Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 6 additions & 6 deletions .github/workflows/actions.lock
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
# This file is machine-generated by `gh actions-lock`.

Check failure on line 1 in .github/workflows/actions.lock

View workflow job for this annotation

GitHub Actions / Hypatia neurosymbolic scan

[hypatia] actions.lock failed closed: {:line, 145, {:repository_id_reused, 1326697643, "hyperpolymath/cicd-suite", "hyperpolymath/proven-cicd-and-workflows"}}

Check failure on line 1 in .github/workflows/actions.lock

View workflow job for this annotation

GitHub Actions / Hypatia neurosymbolic scan

[hypatia] Invalid .github/workflows/actions.lock: {:line, 145, {:repository_id_reused, 1326697643, "hyperpolymath/cicd-suite", "hyperpolymath/proven-cicd-and-workflows"}}. Regenerate and verify it with gh actions-lock.
# Do not edit by hand; run `gh actions-lock` to update.
# Docs: https://gh.io/actions-lockfile
version: 'v0.0.3'
Expand All @@ -15,9 +15,9 @@
'.github/workflows/estate-rules.yml':
- 'actions/checkout@v7.0.1'
'.github/workflows/governance.yml':
- 'hyperpolymath/standards@8f2ee50841e216cd8c192eeb68953118190f105c'
- 'metadatastician/standards@8f2ee50841e216cd8c192eeb68953118190f105c'
'.github/workflows/hypatia-scan.yml':
- 'hyperpolymath/standards@8f2ee50841e216cd8c192eeb68953118190f105c'
- 'metadatastician/standards@8f2ee50841e216cd8c192eeb68953118190f105c'
'.github/workflows/instant-sync.yml':
- 'peter-evans/repository-dispatch@v4.0.1'
'.github/workflows/label-triage.yml': []
Expand All @@ -40,9 +40,9 @@
'.github/workflows/rhodibot.yml':
- 'actions/checkout@v7.0.1'
'.github/workflows/scorecard.yml':
- 'hyperpolymath/standards@8f2ee50841e216cd8c192eeb68953118190f105c'
- 'metadatastician/standards@8f2ee50841e216cd8c192eeb68953118190f105c'
'.github/workflows/secret-scanner.yml':
- 'hyperpolymath/standards@8f2ee50841e216cd8c192eeb68953118190f105c'
- 'metadatastician/standards@8f2ee50841e216cd8c192eeb68953118190f105c'
'.github/workflows/static-analysis-gate.yml':
- 'actions/checkout@v7.0.1'
- 'actions/download-artifact@v8.0.2'
Expand Down Expand Up @@ -157,10 +157,10 @@
commit: 'sha1-c1c9fa07992a02c1fd3d67a0dc1b08cccb852aef'
owner_id: 6759885
repo_id: 1352485172
'hyperpolymath/standards@8f2ee50841e216cd8c192eeb68953118190f105c':
'metadatastician/standards@8f2ee50841e216cd8c192eeb68953118190f105c':
ref: '8f2ee50841e216cd8c192eeb68953118190f105c'
commit: 'sha1-8f2ee50841e216cd8c192eeb68953118190f105c'
owner_id: 6759885
owner_id: 297579217
repo_id: 1116521501
uses:
- 'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9'
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/governance.yml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
# This workflow is managed by gh actions-lock.
# SPDX-License-Identifier: MPL-2.0
# governance.yml — single wrapper calling the shared estate governance bundle
# in hyperpolymath/standards instead of carrying per-repo copies.
# in metadatastician/standards instead of carrying per-repo copies.
#
# Replaces the per-repo governance scaffolding removed in the same commit:
# quality.yml, guix-guix-policy.yml, npm-bun-blocker.yml, ts-blocker.yml,
Expand Down Expand Up @@ -33,4 +33,4 @@ permissions:

jobs:
governance:
uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@8f2ee50841e216cd8c192eeb68953118190f105c
uses: metadatastician/standards/.github/workflows/governance-reusable.yml@8f2ee50841e216cd8c192eeb68953118190f105c
4 changes: 2 additions & 2 deletions .github/workflows/hypatia-scan.yml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# This workflow is managed by gh actions-lock.
# SPDX-License-Identifier: MPL-2.0
# Thin wrapper around hyperpolymath/standards hypatia-scan-reusable.yml.
# Thin wrapper around metadatastician/standards hypatia-scan-reusable.yml.
# See standards#191 for the reusable's purpose and design.

