build(build): replace SLSA attestation with actions/attest #475
pr-validation.yml
on: pull_request
Dependency Scan
6s
Shell Lint
/
Shell Lint
21s
Terraform Lint
/
Terraform Lint
17s
Bicep Lint
/
Bicep Lint
8m 38s
Documentation Lint
/
Docs Lint
34s
Code Quality Lint
/
Code Quality Lint
20s
PowerShell Lint
/
PowerShell Lint
53s
Security Scan
/
Security Scan
1m 36s
YAML Lint
/
YAML Lint
17s
Terraform Documentation Check
/
Terraform Documentation Compliance Check
21s
Bicep Documentation Check
/
Bicep Documentation Compliance Check
21s
AIO Version Check
/
Check AIO Component Versions
24s
Rust Clippy Lint Check
/
Rust Clippy Lint Check
1m 31s
PowerShell Provider Tests
/
PowerShell Resource Provider Tests
11s
Pester Tests
10s
Matrix: CodeQL Analysis
Documentation Automation
/
🏗️ Generate Three-Tree Sidebar
1m 34s
Terraform Variable Compliance
/
Check Terraform Variable Consistency
12s
Matrix: Terraform Module Tests
Waiting for pending jobs
Matrix: Application Matrix Builds / build-applications
Waiting for pending jobs
Application Matrix Builds
/
summarize-builds
Annotations
1 error and 27 warnings
|
Documentation Automation / 🔗 Validate Documentation Links
Process completed with exit code 123.
|
|
Dependency Scan
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Pester Tests
No files were found with the provided path: test-results/. No artifacts will be uploaded.
|
|
Code Quality Lint / Code Quality Lint
Code quality lint violations found (soft-fail enabled)
|
|
AIO Version Check / Check AIO Component Versions:
./src/100-edge/110-iot-ops/bicep/types.bicep#L0
AIO component version/train mismatch for azure-iot-operations in bicep file: ./src/100-edge/110-iot-ops/bicep/types.bicep
|
|
AIO Version Check / Check AIO Component Versions:
./src/100-edge/110-iot-ops/bicep/types.bicep#L0
AIO component version/train mismatch for secret_sync_controller in bicep file: ./src/100-edge/110-iot-ops/bicep/types.bicep
|
|
PowerShell Lint / PowerShell Lint
No files were found with the provided path: lint-results/. No artifacts will be uploaded.
|
|
CodeQL Analysis (python)
Starting April 2026, the CodeQL Action will skip computing file coverage information on pull requests to improve analysis performance. File coverage information will still be computed on non-PR analyses.
To opt out of this change, set the `CODEQL_ACTION_FILE_COVERAGE_ON_PRS` environment variable to `true`. Alternatively, create a custom repository property with the name `github-codeql-file-coverage-on-prs` and the type "True/false", then set this property to `true` in the repository's settings.
|
|
CodeQL Analysis (python)
2 issues were detected with this workflow: CodeQL language 'javascript' is referenced by more than one entry in the 'language' matrix parameter for job 'codeql-analysis'. This may result in duplicate alerts. Please edit the 'language' matrix parameter to keep only one of the following: 'javascript', 'typescript'. Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.
|
|
CodeQL Analysis (typescript)
Starting April 2026, the CodeQL Action will skip computing file coverage information on pull requests to improve analysis performance. File coverage information will still be computed on non-PR analyses.
To opt out of this change, set the `CODEQL_ACTION_FILE_COVERAGE_ON_PRS` environment variable to `true`. Alternatively, create a custom repository property with the name `github-codeql-file-coverage-on-prs` and the type "True/false", then set this property to `true` in the repository's settings.
|
|
CodeQL Analysis (typescript)
2 issues were detected with this workflow: CodeQL language 'javascript' is referenced by more than one entry in the 'language' matrix parameter for job 'codeql-analysis'. This may result in duplicate alerts. Please edit the 'language' matrix parameter to keep only one of the following: 'javascript', 'typescript'. Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.
|
|
CodeQL Analysis (javascript)
Starting April 2026, the CodeQL Action will skip computing file coverage information on pull requests to improve analysis performance. File coverage information will still be computed on non-PR analyses.
To opt out of this change, set the `CODEQL_ACTION_FILE_COVERAGE_ON_PRS` environment variable to `true`. Alternatively, create a custom repository property with the name `github-codeql-file-coverage-on-prs` and the type "True/false", then set this property to `true` in the repository's settings.
|
|
CodeQL Analysis (javascript)
2 issues were detected with this workflow: CodeQL language 'javascript' is referenced by more than one entry in the 'language' matrix parameter for job 'codeql-analysis'. This may result in duplicate alerts. Please edit the 'language' matrix parameter to keep only one of the following: 'javascript', 'typescript'. Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.
|
|
CodeQL Analysis (csharp)
Starting April 2026, the CodeQL Action will skip computing file coverage information on pull requests to improve analysis performance. File coverage information will still be computed on non-PR analyses.
