Repository navigation
fix(ci): restore the required-check producers — allow-list, actions.lock gate, K9 pedigree #2
hyperpolymathactions-lock.yml
on: pull_request
Verify actions.lock
7s
Regenerate actions.lock
Annotations
10 errors, 3 warnings, and 1 notice
|
Verify actions.lock
used in workflow but not pinned in lockfile (github/codeql-action/init@v4.38.2)
|
|
Verify actions.lock
used in workflow but not pinned in lockfile (actions/checkout@v7.0.1)
|
|
Verify actions.lock
used in workflow but not pinned in lockfile (actions/deploy-pages@v5.0.1)
|
|
Verify actions.lock
used in workflow but not pinned in lockfile (actions/upload-pages-artifact@v5.0.0)
|
|
Verify actions.lock
used in workflow but not pinned in lockfile (actions/configure-pages@v6.0.0)
|
|
Verify actions.lock
used in workflow but not pinned in lockfile (actions/cache@v6.1.0)
|
|
Verify actions.lock
used in workflow but not pinned in lockfile (actions/checkout@v7.0.1)
|
|
Verify actions.lock
used in workflow but not pinned in lockfile (actions/checkout@v7.0.1)
|
|
Verify actions.lock
used in workflow but not pinned in lockfile (actions/checkout@v7.0.1)
|
|
Verify actions.lock
actions.lock is out of step with .github/workflows — every onboarded workflow will fail with startup_failure until it is regenerated
|
|
Verify actions.lock
pinned to a bare SHA without a symbolic ref — weakens supply-chain traceability
|
|
Verify actions.lock
pinned to a bare SHA without a symbolic ref — weakens supply-chain traceability
|
|
Verify actions.lock
pinned to a bare SHA without a symbolic ref — weakens supply-chain traceability
|
|
Verify actions.lock
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|