-
-
Notifications
You must be signed in to change notification settings - Fork 0
Hypatia misc: scorecard DependencyPinning + SD022 k9 spec stale path (2 instances) #945
Copy link
Copy link
Open
Labels
automationBots, schedulers, dispatch, self-healing, fan-outBots, schedulers, dispatch, self-healing, fan-outcicdCI/CD: workflows, actions, lockfiles, pins, runners, release gatesCI/CD: workflows, actions, lockfiles, pins, runners, release gatespriority:p3Low - nice to haveLow - nice to havescope:repoConfined to this repositoryConfined to this repositorystatus:readyFully specified and ready to be picked upFully specified and ready to be picked uptech-debtKnown shortcut, drift, or hygiene owed - includes cleanupKnown shortcut, drift, or hygiene owed - includes cleanup
Description
Activity
Metadata
Metadata
Assignees
Labels
automationBots, schedulers, dispatch, self-healing, fan-outBots, schedulers, dispatch, self-healing, fan-outcicdCI/CD: workflows, actions, lockfiles, pins, runners, release gatesCI/CD: workflows, actions, lockfiles, pins, runners, release gatespriority:p3Low - nice to haveLow - nice to havescope:repoConfined to this repositoryConfined to this repositorystatus:readyFully specified and ready to be picked upFully specified and ready to be picked uptech-debtKnown shortcut, drift, or hygiene owed - includes cleanupKnown shortcut, drift, or hygiene owed - includes cleanup
Two singletons: scorecard
DependencyPinning(likely cleared by the actions.lock repair — preemptive ack in case it persists) and structural_drift SD022 (k9 spec referencessrc/tea/, illustrative content for another project context — needs an owner eyes-check).Acknowledged in
.hypatia-baseline.json(hypatia triage 2026-09-22, expires 2026-12-22) by the main-red fix-forward. This issue is the tracking item; closing it requires either remediating the instances or renewing the acknowledgement.Instances (2):
scorecard/DependencyPinningmedium —.1 action-pinning integrity finding(s) in standards; verify .github/workflows/actions.lock with gh actions-lock
structural_drift/SD022medium —2-protocols/k9-coordination/spec/COORDINATION-K9-SPEC_v1.adocdoc references
src/tea/but no such directory exists in the tree (likely surviving a directory rename)