From 16dd3c28b1dd76217d45363c4a62829bfaf8f909 Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Tue, 25 Aug 2026 19:37:26 +0100 Subject: [PATCH] fix(ci): replace nonexistent standards pin 5b1d0022 with a real SHA Five workflows -- governance, hypatia-scan, mirror, scorecard, secret-scanner -- pinned hyperpolymath/standards@5b1d00229e5e8c0c0fbfedc7e80f37ea50f49236, which DOES NOT EXIST in that repository (gh api .../commits/ -> 422). A workflow that cannot resolve its reusable dies at startup_failure with zero jobs, which is why these five have been producing no check runs -- and therefore why the required contexts they should post ('governance / Validate Hypatia Baseline', 'scan / Hypatia Neurosymbolic Analysis') register as phantom, blocking every PR in this repo. Repinned to d5fe075a (current standards main); all five reusables verified present at that SHA. No actions.lock change needed -- the lockfile carried no reference to the phantom SHA. Estate scope, measured live rather than from local checkouts: 27 references across 15 repos. rsr-template-repo is fixed in a companion PR (#41 there) because as the RSR spine it propagates the defect to every newly minted repository. Co-Authored-By: Claude Opus 5 --- .github/workflows/governance.yml | 2 +- .github/workflows/hypatia-scan.yml | 2 +- .github/workflows/mirror.yml | 2 +- .github/workflows/scorecard.yml | 2 +- .github/workflows/secret-scanner.yml | 2 +- 5 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml index 9e765107..1b93a154 100644 --- a/.github/workflows/governance.yml +++ b/.github/workflows/governance.yml @@ -16,4 +16,4 @@ permissions: jobs: governance: - uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@5b1d00229e5e8c0c0fbfedc7e80f37ea50f49236 + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@d5fe075a50ab3ce4f41614d66ed77f152fda134f diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml index 79dc7982..e1848ab7 100644 --- a/.github/workflows/hypatia-scan.yml +++ b/.github/workflows/hypatia-scan.yml @@ -21,5 +21,5 @@ permissions: jobs: hypatia: - uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@5b1d00229e5e8c0c0fbfedc7e80f37ea50f49236 + uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@d5fe075a50ab3ce4f41614d66ed77f152fda134f secrets: inherit diff --git a/.github/workflows/mirror.yml b/.github/workflows/mirror.yml index 87efa0c7..ccbbe917 100644 --- a/.github/workflows/mirror.yml +++ b/.github/workflows/mirror.yml @@ -14,5 +14,5 @@ permissions: jobs: mirror: - uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@5b1d00229e5e8c0c0fbfedc7e80f37ea50f49236 + uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@d5fe075a50ab3ce4f41614d66ed77f152fda134f secrets: inherit diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index eeeb9a86..4a06d69c 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -16,7 +16,7 @@ permissions: jobs: scorecard: - uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@5b1d00229e5e8c0c0fbfedc7e80f37ea50f49236 + uses: hyperpolymath/standards/.github/workflows/scorecard-reusable.yml@d5fe075a50ab3ce4f41614d66ed77f152fda134f permissions: actions: read contents: read diff --git a/.github/workflows/secret-scanner.yml b/.github/workflows/secret-scanner.yml index e1be46dc..b75362af 100644 --- a/.github/workflows/secret-scanner.yml +++ b/.github/workflows/secret-scanner.yml @@ -21,5 +21,5 @@ jobs: contents: read pull-requests: write actions: read - uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@5b1d00229e5e8c0c0fbfedc7e80f37ea50f49236 + uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@d5fe075a50ab3ce4f41614d66ed77f152fda134f secrets: inherit