Skip to content

Commit 0bad773

Browse files
fix(ci): repin Hypatia wrapper past the warn-severity validator bug (#72)
The Hypatia job on main fails inside the reusable's findings validator: ``` ::error::Hypatia did not produce one valid findings array (exit 2) ``` Cause: the pinned reusable revision (`fad242d35291…`) accepts only `critical|high|medium|low|info|informational`, but the scanner emits `warn` for its research rules — defiant's scan produced 67 findings, 12 of them `warn`. Standards fixed the vocabulary in `591cea1b07` (2026-09-10, "reconcile native action pins and retain Hypatia warning severity"). This repins the wrapper to standards main head `9379fb71…`, which carries that fix plus the cache-integrity/SARIF follow-ons. The published check name is unchanged: caller job id `hypatia` + reusable job name `Hypatia Neurosymbolic Analysis` at both pins, so the required context `hypatia / Hypatia Neurosymbolic Analysis` still matches.
1 parent 1b136e1 commit 0bad773

2 files changed

Lines changed: 25 additions & 1 deletion

File tree

.github/workflows/actions.lock

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -136,3 +136,27 @@ dependencies:
136136
commit: 'sha1-6c05c4a00b91aa542267d8e32a8254774799d68d'
137137
owner_id: 79229934
138138
repo_id: 77726177
139+
'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9':
140+
ref: 'v6.1.0'
141+
commit: 'sha1-55cc8345863c7cc4c66a329aec7e433d2d1c52a9'
142+
'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1':
143+
ref: 'v7.0.1'
144+
commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1'
145+
'actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a':
146+
ref: 'v7.0.1'
147+
commit: 'sha1-043fb46d1a93c77aae656e7c1c64a875d1fc6a0a'
148+
'dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772':
149+
ref: 'stable'
150+
commit: 'sha1-6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772'
151+
'editorconfig-checker/action-editorconfig-checker@840e866d93b8e032123c23bac69dece044d4d84c':
152+
ref: 'v2.2.0'
153+
commit: 'sha1-840e866d93b8e032123c23bac69dece044d4d84c'
154+
'erlef/setup-beam@54075bcc5e249e4758d363f27d099f55d843f124':
155+
ref: 'v1.24.1'
156+
commit: 'sha1-54075bcc5e249e4758d363f27d099f55d843f124'
157+
'ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc':
158+
ref: 'v2.4.4'
159+
commit: 'sha1-2d1146689b8cda280b9bc96326124645441f03bc'
160+
'webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555':
161+
ref: 'v0.10.0'
162+
commit: 'sha1-e83874834305fe9a4a2997156cb26c5de65a8555'

.github/workflows/hypatia-scan.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,5 +32,5 @@ permissions:
3232

3333
jobs:
3434
hypatia:
35-
uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@fad242d35291de1898242d6737ba02b74a59a2f2
35+
uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@9379fb71b66a2e1412cab7c5b5a5ff9f04632552
3636
secrets: inherit

0 commit comments

Comments
 (0)