ci(provisioning): don't persist checkout token while caller code runs

f1c3d0c

Select commit

Loading

Failed to load commit list.

Uh oh!

There was an error while loading. Please reload this page.

GitGuardian

GitGuardian Security Checks

codefactor.io

CodeFactor

Semgrep Code - hyperpolymath

semgrep-cloud-platform/scan

🔴 GATE: Security Gate (Fork PRs) on: pull_request_target 1

Registry Verify on: pull_request 1

Registry + topology in sync

K9-SVC Contractile Validation on: pull_request 1

K9-SVC contractile validation

Lock Self-Check on: pull_request 1

Lockfile self-consistency

UUID v7 conformance on: pull_request 1

Reject non-v7 UUID literals

Self Test on: pull_request 1

Repo self-tests

Documentation Format Enforcement on: pull_request 1

Check Documentation Format

ECHIDNA Proof Verification on: pull_request 2

Detect proof changes

Agda — lol/proofs

Idris2 — AVOW consent proofs

Trust pipeline summary

Actions Lockfile Gate on: pull_request 1

uses ⊆ actions.lock

SPARK Theatre Gate on: pull_request 1

SPARK Theatre Gate

AffineScript Verify on: pull_request 1

AffineScript Verify

DYADT Verify on: pull_request 1

Verify CLAIMS.a2ml + conformance

No-JS Scan (warn-first) on: pull_request 2

Scan for hand-authored JavaScript/TypeScript

Scorecard on: pull_request 1

scorecard / Run Scorecard

scorecard / Run Scorecard PR

Governance on: pull_request 22

governance / Check Workflow Staleness

governance / UUID v7 conformance

governance / Allowlist Preflight

governance / Live Actions policy (credentialed advisory)

governance / Language / package anti-pattern policy

governance / Guix packaging policy (Nix retired)

governance / Security policy checks

governance / Code quality + docs

governance / Well-Known (RFC 9116 + RSR)

governance / Workflow security linter

governance / Actions lockfile verify

governance / Trusted-base reduction policy

governance / Licence consistency

governance / Exemption ratchet

governance / Debt ratchet

governance / Validate Hypatia Baseline

CodeQL Security Analysis on: pull_request 2

analyze-js / analyze

analyze-actions / analyze

Elixir CI on: pull_request 1

ci / Detect mix.exs

ci / Compile + test

Hypatia Security Scan on: pull_request 2

scan / Hypatia Neurosymbolic Analysis

Secret Scanner on: pull_request 3

scan / gitleaks

scan / rust-secrets

scan / shell-secrets

Code scanning results

CodeQL

Hypatia

Scorecard

ci(provisioning): don't persist checkout token while caller code runs

Uh oh!

Select a check to view from the sidebar