To opt out of this change, set the `CODEQL_ACTION_FILE_COVERAGE_ON_PRS` environment variable to `true`. Alternatively, create a custom repository property with the name `github-codeql-file-coverage-on-prs` and the type "True/false", then set this property to `true` in the repository's settings.
|
|
CodeQL Analysis (csharp)
2 issues were detected with this workflow: CodeQL language 'javascript' is referenced by more than one entry in the 'language' matrix parameter for job 'codeql-analysis'. This may result in duplicate alerts. Please edit the 'language' matrix parameter to keep only one of the following: 'javascript', 'typescript'. Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.
|
|
Terraform Variable Compliance / Check Terraform Variable Consistency
No files were found with the provided path: **/terraform-docs-output*.json
**/variable-compliance-results*.json. No artifacts will be uploaded.
|
|
Terraform Variable Compliance / Check Terraform Variable Consistency
"/home/runner/work/edge-ai/edge-ai/src/000-cloud/080-azureml/terraform"
|
|
Terraform Variable Compliance / Check Terraform Variable Consistency
"/home/runner/work/edge-ai/edge-ai/src/000-cloud/080-azureml/terraform/modules/workspace",
|
|
|
|
|
|
Terraform Variable Compliance / Check Terraform Variable Consistency
"Whether to assign dependent resource roles and federation for the ML workload managed identity"
|
|
Terraform Variable Compliance / Check Terraform Variable Consistency
"Whether to assign dependent resource roles to the ML workload managed identity",
|
|
Terraform Variable Compliance / Check Terraform Variable Consistency
"differences": [
|
|
Terraform Variable Compliance / Check Terraform Variable Consistency
"variable": "should_assign_ml_workload_identity_roles",
|
|
|
|
|
|
CodeQL Analysis (rust)
Starting April 2026, the CodeQL Action will skip computing file coverage information on pull requests to improve analysis performance. File coverage information will still be computed on non-PR analyses.
To opt out of this change, set the `CODEQL_ACTION_FILE_COVERAGE_ON_PRS` environment variable to `true`. Alternatively, create a custom repository property with the name `github-codeql-file-coverage-on-prs` and the type "True/false", then set this property to `true` in the repository's settings.
|
|
CodeQL Analysis (rust)
2 issues were detected with this workflow: CodeQL language 'javascript' is referenced by more than one entry in the 'language' matrix parameter for job 'codeql-analysis'. This may result in duplicate alerts. Please edit the 'language' matrix parameter to keep only one of the following: 'javascript', 'typescript'. Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
bicep-lint-results-23869716456
|
217 Bytes |
sha256:bce0dd17c8867d5e490cdf4945fedd82bba535f5b664b583e2dc74e9cfd182de
|
|
|
code-quality-lint-results
|
7.8 KB |
sha256:5002ffa87b3514a601b5d37b8dec86e2c75861df36ddc0bf900ae762aad5e06a
|
|
|
docs-lint-results-23869716456
|
537 Bytes |
sha256:0365552ab83755a4e2eac1386ec44c24181472666ec72d9af7bdf13eaa678f2b
|
|
|
docs-validation-results-23869716456
Expired
|
711 Bytes |
sha256:e7edbdb306ee6e3c95b9fd563275e253ca7e02f3a8edbfbbbd87fe5c83fa618d
|
|
|
documentation-health-report
|
639 Bytes |
sha256:145f7fe420cf4c128db6946a8ea2a93bbe6375a8a7ada5bc0213a29f37950a7e
|
|
|
rp-pester-test-results
|
1.34 KB |
sha256:e91f99cd1ea4fb661969271afe3572bd31f88a21724ccbe1e6721ca24ca4f3d8
|
|
|
security-scan-results
|
7.3 KB |
sha256:6d149045a6c06ba59c3dc932f6e0d39e5ad8decdb2beba2628c21138230d17a9
|
|
|
shell-lint-results
|
3.53 KB |
sha256:edeb2e11cc9826466e344b175a875149b7e81164a0899c547d8d727590cd0c79
|
|
|
terraform-lint-results
|
1.95 KB |
sha256:e4f2a785547195aa513c07089acdd4f1520847f01612bcaa10dd65f66452e14a
|
|
|
yaml-lint-results
|
974 Bytes |
sha256:03685b164255059ec0627c946511649ca23a0167975bdb64942542572cd8c9c1
|
|