Skip to content

Commit e689f7d

Browse files
chore(ci): bump governance-reusable pin to standards main (#74)
Pinned revision `81dbf2dd` of `governance-reusable.yml` carries two bugs that make Governance red on every consumer: 1. **Workflow security linter** runs `bash scripts/update-actions-lock.sh --verify-local` in the **caller's** checkout, where the script does not exist — exit 127. 2. **Allowlist Preflight** runs `check-actions-policy.sh` with an empty `GH_TOKEN` — `gh` refuses, exit 3. Both are cured on `standards` main (`fad242d35291de1898242d6737ba02b74a59a2f2`): the verifier is copied into `\$RUNNER_TEMP`, and the policy step is skipped when no credential is supplied. **Witness:** verified green on [hyperpolymath/blocky-writer#55](hyperpolymath/blocky-writer#55) at this exact SHA — governance run `completed/success`, 15/15 jobs, including the two jobs that were red on that repo's default branch. Judge this PR by the set difference against your own default branch (which governance jobs are newly red), not by overall check colour — unrelated build failures may pre-date it. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
1 parent 82e6972 commit e689f7d

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

.github/workflows/governance.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,4 +30,4 @@ permissions:
3030
contents: read
3131
jobs:
3232
governance:
33-
uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@81dbf2dd854b1444fd6236fa2352474383b2c2b9
33+
uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@fad242d35291de1898242d6737ba02b74a59a2f2

0 commit comments

Comments
 (0)