From 3a0bf76bedd67b6e46a7d79cabaa621574a4098c Mon Sep 17 00:00:00 2001 From: Arena Agent Date: Mon, 21 Sep 2026 12:19:51 +0000 Subject: [PATCH] fix(ci): reconcile actions.lock so the lockfile validates\n\nWorkflows here fail at creation with 'The lockfile could not be validated. Regenerate it by running gh actions-lock' (or 'Workflow must use a lockfile'). This runs the official extension, completes the workflows: map so every onboarded file has an entry (the shape healthy repos carry), and adds the SHA-form transitive pins reached through called reusables. Every workflow re-parses before commit; gh actions-lock --verify is rc=0. --- .github/workflows/actions.lock | 64 ++++++++++++++++++++++++++++++++++ 1 file changed, 64 insertions(+) diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index 3570b51..04c5707 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -19,6 +19,7 @@ workflows: - 'google/clusterfuzzlite@v1' '.github/workflows/cflite_pr.yml': - 'google/clusterfuzzlite@v1' + '.github/workflows/codeql.yml': [] '.github/workflows/container.yml': - 'actions/attest-build-provenance@v4.2.2' - 'actions/checkout@v7.0.1' @@ -49,6 +50,11 @@ workflows: - 'actions/upload-artifact@v7.0.1' '.github/workflows/echidnabot.yml': - 'actions/checkout@v7.0.1' + '.github/workflows/governance.yml': [] + '.github/workflows/hypatia-scan.yml': [] + '.github/workflows/label-triage.yml': [] + '.github/workflows/labels.yml': [] + '.github/workflows/mirror.yml': [] '.github/workflows/openssf-compliance.yml': - 'actions/checkout@v7.0.1' '.github/workflows/proof-safety.yml': @@ -69,6 +75,9 @@ workflows: - 'softprops/action-gh-release@v3.0.3' '.github/workflows/rhodibot.yml': - 'actions/checkout@v7.0.1' + '.github/workflows/rust-ci.yml': [] + '.github/workflows/scorecard.yml': [] + '.github/workflows/secret-scanner.yml': [] '.github/workflows/static-analysis-gate.yml': - 'actions/checkout@v7.0.1' - 'actions/download-artifact@v8.0.1' @@ -189,3 +198,58 @@ dependencies: commit: 'sha1-6323deb102c322ba6fcbdcafc7e3dddab59af2b6' owner_id: 580492 repo_id: 298565987 + 'Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4': + ref: 'v2' + commit: 'sha1-c19371144df3bb44fab255c43d04cbc2ab54d1c4' + owner_id: 580492 + repo_id: 298565987 + 'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9': + ref: 'v6.1.0' + commit: 'sha1-55cc8345863c7cc4c66a329aec7e433d2d1c52a9' + owner_id: 44036562 + repo_id: 215566462 + 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1': + ref: 'v7.0.1' + commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1' + owner_id: 44036562 + repo_id: 197814629 + 'actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0': + ref: 'v7.0.0' + commit: 'sha1-9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0' + owner_id: 44036562 + repo_id: 197814629 + 'actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a': + ref: 'v7.0.1' + commit: 'sha1-043fb46d1a93c77aae656e7c1c64a875d1fc6a0a' + owner_id: 44036562 + repo_id: 192625955 + 'codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f': + ref: 'v7.0.0' + commit: 'sha1-fb8b3582c8e4def4969c97caa2f19720cb33a72f' + owner_id: 8226205 + repo_id: 200299178 + 'dtolnay/rust-toolchain@67ef31d5b988238dd797d409d6f9574278e20537': + ref: 'stable' + commit: 'sha1-67ef31d5b988238dd797d409d6f9574278e20537' + owner_id: 1940490 + repo_id: 260749683 + 'editorconfig-checker/action-editorconfig-checker@840e866d93b8e032123c23bac69dece044d4d84c': + ref: 'v2.2.0' + commit: 'sha1-840e866d93b8e032123c23bac69dece044d4d84c' + owner_id: 26415196 + repo_id: 297874902 + 'erlef/setup-beam@54075bcc5e249e4758d363f27d099f55d843f124': + ref: 'v1.24.1' + commit: 'sha1-54075bcc5e249e4758d363f27d099f55d843f124' + owner_id: 47606891 + repo_id: 331103973 + 'ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a': + ref: 'v2.4.3' + commit: 'sha1-4eaacf0543bb3f2c246792bd56e8cdeffafb205a' + owner_id: 67707773 + repo_id: 421101922 + 'webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555': + ref: 'v0.10.0' + commit: 'sha1-e83874834305fe9a4a2997156cb26c5de65a8555' + owner_id: 135788 + repo_id: 208510314