Skip to content

fix(ci): repin governance-reusable off phantom SHA 8f31a5a4 - #94

Merged
hyperpolymath merged 3 commits into
mainfrom
fix/repin-governance-phantom-pin-20260915
Sep 15, 2026
Merged

hyperpolymath merged 3 commits into
mainfrom
fix/repin-governance-phantom-pin-20260915

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

What

Repins this repo's governance.yml from 8f31a5a4 to da2c748a (standards main).

Why

8f31a5a4 is a phantom SHA — it does not exist in hyperpolymath/standards.
Discriminator: gh api repos/hyperpolymath/standards/compare/main...8f31a5a4 returns
404. A real-but-stale pin returns behind; only a nonexistent one 404s.

A caller pinned to a nonexistent ref cannot start. The run is created with
jobs.total_count == 0 and emits no check run at all — so the required context
governance / Code quality + docs never reports, and this repo has been reading
greener than a healthy one while its governance gate was silently absent.

Scope

Pin line only. No ruleset was edited and the required status check is unchanged.
This is plan C8 — fix the workflow, not the rule. Owner ruling R-U, 2026-09-15.

Known cosmetic defect left alone deliberately: the duplicated
# This workflow is managed by gh actions-lock. banner is a separate recorded
tool defect and is out of scope here.

🤖 Generated with Claude Code

https://claude.ai/code/session_01TCKh98NmUmfvgpuGyJbNu8

8f31a5a4ba591d544b65f91f6d78b136e07756f0 does not exist in hyperpolymath/standards: compare/main...8f31a5a4 returns
404, not "behind". A caller pinned to a nonexistent ref cannot start. The run is
created with jobs.total_count == 0 and emits NO check run, so the required context
"governance / Code quality + docs" never reports and the repo reads GREENER than a
healthy one.

Repinned to da2c748aad55c1a1dcba00b60fe4a35017bc6540 (standards main, 2026-09-14T20:13:37Z).

Owner ruling R-U 2026-09-15: fix the workflow, not the rule (plan C8). No ruleset
was edited; the required status check is unchanged.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TCKh98NmUmfvgpuGyJbNu8
@coderabbitai

coderabbitai Bot commented Sep 15, 2026 •

Copy link
Copy Markdown

Review Change StackReview Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 11ae8964-6638-44e5-b73b-03843b16e54b

📥 Commits

Reviewing files that changed from the base of the PR and between c9e9b33 and 80703a5.

📒 Files selected for processing (1)
  • .github/workflows/hypatia-scan.yml

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

📜 Recent review details
⏰ Context from checks skipped due to timeout. (4)
  • GitHub Check: scan / Hypatia Neurosymbolic Analysis
  • GitHub Check: governance / Workflow security linter
  • GitHub Check: governance / Debt ratchet
  • GitHub Check: Haskell Analyzer
🔇 Additional comments (1)
.github/workflows/hypatia-scan.yml (1)

21-21: LGTM!


📝 Summary

Summary by CodeRabbit

  • Chores
    • Updated the governance workflow reference to a newer pinned revision.
    • Updated the Hypatia scanning workflow to use a newer pinned revision while retaining blocking for high-severity findings.

Walkthrough

The governance and Hypatia scan jobs now reference reusable workflows at commit da2c748aad55c1a1dcba00b60fe4a35017bc6540.

Changes

Workflow pin updates

Layer / File(s) Summary
Update reusable workflow pins
.github/workflows/governance.yml, .github/workflows/hypatia-scan.yml
The governance and Hypatia scan workflow references now use the updated pinned commit. The block-on-high: true input remains unchanged.

Priority: ⚪ Pending latest changes

Estimated code review effort: 1 (Trivial) | ~2 minutes

Change: Bug fix

Merge Risk: ⚪ Minimal · up to 80703

The workflow pin updates restore the intended reusable jobs without evidence of a current merge-blocking failure.

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Title check ✅ Passed The title clearly identifies the primary change: repinning the governance reusable workflow from the nonexistent SHA 8f31a5a4. It is concise and relevant to the changeset.
Description check ✅ Passed The description accurately explains the workflow pin changes, the phantom SHA issue, the impact on required checks, and the intended scope. It is directly related to the changeset.
✨ Finishing Touches 💡 1
🛠️ Fix failing CI checks 💡
  • Create stacked PR
  • Commit on current branch

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

A rabbit checks the workflow trail
New pins guide each hopping sail
Governance follows the sign
Hypatia scans on the same line
Stable steps now run in time

Comment @coderabbitai help to get the list of available commands.

coderabbitai[bot]
coderabbitai Bot previously approved these changes Sep 15, 2026
hypatia-scan.yml called hypatia-scan-reusable.yml at cc58c0cb, which does not
resolve (422). GitHub rejected the file at parse time, so the run recorded
`failure` with zero jobs and uploaded no SARIF. The code_scanning ruleset rule
therefore waited forever for a Hypatia result that could never arrive, blocking
the PR while every required status check was green.

Repins onto da2c748a, the same blob this PR already uses for
governance-reusable.yml. The caller passes no inputs and the reusable only
input is optional with a default, so the contract is unchanged. Verified green
first on knot-rider#56, where Hypatia SARIF went from 0 to 1 analysis.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TCKh98NmUmfvgpuGyJbNu8
@hyperpolymath
hyperpolymath merged commit 0f98940 into main Sep 15, 2026
28 of 31 checks passed
@hyperpolymath
hyperpolymath deleted the fix/repin-governance-phantom-pin-20260915 branch September 15, 2026 17:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant