docs: clarify dependency watch gates and local remediation

e2a2dcb

Select commit

Loading

Failed to load commit list.

Uh oh!

There was an error while loading. Please reload this page.

GitGuardian

GitGuardian Security Checks

Semgrep Code - hyperpolymath

semgrep-cloud-platform/scan

SonarQubeCloud

SonarCloud Code Analysis

Lock Self-Check on: pull_request 1

Lockfile self-consistency

.github/workflows/self-ci.yml on: pull_request 1

K9-SVC Contractile Validation on: pull_request 1

K9-SVC contractile validation

Actions Lockfile Gate on: pull_request 1

uses ⊆ actions.lock

ECHIDNA Proof Verification on: pull_request 2

Detect proof changes

Agda — lol/proofs

Idris2 — AVOW consent proofs

Trust pipeline summary

Secret Scanner on: pull_request 3

scan / gitleaks

scan / rust-secrets

scan / shell-secrets

AffineScript Verify on: pull_request 1

AffineScript Verify

Scorecard on: pull_request 1

scorecard / Run Scorecard

scorecard / Run Scorecard PR

No-JS Scan (warn-first) on: pull_request 2

Scan for hand-authored JavaScript/TypeScript

Lock Sync Gate on: pull_request 1

actions.lock is in sync with the workflow YAML

Documentation Format Enforcement on: pull_request 1

Check Documentation Format

Self Test on: pull_request 1

Repo self-tests

Hypatia Security Scan on: pull_request 4

scan / Hypatia Neurosymbolic Analysis

UUID v8 conformance on: pull_request 1

Reject non-v8 UUID literals

SPARK Theatre Gate on: pull_request 1

SPARK Theatre Gate

Elixir CI on: pull_request 1

ci / Detect mix.exs

ci / Compile + test

DYADT Verify on: pull_request 1

Verify CLAIMS.a2ml + conformance

Governance on: pull_request 32

governance / Check Workflow Staleness

governance / UUID v7 conformance

governance / UUID v8 conformance

governance / Allowlist Preflight

governance / Live Actions policy (credentialed advisory)

governance / Language / package anti-pattern policy

governance / Guix packaging policy (Nix retired)

governance / Security policy checks

governance / Code quality + docs

governance / Well-Known (RFC 9116 + RSR)

governance / Workflow security linter

governance / Actions lockfile verify

governance / Trusted-base reduction policy

governance / Licence consistency

governance / Exemption ratchet

governance / Debt ratchet

governance / JS runtimes — environment provisions Bun first

governance / JS runtimes — bun

governance / JS runtimes — deno

governance / JS runtimes — pnpm

governance / Validate Hypatia Baseline

ijson-jcs conformance on: pull_request 4

Report non-canonical JSON (report-only)

Converted JSON stays canonical

CodeQL Security Analysis on: pull_request 2

analyze-js / analyze

analyze-actions / analyze

Code scanning results

CodeQL

Hypatia

Scorecard

docs: clarify dependency watch gates and local remediation

Uh oh!

Select a check to view from the sidebar