Merge branch 'main' into ci/workflow-contract-foundation-20261018

67892fb

Select commit

Loading

Failed to load commit list.

Uh oh!

There was an error while loading. Please reload this page.

GitGuardian

GitGuardian Security Checks

Semgrep Code - hyperpolymath

semgrep-cloud-platform/scan

SonarQubeCloud

SonarCloud Code Analysis

AffineScript Verify on: pull_request 1

AffineScript Verify

CodeQL Security Analysis on: pull_request 2

analyze-js / analyze

analyze-actions / analyze

Self Test on: pull_request 1

Repo self-tests

Documentation Format Enforcement on: pull_request 1

Check Documentation Format

No-JS Scan (warn-first) on: pull_request 2

Scan for hand-authored JavaScript/TypeScript

UUID v8 conformance on: pull_request 1

Reject non-v8 UUID literals

DYADT Verify on: pull_request 1

Verify CLAIMS.a2ml + conformance

Lock Sync Gate on: pull_request 1

actions.lock is in sync with the workflow YAML

Secret Scanner on: pull_request 3

scan / gitleaks

scan / rust-secrets

scan / shell-secrets

Hypatia Security Scan on: pull_request 4

scan / Hypatia Neurosymbolic Analysis

Governance on: pull_request 32

governance / Check Workflow Staleness

governance / UUID v7 conformance

governance / UUID v8 conformance

governance / Allowlist Preflight

governance / Live Actions policy (credentialed advisory)

governance / Language / package anti-pattern policy

governance / Guix packaging policy (Nix retired)

governance / Security policy checks

governance / Code quality + docs

governance / Well-Known (RFC 9116 + RSR)

governance / Workflow security linter

governance / Actions lockfile verify

governance / Trusted-base reduction policy

governance / Licence consistency

governance / Exemption ratchet

governance / Debt ratchet

governance / JS runtimes — environment provisions Bun first

governance / JS runtimes — bun

governance / JS runtimes — deno

governance / JS runtimes — pnpm

governance / Validate Hypatia Baseline

Elixir CI on: pull_request 1

ci / Detect mix.exs

ci / Compile + test

Self-CI on: pull_request 7

Call CI Pipeline / Detect ecosystems

Call CI Pipeline / Secret scanning / gitleaks

Call CI Pipeline / Secret scanning / rust-secrets

Call CI Pipeline / Secret scanning / shell-secrets

Call CI Pipeline / Rust / Detect Cargo.toml

Call CI Pipeline / Rust / Cargo check + clippy + fmt

Call CI Pipeline / Rust / Cargo audit (security)

Call CI Pipeline / Rust / llvm-cov line coverage

Call CI Pipeline / Rust / Cargo test

Call CI Pipeline / Nickel

Call CI Pipeline / Deno (tier 2)

Call CI Pipeline / ReScript

Call CI Pipeline / V

Call CI Pipeline / Haskell

Call CI Pipeline / Pipeline report

Actions Lockfile Gate on: pull_request 1

uses ⊆ actions.lock

K9-SVC Contractile Validation on: pull_request 1

K9-SVC contractile validation

ijson-jcs conformance on: pull_request 2

Report non-canonical JSON (report-only)

Scorecard on: pull_request 1

scorecard / Run Scorecard

scorecard / Run Scorecard PR

Lock Self-Check on: pull_request 1

Lockfile self-consistency

ECHIDNA Proof Verification on: pull_request 2

Detect proof changes

Agda — lol/proofs

Idris2 — AVOW consent proofs

Trust pipeline summary

SPARK Theatre Gate on: pull_request 1

SPARK Theatre Gate

Code scanning results

CodeQL

Hypatia

Scorecard

Merge branch 'main' into ci/workflow-contract-foundation-20261018

Uh oh!

Select a check to view from the sidebar