From f5e8e49fe5b7c39e2ad55018f4530c98c885627b Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Mon, 3 Aug 2026 19:52:48 +0100 Subject: [PATCH 1/3] fix(ci): hand-add lockfile entries for the five reusable-caller workflows gh actions-lock v0.1.6 skips workflows whose only `uses:` is a reusable workflow call, but enforcement still demands each file appear in the lockfile ("The following workflows are missing a lockfile: ... hypatia-scan.yml"). Empty entries satisfy it; the reusable itself is covered by the called repo's own lockfile at the re-pinned ref. Co-Authored-By: Claude Fable 5 --- .github/workflows/actions.lock | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index 0e850a1..03a4ddf 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -15,10 +15,13 @@ workflows: - 'actions/checkout@v7.0.1' '.github/workflows/estate-rules.yml': - 'actions/checkout@v7.0.1' + '.github/workflows/governance.yml': [] '.github/workflows/guix-nix-policy.yml': - 'actions/checkout@v7.0.1' + '.github/workflows/hypatia-scan.yml': [] '.github/workflows/instant-sync.yml': - 'peter-evans/repository-dispatch@v4.0.1' + '.github/workflows/mirror.yml': [] '.github/workflows/openssf-compliance.yml': - 'actions/checkout@v7.0.1' '.github/workflows/pages.yml': @@ -39,6 +42,8 @@ workflows: - 'actions/checkout@v7.0.1' '.github/workflows/runtime-policy.yml': - 'actions/checkout@v7.0.1' + '.github/workflows/scorecard.yml': [] + '.github/workflows/secret-scanner.yml': [] '.github/workflows/security-policy.yml': - 'actions/checkout@v7.0.1' '.github/workflows/static-analysis-gate.yml': From e1bb98c33bae3c843cdbd573ad1e181a7fccb22d Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Tue, 4 Aug 2026 04:44:00 +0100 Subject: [PATCH 2/3] ci: trigger full wave to test caller lockfile entries Co-Authored-By: Claude Fable 5 From 051034344a7ab24e03e6d2f7219bb2c27b55da75 Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Tue, 4 Aug 2026 04:53:47 +0100 Subject: [PATCH 3/3] fix(ci): bump standards re-pin to fcb8669 (post-#571/#572 gate fixes) Co-Authored-By: Claude Fable 5 --- .github/workflows/governance.yml | 2 +- .github/workflows/hypatia-scan.yml | 2 +- .github/workflows/mirror.yml | 2 +- .github/workflows/scorecard.yml | 2 +- .github/workflows/secret-scanner.yml | 2 +- 5 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml index 0239fdd..ead672f 100644 --- a/.github/workflows/governance.yml +++ b/.github/workflows/governance.yml @@ -19,4 +19,4 @@ concurrency: jobs: governance: - uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@5a597720580d12fa04d24e1b9e100e2eb8d6e653 + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@fcb8669169b4e9f5d9848608df880ae5fae812b4 diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml index 30d86dd..148643b 100644 --- a/.github/workflows/hypatia-scan.yml +++ b/.github/workflows/hypatia-scan.yml @@ -18,4 +18,4 @@ permissions: jobs: scan: - uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@5a597720580d12fa04d24e1b9e100e2eb8d6e653 + uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@fcb8669169b4e9f5d9848608df880ae5fae812b4 diff --git a/.github/workflows/mirror.yml b/.github/workflows/mirror.yml index 6fabfb1..c0de703 100644 --- a/.github/workflows/mirror.yml +++ b/.github/workflows/mirror.yml @@ -10,5 +10,5 @@ permissions: contents: read jobs: mirror: - uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@5a597720580d12fa04d24e1b9e100e2eb8d6e653 + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@fcb8669169b4e9f5d9848608df880ae5fae812b4 secrets: inherit diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index d53591c..eb80548 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -24,4 +24,4 @@ jobs: contents: read security-events: write id-token: write - uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@5a597720580d12fa04d24e1b9e100e2eb8d6e653 + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@fcb8669169b4e9f5d9848608df880ae5fae812b4 diff --git a/.github/workflows/secret-scanner.yml b/.github/workflows/secret-scanner.yml index b178b77..4ddcf9d 100644 --- a/.github/workflows/secret-scanner.yml +++ b/.github/workflows/secret-scanner.yml @@ -12,5 +12,5 @@ permissions: contents: read jobs: scan: - uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@5a597720580d12fa04d24e1b9e100e2eb8d6e653 + uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@fcb8669169b4e9f5d9848608df880ae5fae812b4 secrets: inherit