From 2592ba45aa2cee7693034a06b3c4e46701cac56b Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Tue, 6 Oct 2026 19:40:04 +0100 Subject: [PATCH] fix(ci): clear governance, readme-derive and release startup reds - abi-drift.yml: drop the stray duplicate `with:` block (toolchain: v1) on the rust-toolchain step. GitHub rejects a workflow with duplicate keys before any job starts; the governance workflow linter reported "duplicate key(s): 'with' (line 86)". - governance.yml: bump governance-reusable to standards main 5a0891e9. The 08-27 pin ran the live Actions-policy check with an empty GH_TOKEN and exited 3; main splits it into a credentialed advisory job. - readme-derive.yml: bump readme-derive-reusable to standards main 5a0891e9, which fixes `gem install ... -v` with multiple gems (ERROR: Can't use --version with multiple gems). README.md re-derived locally with the pinned toolchain is identical to the committed file. - release.yml: remove `runs-on` from the provenance job. A job that calls a reusable workflow may not carry runs-on, so GitHub could not parse the file and recorded a failed zero-job run on every push (124 runs, never green). Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01X3hgXxWm6umMgZkjYyHnnm --- .github/workflows/abi-drift.yml | 2 -- .github/workflows/governance.yml | 2 +- .github/workflows/readme-derive.yml | 8 ++++---- .github/workflows/release.yml | 1 - 4 files changed, 5 insertions(+), 8 deletions(-) diff --git a/.github/workflows/abi-drift.yml b/.github/workflows/abi-drift.yml index 8fd813ca..075a9c6c 100644 --- a/.github/workflows/abi-drift.yml +++ b/.github/workflows/abi-drift.yml @@ -81,8 +81,6 @@ jobs: - name: Install Rust toolchain (stable) uses: dtolnay/rust-toolchain@v1 - with: - toolchain: v1 with: toolchain: stable diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml index 16578c46..fc730fdb 100644 --- a/.github/workflows/governance.yml +++ b/.github/workflows/governance.yml @@ -35,4 +35,4 @@ permissions: jobs: governance: - uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@84355587cb2a1f86e6882de83514a32db2646e7a + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@5a0891e9e58b785181a92e141505ca96ca987b42 diff --git a/.github/workflows/readme-derive.yml b/.github/workflows/readme-derive.yml index 4684a108..3384d472 100644 --- a/.github/workflows/readme-derive.yml +++ b/.github/workflows/readme-derive.yml @@ -29,7 +29,7 @@ permissions: jobs: readme-derive: - # Pinned to the standards commit that introduced readme-derive-reusable.yml. - # Repin to include hyperpolymath/standards#476 (anchor-ID convention guard) - # once it lands on main; this repo's README.adoc already satisfies it. - uses: hyperpolymath/standards/.github/workflows/readme-derive-reusable.yml@84355587cb2a1f86e6882de83514a32db2646e7a + # Pinned to a hyperpolymath/standards main commit that carries the gem + # install fix (asciidoctor:VER syntax) and the anchor-ID convention guard + # (standards#476); this repo's README.adoc satisfies both. + uses: hyperpolymath/standards/.github/workflows/readme-derive-reusable.yml@5a0891e9e58b785181a92e141505ca96ca987b42 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 7543d56b..021a5bbd 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -160,7 +160,6 @@ jobs: provenance: name: SLSA Provenance needs: [build] - runs-on: ubuntu-latest permissions: actions: read id-token: write