Skip to content
.github/workflows/hypatia-scan.yml

chore(deps): bump the actions group with 5 updates #1846

Sign in to view logs

chore(deps): bump the actions group with 5 updates

chore(deps): bump the actions group with 5 updates #1846

Workflow file for this run

.github/workflows/hypatia-scan.yml at ffcec65
# This workflow is managed by gh actions-lock.
# SPDX-License-Identifier: MPL-2.0
# This workflow is managed by gh actions-lock.
name: Hypatia Security Scan
on:
push:
branches: [main, master, develop]
pull_request:
branches: [main, master]
schedule:
- cron: "0 0 * * 0"
workflow_dispatch:
permissions:
actions: read
contents: read
# MUST be `write`, not `read`. hypatia-scan-reusable.yml declares
# `security-events: write` so it can upload SARIF. A called workflow may
# never request more than its caller grants: if it does, GitHub rejects the
# run at *startup*, before any job is created — `startup_failure`, zero jobs,
# and `gh run view --log-failed` returns "log not found". Granting `read`
# here did not degrade the scan, it silently prevented it from ever running.
# See standards#451.
security-events: write
jobs:
scan:
uses: ./.github/workflows/hypatia-scan-reusable.yml

Check failure on line 29 in .github/workflows/hypatia-scan.yml

View workflow run for this annotation

GitHub Actions / .github/workflows/hypatia-scan.yml

Invalid workflow file 

error parsing called workflow
".github/workflows/hypatia-scan.yml"
-> "./.github/workflows/hypatia-scan-reusable.yml"
: Invalid dependency lockfile "hyperpolymath/standards/.github/workflows/actions.lock@f517f7a8a15b1e8a0e73420ef6474d4a60a2bccd": workflow ".github/workflows/hypatia-scan-reusable.yml" references actions not present in the lockfile: github/codeql-action@1c5b675653bb5c22dbe9b12b556ec555138e09fd Run 'gh actions-lock' to regenerate the lockfile.
secrets: inherit