fix(ci): close the governance gate — SPDX, permissions, SHA pins, reusable bump #185
dogfood-gate.yml
on: pull_request
Validate A2ML manifests
10s
Validate K9 contracts
6s
Empty-linter (invisible characters)
6s
Groove manifest check
6s
Dogfooding compliance summary
5s
Annotations
10 errors and 25 warnings
|
Validate K9 contracts:
./generated/k9iser/pcc-cargo.k9#L1
Missing K9! magic number. First non-empty line must be exactly 'K9!'
|
|
Validate K9 contracts:
./generated/k9iser/panel-harness.k9#L1
Missing pedigree block. K9 files must contain a 'pedigree = { ... }' section
|
|
Validate K9 contracts:
./generated/k9iser/panel-harness.k9#L1
Missing K9! magic number. First non-empty line must be exactly 'K9!'
|
|
Validate K9 contracts:
./generated/k9iser/contract-workspace.k9#L1
Missing pedigree block. K9 files must contain a 'pedigree = { ... }' section
|
|
Validate K9 contracts:
./generated/k9iser/contract-workspace.k9#L1
Missing K9! magic number. First non-empty line must be exactly 'K9!'
|
|
Validate K9 contracts:
./generated/k9iser/contract-security.k9#L1
Missing pedigree block. K9 files must contain a 'pedigree = { ... }' section
|
|
Validate K9 contracts:
./generated/k9iser/contract-security.k9#L1
Missing K9! magic number. First non-empty line must be exactly 'K9!'
|
|
Validate K9 contracts:
./generated/k9iser/clade-portal-config.k9#L1
Missing pedigree block. K9 files must contain a 'pedigree = { ... }' section
|
|
Validate K9 contracts:
./generated/k9iser/clade-portal-config.k9#L1
Missing K9! magic number. First non-empty line must be exactly 'K9!'
|
|
Validate K9 contracts:
./coordination.k9#L1
Missing pedigree block. K9 files must contain a 'pedigree = { ... }' section
|
|
Validate K9 contracts
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Validate K9 contracts:
./layouts/language-design.k9.ncl#L1
No security level (leash/security_level) found in pedigree block
|
|
Validate K9 contracts:
./layouts/language-design.k9.ncl#L1
Pedigree block missing 'version' or 'schema_version' field
|
|
Validate K9 contracts:
./layouts/database-design.k9.ncl#L1
No security level (leash/security_level) found in pedigree block
|
|
Validate K9 contracts:
./layouts/database-design.k9.ncl#L1
Pedigree block missing 'version' or 'schema_version' field
|
|
Validate K9 contracts:
./generated/k9iser/rescript-compiler.k9#L1
Missing SPDX-License-Identifier in first 10 lines
|
|
Validate K9 contracts:
./generated/k9iser/pcc-cargo.k9#L1
Missing SPDX-License-Identifier in first 10 lines
|
|
Validate K9 contracts:
./generated/k9iser/panel-harness.k9#L1
Missing SPDX-License-Identifier in first 10 lines
|
|
Validate K9 contracts:
./generated/k9iser/contract-workspace.k9#L1
Missing SPDX-License-Identifier in first 10 lines
|
|
Validate K9 contracts:
./generated/k9iser/contract-security.k9#L1
Missing SPDX-License-Identifier in first 10 lines
|
|
Validate K9 contracts:
./generated/k9iser/clade-portal-config.k9#L1
Missing SPDX-License-Identifier in first 10 lines
|
|
Empty-linter (invisible characters)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Groove manifest check
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Validate A2ML manifests
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Validate A2ML manifests:
./panel-clades/clades/help/Help.a2ml#L1
Missing version or schema_version field
|
|
Validate A2ML manifests:
./panel-clades/clades/floor-raise/FloorRaise.a2ml#L1
Missing version or schema_version field
|
|
Validate A2ML manifests:
./panel-clades/clades/feedback-routing/FeedbackRouting.a2ml#L1
Missing version or schema_version field
|
|
Validate A2ML manifests:
./panel-clades/clades/evangeliser/Evangeliser.a2ml#L1
Missing version or schema_version field
|
|
Validate A2ML manifests:
./panel-clades/clades/echidna/Echidna.a2ml#L1
Missing version or schema_version field
|
|
Validate A2ML manifests:
./panel-clades/clades/contractile-completeness/ContractileCompleteness.a2ml#L1
Missing version or schema_version field
|
|
Validate A2ML manifests:
./panel-clades/clades/ambientops/AmbientOps.a2ml#L1
Missing version or schema_version field
|
|
Validate A2ML manifests:
./panel-clades/0-AI-MANIFEST.a2ml#L159
Attestation block found but missing proof/signature/hash fields
|
|
Validate A2ML manifests:
./panel-clades/0-AI-MANIFEST.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
|
|
Validate A2ML manifests:
./.machine_readable/anchors/ANCHOR.a2ml#L1
Missing SPDX-License-Identifier in first 10 lines
|
|
Dogfooding compliance summary
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|