nordisk/ci-status

STATUS.md

# CI status: ci

Written by the dwarves forge (`dwarves serve`, its `[ci]` table) at 2026-10-29 17:35 UTC. Each pipeline runs on a new head of its branch (polled, last poll 2026-10-29 17:28:05.080844297) or on its cron, one run at a time.

| pipeline | repo | branch | commit | trigger | result | finished (UTC) | took | files |
|---|---|---|---|---|---|---|---|---|
| gunnar-ci | gunnar | master | `b68b1176` | push | 🔴 red | 2026-10-29 15:20 |  |  |
| holger-ci | holger |  |  |  | ⚪ not run yet |  |  |  |
| gunnar-ui-ci | gunnar-ui |  |  |  | ⚪ not run yet |  |  |  |
| holger-ui-ci | holger-ui |  |  |  | ⚪ not run yet |  |  |  |
| monetize-ci | monetize |  |  |  | ⚪ not run yet |  |  |  |
| edda-ci | edda |  |  |  | ⚪ not run yet |  |  |  |
| scorecard-gunnar | gunnar | master | `d419ac64` | manual | 🟢 green | 2026-10-29 17:35 | 2m57s | `runs/scorecard-gunnar/20261029T1732Z-d419ac64` |
| scorecard-holger | holger | main | `c1d6d1a1` | manual | 🟢 green | 2026-10-29 15:20 | 1m50s | `runs/scorecard-holger/20261029T1518Z-c1d6d1a1` |

## Why red

- **gunnar-ci** `b68b1176`: stopped by hand: its target passed 138 GB on dwarf (before the in-run budget existed)

## scorecard-gunnar

OpenSSF Scorecard v5.6.0, local mode, on `gunnar` at `d419ac64`: **5.2 / 10** (the aggregate of the checks local mode runs).

| check | score | reason |
|---|---|---|
| Binary-Artifacts | 10 / 10 | no binaries found in the repo |
| Dangerous-Workflow | 10 / 10 | no dangerous workflow patterns detected |
| Dependency-Update-Tool | 0 / 10 | no update tool detected |
| Fuzzing | 0 / 10 | project is not fuzzed |
| License | 9 / 10 | license file detected |
| Packaging | inconclusive | packaging workflow not detected |
| Pinned-Dependencies | 0 / 10 | dependency not pinned by hash detected -- score normalized to 0 |
| SAST | 0 / 10 | no SAST tool detected |
| Security-Policy | 10 / 10 | security policy file detected |
| Token-Permissions | 10 / 10 | GitHub workflow tokens follow principle of least privilege |
| Vulnerabilities | 0 / 10 | 40 existing vulnerabilities detected |

Not run in local mode (they need a GitHub or GitLab API): Branch-Protection, CI-Tests, CII-Best-Practices, Code-Review, Contributors, Maintained, SBOM, Signed-Releases, Webhooks.

## scorecard-holger

OpenSSF Scorecard v5.6.0, local mode, on `holger` at `unknown`: **2.9 / 10** (the aggregate of the checks local mode runs).

| check | score | reason |
|---|---|---|
| Binary-Artifacts | 6 / 10 | binaries present in source code |
| Dangerous-Workflow | inconclusive | no workflows found |
| Dependency-Update-Tool | 0 / 10 | no update tool detected |
| Fuzzing | 0 / 10 | project is not fuzzed |
| License | 9 / 10 | license file detected |
| Packaging | inconclusive | packaging workflow not detected |
| Pinned-Dependencies | inconclusive | no dependencies found |
| SAST | 0 / 10 | no SAST tool detected |
| Security-Policy | 10 / 10 | security policy file detected |
| Token-Permissions | inconclusive | No tokens found |
| Vulnerabilities | 0 / 10 | 10 existing vulnerabilities detected |

Not run in local mode (they need a GitHub or GitLab API): Branch-Protection, CI-Tests, CII-Best-Practices, Code-Review, Contributors, Maintained, SBOM, Signed-Releases, Webhooks.

## History

| finished (UTC) | pipeline | commit | trigger | result |
|---|---|---|---|---|
| 2026-10-29 17:35 | scorecard-gunnar | `d419ac64` | manual | 🟢 green |
| 2026-10-29 15:20 | gunnar-ci | `b68b1176` | push | 🔴 red |
| 2026-10-29 15:20 | scorecard-holger | `c1d6d1a1` | manual | 🟢 green |
| 2026-10-29 15:18 | scorecard-gunnar | `` | manual | 🔴 red |

The files of a run (the forge's step log, the repository's own `receipt.json` and step logs) are in this repository under `runs/<pipeline>/`; clone it with `git clone ssh://anonymous@git.gunnar.rs:2222/nordisk/ci-status.git`.