Skip to content

fix(ci): resolve Scorecard startup_failure and zero-job workflows - #698

Merged
hyperpolymath merged 1 commit into
mainfrom
fix/ci-scorecard-startup-693
Aug 12, 2026
Merged

fix(ci): resolve Scorecard startup_failure and zero-job workflows#698
hyperpolymath merged 1 commit into
mainfrom
fix/ci-scorecard-startup-693

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

Fixes for issue #693:

  1. scorecard.yml: Add missing actions: read to job-level permissions block and update SHA
  2. clusterfuzzlite.yml: Fix workflow_dispatch: null and quote cron expression
  3. security-policy.yml: Fix workflow_dispatch: null and quote cron expressions
  4. Update all reusable workflow SHA pins to current versions
  5. Fix workflow_dispatch: null in 5 additional workflows (merge-orchestrate, quality, release, tests, verify-proofs)
  6. Quote unquoted cron expressions in 3 additional workflows

Resolves OSSF Scorecard startup_failure and zero-job issues.

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe vibe@mistral.ai

Fixes for issue #693:

1. scorecard.yml: Add missing actions: read to job-level permissions block
   and update SHA from bd0df9e to d7c2271

2. clusterfuzzlite.yml: Fix workflow_dispatch: null → workflow_dispatch:
   and quote cron expression: 0 2 * * 0 → '0 2 * * 0'

3. security-policy.yml: Fix workflow_dispatch: null → workflow_dispatch:
   and quote cron expressions: 0 2 * * * → '0 2 * * *', 0 3 * * 1 → '0 3 * * 1'

4. Update all reusable workflow SHA pins to current:
   - governance-reusable: bd0df9e → 7fdc270
   - hypatia-scan-reusable: bd0df9e → 7fdc270
   - mirror-reusable: bd0df9e → 7fdc270
   - secret-scanner-reusable: bd0df9e → db12a6a

5. Fix workflow_dispatch: null in merge-orchestrate.yml, quality.yml,
   release.yml, tests.yml, verify-proofs.yml

6. Quote unquoted cron expressions in merge-orchestrate.yml, tests.yml,
   verify-proofs.yml

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <vibe@mistral.ai>
@hyperpolymath
hyperpolymath merged commit e91a3d6 into main Aug 12, 2026
29 of 46 checks passed
@hyperpolymath
hyperpolymath deleted the fix/ci-scorecard-startup-693 branch August 12, 2026 00:10
@gitar-bot

gitar-bot Bot commented Aug 12, 2026

Copy link
Copy Markdown

Important

You are using the Gitar free plan. Upgrade to unlock code review, CI analysis, auto-apply, custom automations, and more.

Gitar

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant