[pipeline][HIGH] PR #30 is not green: Harden repository secret hygiene

[simongonzalezdc]

Pipeline issue-surfacing finding

This issue was created or refreshed automatically by the pipeline issue surfacing worker. It is designed to be picked up later by a fixer/triage agent without rediscovering the failure from scratch.

Signal

• Repo: simongonzalezdc/focus.sh
• Kind: open_pr_blocker
• Severity: HIGH
• Source: kyanite/pr-status
• Fingerprint: issue-surfacing:3761774ab9ea6b5e467f
• Generated at: 2026-06-02T19:53:02Z

Root cause hypothesis

Kyanite PR monitor reports this open PR is not green.

Recommended fix

Inspect failed checks and push the smallest safe branch fix, or close the PR if superseded.

Acceptance criteria

• PR checks are green and merged, or PR is intentionally closed with explanation.

Evidence

{
  "kyanite_row": {
    "action_lane": "factory-fixer",
    "auto_actionable": true,
    "bad_checks": [
      {
        "annotations": [
          "Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830, actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5, actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff, golangci/golangci-lint-action@v6. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/",
          "Error return value of `resp.Body.Close` is not checked (errcheck)",
          "Error return value of `resp.Body.Close` is not checked (errcheck)",
          "Error return value of `resp.Body.Close` is not checked (errcheck)",
          "Error return value of `resp.Body.Close` is not checked (errcheck)",
          "Error return value of `resp.Body.Close` is not checked (errcheck)",
          "Error return value of `e.loadCache` is not checked (errcheck)",
          "Error return value of `os.Remove` is not checked (errcheck)",
          "Error return value of `stdin.Close` is not checked (errcheck)",
          "Error return value of `stdin.Close` is not checked (errcheck)",
          "Error return value of `cmd.Run` is not checked (errcheck)"
        ],
        "conclusion": "FAILURE",
        "detailsUrl": "https://github.com/simongonzalezdc/focus.sh/actions/runs/26842646732/job/79153653849",
        "name": "build-test (ubuntu-latest)",
        "status": "COMPLETED",
        "workflowName": "CI"
      },
      {
        "annotations": [
          "The strategy configuration was canceled because \"build-test.ubuntu-latest\" failed",
          "Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830, actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5, actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff, golangci/golangci-lint-action@v6. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/",
          "The operation was canceled."
        ],
        "conclusion": "CANCELLED",
        "detailsUrl": "https://github.com/simongonzalezdc/focus.sh/actions/runs/26842646732/job/79153653908",
        "name": "build-test (macos-latest)",
        "status": "COMPLETED",
        "workflowName": "CI"
      },
      {
        "annotations": [
          "The strategy configuration was canceled because \"build-test.ubuntu-latest\" failed",
          "Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830, actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5, actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/",
          "The operation was canceled.",
          "NOTICE: windows-latest requests are being redirected to windows-2025-vs2026 by June 15, 2026"
        ],
        "conclusion": "CANCELLED",
        "detailsUrl": "https://github.com/simongonzalezdc/focus.sh/actions/runs/26842646732/job/79153653805",
        "name": "build-test (windows-latest)",
        "status": "COMPLETED",
        "workflowName": "CI"
      }
    ],
    "base": "main",
... <truncated>

Self-hosted inference

Not used.

(🤖 Pipeline Issues)