Skip to content

Fix/token permissions id gitbot fleet 20260911 #1610

Fix/token permissions id gitbot fleet 20260911

Fix/token permissions id gitbot fleet 20260911 #1610

Workflow file for this run

# SPDX-License-Identifier: MPL-2.0
# This workflow is managed by gh actions-lock.
# This workflow is managed by gh actions-lock.
# Thin wrapper around hyperpolymath/standards hypatia-scan-reusable.yml.
# See standards#191 for the reusable's purpose and design.
name: Hypatia Security Scan
on:
push:
branches: [main, master, develop]
# No `branches:` filter — a required check whose workflow is branch-gated is
# never created on a non-matching base and blocks merge forever at
# "Expected — Waiting for status to be reported" (cf. affinescript#645).
pull_request:
schedule:
- cron: '0 0 * * 0'
workflow_dispatch:
# Estate guardrail: cancel superseded runs so re-pushes don't pile up.
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
permissions:
actions: read
contents: read
security-events: write
pull-requests: write
jobs:
hypatia:
uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@cc58c0cb23f73fc2019ce85a56a468e5248a93b3

Check failure on line 33 in .github/workflows/hypatia-scan.yml

View workflow run for this annotation

GitHub Actions / .github/workflows/hypatia-scan.yml

Invalid workflow file

error parsing called workflow ".github/workflows/hypatia-scan.yml" -> "hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@cc58c0cb23f73fc2019ce85a56a468e5248a93b3" : workflow was not found. See https://docs.github.com/actions/learn-github-actions/reusing-workflows#access-to-reusable-workflows for more information.
secrets: inherit
# Total caller-side wall-clock cap for the reusable. Matches
# Hypatia's `missing_timeout_minutes` rule expectation. The scan is
# typically ~3 min; the cap leaves headroom for slow estate builds.