Two action references have been resolving to 404/marketplace-unlisted on every push since the workflow landed (commit 1fb7266 Add Oracle Aggregator and CCIP Integration), which surfaces as Prepare all required actions failures in validate-kubernetes and validate-smart-contracts before any actual validation runs.
- ludovico85/kube-score-action@v1: replaced with a direct download of kube-score v1.20.1 from the upstream zegl/kube-score release artifacts and an inline scan over k8s/base/**/*.yaml. Skips cleanly with a printed message when no manifests exist.
- crytic/[email protected].0: replaced with actions/setup-python@v5 + pip install --upgrade slither-analyzer + slither contracts --print human-summary. Trailing || true preserves the original action's non-blocking informational behaviour (the action also exited 0 on findings).
Out of scope (still failing, intentionally not silenced): validate-terraform (terraform fmt -check fails on 6 .tf files), validate-security (trivy/codeql), validate-documentation (missing CONTRIBUTING/CHANGELOG/docs/*). Those are real signals about repo health and need separate decisions.
Co-Authored-By: Nakamoto, S <[email protected]>
Devin AIandNakamoto, S <[email protected]>
7c3799a648