feat(release): signed, SHA-pinned musl release with build provenance

9853570

Select commit

Loading

Failed to load commit list.

Uh oh!

There was an error while loading. Please reload this page.

GitGuardian

GitGuardian Security Checks

Workflow Security Linter on: push 2

lint-workflows

codefactor.io

CodeFactor

Semgrep Code - hyperpolymath

semgrep-cloud-platform/scan

SonarQubeCloud

SonarCloud Code Analysis

OpenSSF Compliance on: pull_request 1

openssf-compliance

Dependabot Auto-Merge on: pull_request

automerge

Estate Rules on: pull_request 1

estate-rules

Dogfood Gate on: pull_request 9

Validate DEED manifests

Validate K9 contracts

Empty-linter (invisible characters)

Groove manifest check

Validate eclexiaiser manifest

Dogfooding compliance summary

Code Quality on: pull_request 2

lint

docs

Static Analysis Gate on: pull_request 19

panic-attack assail

Hypatia neurosymbolic scan

Patch Bridge CVE triage

Deposit findings for gitbot-fleet

Runtime Policy on: pull_request 2

Runtime Policy

Guix Package Policy on: pull_request 1

check

Security Policy on: pull_request 1

check

Lock Sync Gate on: pull_request 1

actions.lock is in sync with the workflow YAML

Workflow Security Linter on: pull_request 2

lint-workflows

CodeQL Security Analysis on: pull_request 1

analyze (actions, none)

Rust CI on: pull_request 3

rust-ci / Detect Cargo.toml

rust-ci / Cargo check + clippy + fmt

rust-ci / Cargo audit (security)

rust-ci / llvm-cov line coverage

rust-ci / Cargo test

Secret Scanner on: pull_request 3

scan / gitleaks

scan / rust-secrets

scan / shell-secrets

Hypatia Security Scan on: pull_request 1

hypatia / Hypatia Neurosymbolic Analysis

Governance on: pull_request 20

governance / Check Workflow Staleness

governance / Allowlist Preflight

governance / Live Actions policy (credentialed advisory)

governance / Language / package anti-pattern policy

governance / Guix packaging policy (Nix retired)

governance / Security policy checks

governance / Code quality + docs

governance / Well-Known (RFC 9116 + RSR)

governance / Workflow security linter

governance / Actions lockfile verify

governance / Trusted-base reduction policy

governance / Licence consistency

governance / Exemption ratchet

governance / Debt ratchet

governance / Validate Hypatia Baseline

🟡 CHECK: Standards pipeline on: pull_request 1

Code scanning results

CodeQL

Hypatia

feat(release): signed, SHA-pinned musl release with build provenance

Uh oh!

Select a check to view from the sidebar