Commit e689f7d
chore(ci): bump governance-reusable pin to standards main (#74)
Pinned revision `81dbf2dd` of `governance-reusable.yml` carries two bugs
that make Governance red on every consumer:
1. **Workflow security linter** runs `bash
scripts/update-actions-lock.sh --verify-local` in the **caller's**
checkout, where the script does not exist — exit 127.
2. **Allowlist Preflight** runs `check-actions-policy.sh` with an empty
`GH_TOKEN` — `gh` refuses, exit 3.
Both are cured on `standards` main
(`fad242d35291de1898242d6737ba02b74a59a2f2`): the verifier is copied
into `\$RUNNER_TEMP`, and the policy step is skipped when no credential
is supplied.
**Witness:** verified green on
[hyperpolymath/blocky-writer#55](hyperpolymath/blocky-writer#55)
at this exact SHA — governance run `completed/success`, 15/15 jobs,
including the two jobs that were red on that repo's default branch.
Judge this PR by the set difference against your own default branch
(which governance jobs are newly red), not by overall check colour —
unrelated build failures may pre-date it.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>1 parent 82e6972 commit e689f7d
1 file changed
Lines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
30 | 30 | | |
31 | 31 | | |
32 | 32 | | |
33 | | - | |
| 33 | + | |
0 commit comments