From 7942d3e50b8edd9856b0f6cbebfdae1a626c73bb Mon Sep 17 00:00:00 2001 From: Claude Date: Mon, 9 Nov 2026 13:43:58 +0000 Subject: [PATCH 1/2] fix(ci): re-pin the standards callers to metadatastician/standards hypatia-scan.yml has failed at startup with zero jobs on every run since at least 2026-10-26, on push, pull_request and schedule. governance.yml and secret-scanner.yml do the same on every push to main. All of them call reusables in the standards repository, which moved from hyperpolymath to the metadatastician organisation. Its repo id is unchanged (1116521501), but actions.lock still recorded the old owner id (6759885). standards' own lock records the repository under owner 297579217. This re-pins the four callers to metadatastician/standards at the same commit (8f2ee50) and records the current owner id. Nothing else changes. The caller permissions are not the cause: hypatia-scan already grants the security-events: write its reusable declares, and the other reusables declare no write permission. This is a test of that cause. If these callers now start, the same fix applies to every estate repository that still pins hyperpolymath/standards. Also corrects main-estate-audit.yml's header, which claimed these callers start normally. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01J4QvDjbjhwmFbcYz4FKn16 --- .github/workflows/actions.lock | 12 ++++++------ .github/workflows/governance.yml | 4 ++-- .github/workflows/hypatia-scan.yml | 4 ++-- .github/workflows/main-estate-audit.yml | 7 ++++--- .github/workflows/scorecard.yml | 2 +- .github/workflows/secret-scanner.yml | 2 +- 6 files changed, 16 insertions(+), 15 deletions(-) diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index ed2ab1b..ee51b1f 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -15,9 +15,9 @@ workflows: '.github/workflows/estate-rules.yml': - 'actions/checkout@v7.0.1' '.github/workflows/governance.yml': - - 'hyperpolymath/standards@8f2ee50841e216cd8c192eeb68953118190f105c' + - 'metadatastician/standards@8f2ee50841e216cd8c192eeb68953118190f105c' '.github/workflows/hypatia-scan.yml': - - 'hyperpolymath/standards@8f2ee50841e216cd8c192eeb68953118190f105c' + - 'metadatastician/standards@8f2ee50841e216cd8c192eeb68953118190f105c' '.github/workflows/instant-sync.yml': - 'peter-evans/repository-dispatch@v4.0.1' '.github/workflows/label-triage.yml': [] @@ -40,9 +40,9 @@ workflows: '.github/workflows/rhodibot.yml': - 'actions/checkout@v7.0.1' '.github/workflows/scorecard.yml': - - 'hyperpolymath/standards@8f2ee50841e216cd8c192eeb68953118190f105c' + - 'metadatastician/standards@8f2ee50841e216cd8c192eeb68953118190f105c' '.github/workflows/secret-scanner.yml': - - 'hyperpolymath/standards@8f2ee50841e216cd8c192eeb68953118190f105c' + - 'metadatastician/standards@8f2ee50841e216cd8c192eeb68953118190f105c' '.github/workflows/static-analysis-gate.yml': - 'actions/checkout@v7.0.1' - 'actions/download-artifact@v8.0.2' @@ -157,10 +157,10 @@ dependencies: commit: 'sha1-c1c9fa07992a02c1fd3d67a0dc1b08cccb852aef' owner_id: 6759885 repo_id: 1352485172 - 'hyperpolymath/standards@8f2ee50841e216cd8c192eeb68953118190f105c': + 'metadatastician/standards@8f2ee50841e216cd8c192eeb68953118190f105c': ref: '8f2ee50841e216cd8c192eeb68953118190f105c' commit: 'sha1-8f2ee50841e216cd8c192eeb68953118190f105c' - owner_id: 6759885 + owner_id: 297579217 repo_id: 1116521501 uses: - 'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9' diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml index dd3e345..8807320 100644 --- a/.github/workflows/governance.yml +++ b/.github/workflows/governance.yml @@ -1,7 +1,7 @@ # This workflow is managed by gh actions-lock. # SPDX-License-Identifier: