From c9e9b334ec37ef644dec64e33cf95a47b5a66088 Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Tue, 15 Sep 2026 09:03:34 +0100 Subject: [PATCH 1/2] fix(ci): repin governance-reusable off a phantom SHA 8f31a5a4ba591d544b65f91f6d78b136e07756f0 does not exist in hyperpolymath/standards: compare/main...8f31a5a4 returns 404, not "behind". A caller pinned to a nonexistent ref cannot start. The run is created with jobs.total_count == 0 and emits NO check run, so the required context "governance / Code quality + docs" never reports and the repo reads GREENER than a healthy one. Repinned to da2c748aad55c1a1dcba00b60fe4a35017bc6540 (standards main, 2026-09-14T20:13:37Z). Owner ruling R-U 2026-09-15: fix the workflow, not the rule (plan C8). No ruleset was edited; the required status check is unchanged. Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_01TCKh98NmUmfvgpuGyJbNu8 --- .github/workflows/governance.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml index b5ea41c..4a1afdb 100644 --- a/.github/workflows/governance.yml +++ b/.github/workflows/governance.yml @@ -15,6 +15,6 @@ permissions: jobs: governance: - uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@8f31a5a4ba591d544b65f91f6d78b136e07756f0 + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@da2c748aad55c1a1dcba00b60fe4a35017bc6540 secrets: HYPATIA_SCAN_PAT: ${{ secrets.HYPATIA_SCAN_PAT }} From 736d4128385f7759a5dca52bc4e54eb4ab474c79 Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Tue, 15 Sep 2026 10:28:29 +0100 Subject: [PATCH 2/2] fix(ci): repin hypatia-scan.yml onto the last usable standards blob hypatia-scan.yml called hypatia-scan-reusable.yml at cc58c0cb, which does not resolve (422). GitHub rejected the file at parse time, so the run recorded `failure` with zero jobs and uploaded no SARIF. The code_scanning ruleset rule therefore waited forever for a Hypatia result that could never arrive, blocking the PR while every required status check was green. Repins onto da2c748a, the same blob this PR already uses for governance-reusable.yml. The caller passes no inputs and the reusable only input is optional with a default, so the contract is unchanged. Verified green first on knot-rider#56, where Hypatia SARIF went from 0 to 1 analysis. Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_01TCKh98NmUmfvgpuGyJbNu8 --- .github/workflows/hypatia-scan.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml index 8d8e4d8..64d6033 100644 --- a/.github/workflows/hypatia-scan.yml +++ b/.github/workflows/hypatia-scan.yml @@ -18,6 +18,6 @@ permissions: jobs: scan: - uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@cc58c0cb23f73fc2019ce85a56a468e5248a93b3 + uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@da2c748aad55c1a1dcba00b60fe4a35017bc6540 with: block-on-high: true