Repository navigation
fix(ci): caller lockfile entries + standards re-pin to fcb8669 (completes #48) - #50
Conversation
…lows
gh actions-lock v0.1.6 skips workflows whose only `uses:` is a reusable
workflow call, but enforcement still demands each file appear in the
lockfile ("The following workflows are missing a lockfile: ...
hypatia-scan.yml"). Empty entries satisfy it; the reusable itself is
covered by the called repo's own lockfile at the re-pinned ref.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
69b8100 to
0510343
Compare
|
Note Automatic reviews are paused because your trial's included automatic processing has been used for this period. Upgrade now, or comment "Gitar review" to run a review anytime. Code Review ✅ ApprovedAdds hand-added lockfile entries for the five reusable-caller workflows and re-pins standards reusables to fcb8669. No issues found.
OptionsDisplay: compact → Showing less information. Comment with these commands to change the behavior for this request:
Important Your trial ends in 6 days — upgrade now to keep code review, CI analysis, auto-apply, custom automations, and more. Was this helpful? React with 👍 / 👎 | Gitar |
|
![gitar-bot[bot]](https://avatars.githubusercontent.com/in/827041?s=60&v=4){kind=small}
|
Note Automatic reviews are paused because your trial's included automatic processing has been used for this period. Upgrade now, or comment "Gitar review" to run a review anytime. Code Review ✅ ApprovedAdds hand-added lockfile entries for the five reusable-caller workflows and re-pins standards reusables to fcb8669. No issues found.
OptionsDisplay: compact → Showing less information. Comment with these commands to change the behavior for this request:
Important Your trial ends in 6 days — upgrade now to keep code review, CI analysis, auto-apply, custom automations, and more. Was this helpful? React with 👍 / 👎 | Gitar |
#48 was merged before this branch's final two commits, so main still lacks the pieces that actually revive the five reusable callers:
governance/hypatia-scan/mirror/scorecard/secret-scanner:[]) —gh actions-lockv0.1.6 skips reusable-only workflows but enforcement still rejects them by name ("The following workflows are missing a lockfile: … hypatia-scan.yml").5a59772→fcb8669— standards #571/#572 landed after the first re-pin, restoring its gates;fcb8669verified via the commits API.This PR's own wave is the decisive consumer-half test.
🤖 Generated with Claude Code