name: Hypatia Security Scan
Expand All @@ -27,5 +27,5 @@

jobs:
hypatia:
uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@8f2ee50841e216cd8c192eeb68953118190f105c
uses: metadatastician/standards/.github/workflows/hypatia-scan-reusable.yml@8f2ee50841e216cd8c192eeb68953118190f105c
secrets: inherit

Check warning on line 31 in .github/workflows/hypatia-scan.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Only pass required secrets to this workflow.

See more on https://sonarcloud.io/project/issues?id=hyperpolymath_bofj-kitt&issues=AaHAjax0_xOGA0s6ebkv&open=AaHAjax0_xOGA0s6ebkv&pullRequest=104
7 changes: 4 additions & 3 deletions .github/workflows/main-estate-audit.yml
Original file line number Diff line number Diff line change
Expand Up @@ -14,9 +14,10 @@ name: Central Estate CI/CD Audit
# ⚠ ONBOARDED in actions.lock at the full SHA, with the cicd-suite gate
# commits it reaches recorded as dependencies, the same form this
# repository's other cross-repository callers use (hypatia-scan.yml,
# secret-scanner.yml, scorecard.yml call hyperpolymath/standards at a full
# SHA and start normally). cicd-suite's own header records that an
# onboarded @main or tag ref startup-fails; a full SHA is not that case.
# secret-scanner.yml, governance.yml and scorecard.yml call
# metadatastician/standards at a full SHA). This caller starts and passes.
# cicd-suite's own header records that an onboarded @main or tag ref
# startup-fails; a full SHA is not that case.
# If this run ever startup-fails with zero jobs, de-onboard it with
# cicd-suite/scripts/deonboard-estate-audit.sh and drop its entry from
# scripts/check-lock-sync.sh's expectations.
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/scorecard.yml
Original file line number Diff line number Diff line change
Expand Up @@ -11,9 +11,9 @@

jobs:
analysis:
uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@8f2ee50841e216cd8c192eeb68953118190f105c
uses: metadatastician/standards/.github/workflows/scorecard-reusable.yml@8f2ee50841e216cd8c192eeb68953118190f105c
permissions:
contents: read
security-events: write
id-token: write
secrets: inherit

Check warning on line 19 in .github/workflows/scorecard.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Only pass required secrets to this workflow.

See more on https://sonarcloud.io/project/issues?id=hyperpolymath_bofj-kitt&issues=AaHAjawn_xOGA0s6ebkt&open=AaHAjawn_xOGA0s6ebkt&pullRequest=104
2 changes: 1 addition & 1 deletion .github/workflows/secret-scanner.yml
Original file line number Diff line number Diff line change
Expand Up @@ -18,5 +18,5 @@
scan:
permissions:
contents: read
uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@8f2ee50841e216cd8c192eeb68953118190f105c
uses: metadatastician/standards/.github/workflows/secret-scanner-reusable.yml@8f2ee50841e216cd8c192eeb68953118190f105c
secrets: inherit

Check warning on line 22 in .github/workflows/secret-scanner.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Only pass required secrets to this workflow.

See more on https://sonarcloud.io/project/issues?id=hyperpolymath_bofj-kitt&issues=AaHAjaxz_xOGA0s6ebku&open=AaHAjaxz_xOGA0s6ebku&pullRequest=104
Loading