Repository navigation
fix(ci): repoint the deleted validate-actions at the live ecosystem repos - #25
Merged
Merged
Conversation
…epos hyperpolymath/a2ml-validate-action and k9-validate-action are DELETED (verified 404). An unresolvable uses: ref produces NO check run at all -- not a red one -- so 'Validate A2ML manifests' and 'Validate K9 contracts' could never report, and any ruleset requiring them was unsatisfiable. Repos looked green while the check had simply never run. The actions moved rather than died: hyperpolymath/a2ml-ecosystem/validate-action hyperpolymath/k9-ecosystem/validate-action Repointed, not vendored. The estate handover proposed vendoring the scripts into every consumer; that would create one copy per repo to drift, which the same document names as this estate's most recurring failure mode. Measured scope: 69 repos, 135 references -- not the ~272 estimated. SHAs are those already proven green in the-nash-equilibrium#83; both verified to resolve and to contain validate-action/action.yml at that exact ref. Verified: no dead refs remain, and every touched workflow still parses. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
🔍 Hypatia Security ScanFindings: 80 issues detected
View findings[
{
"reason": "codeql.yml lists `language: javascript-typescript` but the repo has no source files in any CodeQL-scannable language. The analyze job will exit 'no source files' on every run. Switch the matrix to `actions` (which scans workflow files — every repo has those).",
"type": "codeql_language_matrix_mismatch",
"file": "codeql.yml",
"action": "switch_codeql_matrix_to_actions",
"rule_module": "workflow_audit",
"severity": "high"
},
{
"reason": "Issue in boj-build.yml",
"type": "missing_timeout_minutes",
"file": "boj-build.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in casket-pages.yml",
"type": "missing_timeout_minutes",
"file": "casket-pages.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in casket-pages.yml",
"type": "missing_timeout_minutes",
"file": "casket-pages.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in codeql.yml",
"type": "missing_timeout_minutes",
"file": "codeql.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in dependabot-automerge.yml",
"type": "missing_timeout_minutes",
"file": "dependabot-automerge.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in dogfood-gate.yml",
"type": "missing_timeout_minutes",
"file": "dogfood-gate.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in dogfood-gate.yml",
"type": "missing_timeout_minutes",
"file": "dogfood-gate.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in dogfood-gate.yml",
"type": "missing_timeout_minutes",
"file": "dogfood-gate.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
},
{
"reason": "Issue in dogfood-gate.yml",
"type": "missing_timeout_minutes",
"file": "dogfood-gate.yml",
"action": "flag",
"rule_module": "workflow_audit",
"severity": "medium"
}
]Powered by Hypatia Neurosymbolic CI/CD Intelligence |
|
Note Automatic reviews are paused because your trial's included automatic processing has been used for this period. Upgrade now, or comment "Gitar review" to run a review anytime. Code Review ✅ ApprovedRepoints deleted action references in CI workflows to the live ecosystem repositories, ensuring required checks correctly report status. No issues found.
OptionsDisplay: compact → Showing less information. Comment with these commands to change the behavior for this request:
Was this helpful? React with 👍 / 👎 | Gitar |
|
|
![gitar-bot[bot]](https://avatars.githubusercontent.com/in/827041?s=60&v=4){kind=small}
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
hyperpolymath/a2ml-validate-actionandk9-validate-actionare deleted (verified 404). An unresolvableuses:ref produces no check run at all — not a red one — soValidate A2ML manifestsandValidate K9 contractscould never report, and any ruleset requiring them was unsatisfiable. The repo looked green while the check had simply never run.The actions moved:
a2ml-ecosystem/validate-actionandk9-ecosystem/validate-action. Repointed rather than vendored — vendoring would create one drifting copy per repo.Measured scope: 69 repos, 135 references. SHAs are those already proven green in
the-nash-equilibrium#83.Verified: no dead refs remain; every touched workflow still parses.
🤖 Generated with Claude Code