From 33ff4eef225c909b8d642d466fac8edf97a74b35 Mon Sep 17 00:00:00 2001 From: Claude Date: Tue, 10 Nov 2026 18:40:32 +0000 Subject: [PATCH] fix(ci): move the static analysis scanner pin to panic-attack 55ffcc9 55ffcc9 is panic-attack main. It includes panic-attack#278, which anchors Lean and Isabelle `sorry` findings to their line, so the inline `panic-attack: accepted` markers on the 2 detector fixtures apply. bridge-gate.yml reads the same pin. src/bridge/ and the Patch Bridge schema (0.3.0) did not change between f2a6a70 and 55ffcc9. Co-Authored-By: Claude Claude-Session: https://claude.ai/code/session_0136P7ZmAsYpFA9gxfQLF3F6 Signed-off-by: Claude --- .github/workflows/static-analysis-gate.yml | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/.github/workflows/static-analysis-gate.yml b/.github/workflows/static-analysis-gate.yml index 8414a119..dc97bde4 100644 --- a/.github/workflows/static-analysis-gate.yml +++ b/.github/workflows/static-analysis-gate.yml @@ -18,11 +18,14 @@ env: # panic-attack runs ahead of the standards-vetted 410a8f8 (hypatia-scan-reusable # default) because that commit cannot report complete coverage for this tree: # 190 config/markup inputs were "unsupported", so --fail-on-incomplete exited 2 - # before any finding was counted. f2a6a70 includes the coverage repair - # (panic-attack#258: 913/913 inputs here) and Patch Bridge schema 0.3.0 - # (vulnerability_data), which the qualifier below checks. + # before any finding was counted. The pin includes the coverage repair + # (panic-attack#258: every input here is analyzed) and Patch Bridge schema + # 0.3.0 (vulnerability_data), which the qualifier below checks. It also + # includes line-anchored Lean and Isabelle `sorry` findings + # (panic-attack#278), so the inline `panic-attack: accepted` markers on the + # detector fixtures under tests/corpus_fixtures/ apply. HYPATIA_REF: 82396d81677b11d17c7a0dede5bf0efcf768d5a1 - PANIC_ATTACK_REF: f2a6a70eaec0cb02331e3264e05f185b5faab0f7 + PANIC_ATTACK_REF: 55ffcc9a240e937edd968487af15ab45c6f0522f SCAN_EXPECTED_SHA: ${{ github.event.pull_request.head.sha || github.sha }} jobs: panic-attack-assail: