From 6f8c2db84a0d83bffd45db57cbe764bdda07efa9 Mon Sep 17 00:00:00 2001 From: Claude Date: Wed, 24 Jun 2026 09:31:13 +0000 Subject: [PATCH] ci: re-pin stale standards reusable-workflow pins to a published HEAD governance.yml, hypatia-scan.yml and scorecard.yml pinned the standards reusable workflows at 5a93d9d57cc0, which is not a recognised ancestor of hyperpolymath/standards HEAD (e8fe153). That single bad pin caused two failures on every PR and on main: - governance / Check Workflow Staleness: rejects the pin as unverifiable ("not a recognised ancestor ... forged, from a fork, or too divergent"). - scan / Hypatia Neurosymbolic Analysis: the hypatia reusable workflow at that divergent SHA transitively referenced actions/cache@d4373f26, which does not resolve, so the job failed at "Prepare all required actions" before any analysis ran. Re-pin all three to e8fe153b568af5e3534a261eee0258fa84fa6c5e (current published standards HEAD): 0 commits behind, inside the staleness window, and at HEAD the hypatia reusable workflow references a valid actions/cache. The other three standards pins (mirror, rust-ci, secret-scanner) were already valid ancestors and are left untouched. Co-Authored-By: Claude Opus 4.8 Claude-Session: https://claude.ai/code/session_019g8rX8vRZ2HemGKagi6a71 --- .github/workflows/governance.yml | 2 +- .github/workflows/hypatia-scan.yml | 2 +- .github/workflows/scorecard.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml index 32b7e0de..d9dc263b 100644 --- a/.github/workflows/governance.yml +++ b/.github/workflows/governance.yml @@ -13,4 +13,4 @@ permissions: jobs: governance: - uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@5a93d9d57cc04de4002d6d0ecd336fc7a8698910 + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@e8fe153b568af5e3534a261eee0258fa84fa6c5e diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml index aa8bde76..918a43a6 100644 --- a/.github/workflows/hypatia-scan.yml +++ b/.github/workflows/hypatia-scan.yml @@ -16,4 +16,4 @@ permissions: jobs: scan: - uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@5a93d9d57cc04de4002d6d0ecd336fc7a8698910 + uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@e8fe153b568af5e3534a261eee0258fa84fa6c5e diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 5484457a..60695933 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -13,4 +13,4 @@ permissions: jobs: scorecard: - uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@5a93d9d57cc04de4002d6d0ecd336fc7a8698910 + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@e8fe153b568af5e3534a261eee0258fa84fa6c5e