ci: re-pin codeql-action to the true v4.38.0 commit

adefc0e

Select commit

Loading

Failed to load commit list.

Uh oh!

There was an error while loading. Please reload this page.

SonarQubeCloud

SonarCloud Code Analysis

GitGuardian

GitGuardian Security Checks

rust-ci on: pull_request 2

fmt + clippy + test

wasm build

ui-ci on: pull_request 2

AffineScript Verify

wasm core + bun tests

CodeQL Security Analysis on: pull_request 4

analyze (javascript-typescript, none)

analyze (rust, none)

Dogfood Gate on: pull_request 14

🔴 GATE: CI honesty self-test (fail fixtures)

Validate DEED manifests

Validate K9 contracts

🔴 GATE: Empty-linter (invisible characters)

🟡 CHECK: Groove manifest check

ℹ️ ADVISORY: Dogfooding compliance summary (non-gating)

Hypatia Security Scan on: pull_request 3

Hypatia Neurosymbolic Analysis

Secret Scanner on: pull_request 3

scan / gitleaks

scan / rust-secrets

scan / shell-secrets

Governance on: pull_request 19

governance / Check Workflow Staleness

governance / Allowlist Preflight

governance / Live Actions policy (credentialed advisory)

governance / Language / package anti-pattern policy

governance / Guix packaging policy (Nix retired)

governance / Security policy checks

governance / Code quality + docs

governance / Well-Known (RFC 9116 + RSR)

governance / Workflow security linter

governance / Trusted-base reduction policy

governance / Licence consistency

governance / Exemption ratchet

governance / Debt ratchet

governance / Validate Hypatia Baseline

Code scanning results

CodeQL

Hypatia

ci: re-pin codeql-action to the true v4.38.0 commit

Uh oh!

Select a check to view from the sidebar