From 0a53f6017b19747e100714114d8e952d864967eb Mon Sep 17 00:00:00 2001 From: hyperpolymath <6759885+hyperpolymath@users.noreply.github.com> Date: Mon, 14 Sep 2026 22:42:32 +0100 Subject: [PATCH 1/2] fix(ci): repair unparseable permissions scalar in 1 workflow file(s) A scalar `permissions: read-all` followed by an indented ` actions: read` is a YAML parse error, so the workflow never starts. It emits no check run at all, which means a required context silently never reports and the repository looks greener than a repaired one. `read-all` already grants `actions: read`, so deleting the stray line is a semantic no-op. Verified with a real parser: each file fails `yq` before the change and parses after it. Files: scorecard.yml Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_0178nN4Nm3neFRy5K9StZKnB --- .github/workflows/scorecard.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 84917d7..396beea 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -9,7 +9,6 @@ on: branches: [main] permissions: read-all - actions: read jobs: analysis: From 57bb9543da0a5243d3907ad9a6ca0fc68ea5220c Mon Sep 17 00:00:00 2001 From: hyperpolymath <6759885+hyperpolymath@users.noreply.github.com> Date: Tue, 15 Sep 2026 03:15:54 +0100 Subject: [PATCH 2/2] chore(ci): return scorecard.yml to PR #55 scorecard.yml is already repaired on branch fix/repair-startup-dead-scorecard-yml (PR #55), which re-indents `actions: read` INTO the analysis job's own permissions block. That is the correct cure: job-level permissions REPLACE the top-level map, so the analysis job never inherited `read-all` and Scorecard was running without `actions: read`. Deleting the stray line made the file parse but left the job functionally short. Restoring this file from main so PR #55 owns it uncontested. Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_0178nN4Nm3neFRy5K9StZKnB --- .github/workflows/scorecard.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 396beea..84917d7 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -9,6 +9,7 @@ on: branches: [main] permissions: read-all + actions: read jobs: analysis: