fix(ci): repin governance-reusable off phantom SHA 8f31a5a4 - #94
Conversation
8f31a5a4ba591d544b65f91f6d78b136e07756f0 does not exist in hyperpolymath/standards: compare/main...8f31a5a4 returns 404, not "behind". A caller pinned to a nonexistent ref cannot start. The run is created with jobs.total_count == 0 and emits NO check run, so the required context "governance / Code quality + docs" never reports and the repo reads GREENER than a healthy one. Repinned to da2c748aad55c1a1dcba00b60fe4a35017bc6540 (standards main, 2026-09-14T20:13:37Z). Owner ruling R-U 2026-09-15: fix the workflow, not the rule (plan C8). No ruleset was edited; the required status check is unchanged. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01TCKh98NmUmfvgpuGyJbNu8
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Organization UI Review profile: ASSERTIVE Plan: Advanced Run ID: 📒 Files selected for processing (1)
Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review. 📜 Recent review details⏰ Context from checks skipped due to timeout. (4)
🔇 Additional comments (1)
📝 SummarySummary by CodeRabbit
WalkthroughThe governance and Hypatia scan jobs now reference reusable workflows at commit ChangesWorkflow pin updates
Priority: ⚪ Pending latest changes Estimated code review effort: 1 (Trivial) | ~2 minutes Change: Bug fix Merge Risk: ⚪ Minimal · up to The workflow pin updates restore the intended reusable jobs without evidence of a current merge-blocking failure. 🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✨ Finishing Touches 💡 1🛠️ Fix failing CI checks 💡
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. A rabbit checks the workflow trail Comment |
hypatia-scan.yml called hypatia-scan-reusable.yml at cc58c0cb, which does not resolve (422). GitHub rejected the file at parse time, so the run recorded `failure` with zero jobs and uploaded no SARIF. The code_scanning ruleset rule therefore waited forever for a Hypatia result that could never arrive, blocking the PR while every required status check was green. Repins onto da2c748a, the same blob this PR already uses for governance-reusable.yml. The caller passes no inputs and the reusable only input is optional with a default, so the contract is unchanged. Verified green first on knot-rider#56, where Hypatia SARIF went from 0 to 1 analysis. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01TCKh98NmUmfvgpuGyJbNu8
What
Repins this repo's
governance.ymlfrom8f31a5a4toda2c748a(standards main).Why
8f31a5a4is a phantom SHA — it does not exist inhyperpolymath/standards.Discriminator:
gh api repos/hyperpolymath/standards/compare/main...8f31a5a4returns404. A real-but-stale pin returns
behind; only a nonexistent one 404s.A caller pinned to a nonexistent ref cannot start. The run is created with
jobs.total_count == 0and emits no check run at all — so the required contextgovernance / Code quality + docsnever reports, and this repo has been readinggreener than a healthy one while its governance gate was silently absent.
Scope
Pin line only. No ruleset was edited and the required status check is unchanged.
This is plan C8 — fix the workflow, not the rule. Owner ruling R-U, 2026-09-15.
Known cosmetic defect left alone deliberately: the duplicated
# This workflow is managed by gh actions-lock.banner is a separate recordedtool defect and is out of scope here.
🤖 Generated with Claude Code
https://claude.ai/code/session_01TCKh98NmUmfvgpuGyJbNu8