From cab868a3e9d1fd0aec914e3d7a69edb531e4feae Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" Date: Tue, 27 Oct 2026 14:02:46 +0000 Subject: [PATCH] =?UTF-8?q?fix(ci):=20CI=20context=20contract=20follows=20?= =?UTF-8?q?the=20secret-scan=20=E2=86=92=20scan=20rename?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit #62 (D243) renamed the secret-scanner caller job from `secret-scan` to `scan`, so it publishes `scan / gitleaks`, `scan / rust-secrets` and `scan / shell-secrets`. .machine_readable/CI-CONTEXTS.a2ml still named the old caller, and `Required contexts are producible` has been red on main since (CONTRACT BROKEN: 'no longer defines caller job secret-scan'). The contract and the docs table now name the caller as it is. Reproduced: tools/check-ci-contexts.sh . --no-network → CONTRACT BROKEN, rc=1. After: contract intact, rc=0. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01VTeVWDEJgdYKsUNr4uhnXX --- .machine_readable/CI-CONTEXTS.a2ml | 4 ++-- docs/CI-CONTEXTS.adoc | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.machine_readable/CI-CONTEXTS.a2ml b/.machine_readable/CI-CONTEXTS.a2ml index cdfda8d..f87e9d3 100644 --- a/.machine_readable/CI-CONTEXTS.a2ml +++ b/.machine_readable/CI-CONTEXTS.a2ml @@ -33,9 +33,9 @@ published-contexts = ["hypatia / Hypatia Neurosymbolic Analysis"] [[wrapper]] gate = "Secret Scanner" workflow = ".github/workflows/secret-scanner.yml" -caller-job-id = "secret-scan" +caller-job-id = "scan" reusable = "hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml" -published-contexts = ["secret-scan / gitleaks", "secret-scan / rust-secrets", "secret-scan / shell-secrets"] +published-contexts = ["scan / gitleaks", "scan / rust-secrets", "scan / shell-secrets"] [[wrapper]] gate = "Governance" diff --git a/docs/CI-CONTEXTS.adoc b/docs/CI-CONTEXTS.adoc index cb7a850..fe41102 100644 --- a/docs/CI-CONTEXTS.adoc +++ b/docs/CI-CONTEXTS.adoc @@ -61,7 +61,7 @@ prints the same list, and CI runs it: | `.github/workflows/hypatia-scan.yml` → standards `hypatia-scan-reusable.yml` | Secret scan -| `secret-scan / gitleaks`, `secret-scan / rust-secrets`, `secret-scan / shell-secrets` +| `scan / gitleaks`, `scan / rust-secrets`, `scan / shell-secrets` | `.github/workflows/secret-scanner.yml` | Governance