MPL-2.0 # governance.yml — single wrapper calling the shared estate governance bundle -# in hyperpolymath/standards instead of carrying per-repo copies. +# in metadatastician/standards instead of carrying per-repo copies. # # Replaces the per-repo governance scaffolding removed in the same commit: # quality.yml, guix-guix-policy.yml, npm-bun-blocker.yml, ts-blocker.yml, @@ -33,4 +33,4 @@ permissions: jobs: governance: - uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@8f2ee50841e216cd8c192eeb68953118190f105c + uses: metadatastician/standards/.github/workflows/governance-reusable.yml@8f2ee50841e216cd8c192eeb68953118190f105c diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml index 4ab85d8..b982435 100644 --- a/.github/workflows/hypatia-scan.yml +++ b/.github/workflows/hypatia-scan.yml @@ -1,6 +1,6 @@ # This workflow is managed by gh actions-lock. # SPDX-License-Identifier: MPL-2.0 -# Thin wrapper around hyperpolymath/standards hypatia-scan-reusable.yml. +# Thin wrapper around metadatastician/standards hypatia-scan-reusable.yml. # See standards#191 for the reusable's purpose and design. name: Hypatia Security Scan @@ -27,5 +27,5 @@ permissions: jobs: hypatia: - uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@8f2ee50841e216cd8c192eeb68953118190f105c + uses: metadatastician/standards/.github/workflows/hypatia-scan-reusable.yml@8f2ee50841e216cd8c192eeb68953118190f105c secrets: inherit diff --git a/.github/workflows/main-estate-audit.yml b/.github/workflows/main-estate-audit.yml index 262042b..0632478 100644 --- a/.github/workflows/main-estate-audit.yml +++ b/.github/workflows/main-estate-audit.yml @@ -14,9 +14,10 @@ name: Central Estate CI/CD Audit # ⚠ ONBOARDED in actions.lock at the full SHA, with the cicd-suite gate # commits it reaches recorded as dependencies, the same form this # repository's other cross-repository callers use (hypatia-scan.yml, -# secret-scanner.yml, scorecard.yml call hyperpolymath/standards at a full -# SHA and start normally). cicd-suite's own header records that an -# onboarded @main or tag ref startup-fails; a full SHA is not that case. +# secret-scanner.yml, governance.yml and scorecard.yml call +# metadatastician/standards at a full SHA). This caller starts and passes. +# cicd-suite's own header records that an onboarded @main or tag ref +# startup-fails; a full SHA is not that case. # If this run ever startup-fails with zero jobs, de-onboard it with # cicd-suite/scripts/deonboard-estate-audit.sh and drop its entry from # scripts/check-lock-sync.sh's expectations. diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 04c58a2..89a6f87 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -11,7 +11,7 @@ permissions: read-all jobs: analysis: - uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@8f2ee50841e216cd8c192eeb68953118190f105c + uses: metadatastician/standards/.github/workflows/scorecard-reusable.yml@8f2ee50841e216cd8c192eeb68953118190f105c permissions: contents: read security-events: write diff --git a/.github/workflows/secret-scanner.yml b/.github/workflows/secret-scanner.yml index 7e04f11..ec3c617 100644 --- a/.github/workflows/secret-scanner.yml +++ b/.github/workflows/secret-scanner.yml @@ -18,5 +18,5 @@ jobs: scan: permissions: contents: read - uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@8f2ee50841e216cd8c192eeb68953118190f105c + uses: metadatastician/standards/.github/workflows/secret-scanner-reusable.yml@8f2ee50841e216cd8c192eeb68953118190f105c secrets: inherit From d276fe0aeb55c46a1f3b3a233d57a11f505024f0 Mon Sep 17 00:00:00 2001 From: Claude Date: Mon, 9 Nov 2026 13:47:50 +0000 Subject: [PATCH 2/2] ci: call the estate