Repository navigation
fix(ci): restore the required-check producers — allow-list, actions.lock gate, K9 pedigree #4
hyperpolymathactions-lock.yml
on: pull_request
Verify actions.lock
8s
Regenerate actions.lock
12s
Annotations
3 errors, 10 warnings, and 2 notices
|
Verify actions.lock
Process completed with exit code 1.
|
|
Verify actions.lock
actions.lock is out of step with .github/workflows — every onboarded workflow will fail with startup_failure until it is regenerated
|
|
Regenerate actions.lock
Process completed with exit code 1.
|
|
Verify actions.lock
pinned to a bare SHA without a symbolic ref — weakens supply-chain traceability
|
|
Verify actions.lock
pinned to a bare SHA without a symbolic ref — weakens supply-chain traceability
|
|
Verify actions.lock
pinned to a bare SHA without a symbolic ref — weakens supply-chain traceability
|
|
Verify actions.lock
pinned to a bare SHA without a symbolic ref — weakens supply-chain traceability
|
|
Verify actions.lock
pinned to a bare SHA without a symbolic ref — weakens supply-chain traceability
|
|
Verify actions.lock
lockfile pins actions/checkout@v4.1.7 but no uses: in this workflow references it
|
|
Verify actions.lock
pinned to a bare SHA without a symbolic ref — weakens supply-chain traceability
|
|
Verify actions.lock
pinned to a bare SHA without a symbolic ref — weakens supply-chain traceability
|
|
Verify actions.lock
lockfile pins actions/checkout@v4.2.2 but no uses: in this workflow references it
|
|
Verify actions.lock
pinned to a bare SHA without a symbolic ref — weakens supply-chain traceability
|
|
Verify actions.lock
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|
|
Regenerate actions.lock
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|