the required 'K9!' magic number on the first non-empty line and do not contain a pedigree = { ... } section.
• Suggested fix: Update the K9 contract files in ./.machine_readable/self-validating/examples/ to include the 'K9!' magic number as the first non-empty line and add the required pedigree = { ... } block.

Summary

• Change-related failures: 2 failures (Root shape check failure and K9 contract validation failure)
• Infrastructure/flaky failures: 0 failures
• Recommended action: Update the root allowlist or move the .githooks directory, and fix the K9 contract example files to include the required header and pedigree blocks.

Code Review ✅ Approved

Vendors validation scripts and removes remote action pins to fix CI after deleted actions. No issues found.

Auto-approved: No blocking issues found.
Please see Auto-approve Docs for details on setting custom approval criteria.

Tip

Comment Gitar fix CI or enable auto-apply: gitar auto-apply:on

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing less information.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}

[gitar-bot]

Gitar has auto-approved this PR (configure)