audit under cicd-suite's new name hyperpolymath/cicd-suite was renamed to hyperpolymath/proven-cicd-and-workflows on 2026-11-09 at 09:59 UTC. The estate-audit caller started and passed on 2026-11-05 (7a84707), and has failed at startup with zero jobs since the rename, on this branch and on #103, which does not touch workflows. This tests whether the caller starts again when it names the repository by its new name at the same commit (354c425, same owner and repository ids). The reusable at that commit still names cicd-suite for the gate actions it pins, so those nested refs are unchanged. The standards re-pin in the previous commit did not make hypatia-scan, secret-scanner or governance start, so that hypothesis is disproved. That cause is tracked separately. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01J4QvDjbjhwmFbcYz4FKn16 --- .github/workflows/actions.lock | 22 +++++++++++----------- .github/workflows/main-estate-audit.yml | 2 +- 2 files changed, 12 insertions(+), 12 deletions(-) diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index ee51b1f..87bda8d 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -24,7 +24,7 @@ workflows: '.github/workflows/labels.yml': [] '.github/workflows/lock-sync-gate.yml': [] '.github/workflows/main-estate-audit.yml': - - 'hyperpolymath/cicd-suite@354c425571c1f27b66dd141daeb0e90fa0c26dd9' + - 'hyperpolymath/proven-cicd-and-workflows@354c425571c1f27b66dd141daeb0e90fa0c26dd9' '.github/workflows/mirror.yml': - 'actions/checkout@v7.0.1' - 'dtolnay/rust-toolchain@master' @@ -114,16 +114,6 @@ dependencies: commit: 'sha1-cdf488f595d80d6e07e03d4674febd5ab45fa938' owner_id: 9919 repo_id: 259445878 - 'hyperpolymath/cicd-suite@354c425571c1f27b66dd141daeb0e90fa0c26dd9': - ref: '354c425571c1f27b66dd141daeb0e90fa0c26dd9' - commit: 'sha1-354c425571c1f27b66dd141daeb0e90fa0c26dd9' - owner_id: 6759885 - repo_id: 1326697643 - uses: - - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' - - 'hyperpolymath/cicd-suite@35868f090e4e42b142374d156f2d49a22ad577fd' - - 'hyperpolymath/cicd-suite@88c55e28f37b8dfc5a435e86f548737997746cc9' - - 'hyperpolymath/cicd-suite@c519c4520afbfe48f16aceb0706d7cfb1d649994' 'hyperpolymath/cicd-suite@35868f090e4e42b142374d156f2d49a22ad577fd': ref: '35868f090e4e42b142374d156f2d49a22ad577fd' commit: 'sha1-35868f090e4e42b142374d156f2d49a22ad577fd' @@ -152,6 +142,16 @@ dependencies: commit: 'sha1-2155aa26a21758f2ba119f61bc7e0e1981c106fb' owner_id: 6759885 repo_id: 1275650185 + 'hyperpolymath/proven-cicd-and-workflows@354c425571c1f27b66dd141daeb0e90fa0c26dd9': + ref: '354c425571c1f27b66dd141daeb0e90fa0c26dd9' + commit: 'sha1-354c425571c1f27b66dd141daeb0e90fa0c26dd9' + owner_id: 6759885 + repo_id: 1326697643 + uses: + - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' + - 'hyperpolymath/cicd-suite@35868f090e4e42b142374d156f2d49a22ad577fd' + - 'hyperpolymath/cicd-suite@88c55e28f37b8dfc5a435e86f548737997746cc9' + - 'hyperpolymath/cicd-suite@c519c4520afbfe48f16aceb0706d7cfb1d649994' 'hyperpolymath/smtp-notify-action@v0.5.0': ref: 'v0.5.0' commit: 'sha1-c1c9fa07992a02c1fd3d67a0dc1b08cccb852aef' diff --git a/.github/workflows/main-estate-audit.yml b/.github/workflows/main-estate-audit.yml index 0632478..57c2811 100644 --- a/.github/workflows/main-estate-audit.yml +++ b/.github/workflows/main-estate-audit.yml @@ -33,4 +33,4 @@ permissions: jobs: estate: - uses: hyperpolymath/cicd-suite/.github/workflows/main-estate-audit.yml@354c425571c1f27b66dd141daeb0e90fa0c26dd9 # cicd-suite main + uses: hyperpolymath/proven-cicd-and-workflows/.github/workflows/main-estate-audit.yml@354c425571c1f27b66dd141daeb0e90fa0c26dd9 # proven-cicd-and-workflows (formerly cicd-suite)