From cb8afb85f92cb876a6542061654345c03ebbac13 Mon Sep 17 00:00:00 2001 From: hyperpolymath <6759885+hyperpolymath@users.noreply.github.com> Date: Mon, 14 Sep 2026 22:44:50 +0100 Subject: [PATCH 1/2] fix(ci): repair unparseable permissions scalar in 2 workflow file(s) A scalar `permissions: read-all` followed by an indented ` actions: read` is a YAML parse error, so the workflow never starts. It emits no check run at all, which means a required context silently never reports and the repository looks greener than a repaired one. `read-all` already grants `actions: read`, so deleting the stray line is a semantic no-op. Verified with a real parser: each file fails `yq` before the change and parses after it. Files: e2e.yml scorecard.yml Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_0178nN4Nm3neFRy5K9StZKnB --- .github/workflows/e2e.yml | 1 - .github/workflows/scorecard.yml | 1 - 2 files changed, 2 deletions(-) diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml index 9e7be5cd..9290c3ac 100644 --- a/.github/workflows/e2e.yml +++ b/.github/workflows/e2e.yml @@ -25,7 +25,6 @@ on: workflow_dispatch: permissions: read-all - actions: read concurrency: group: e2e-${{ github.ref }} diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index b5e21ca1..8a8b13e7 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -7,7 +7,6 @@ on: - cron: '23 4 * * 1' permissions: read-all - actions: read jobs: analysis: From a7091942d87828a6bc1c0e3487ae777dd2868ec0 Mon Sep 17 00:00:00 2001 From: hyperpolymath <6759885+hyperpolymath@users.noreply.github.com> Date: Tue, 15 Sep 2026 03:16:08 +0100 Subject: [PATCH 2/2] chore(ci): return scorecard.yml to PR #120 scorecard.yml is already repaired on branch fix/repair-startup-dead-scorecard-yml (PR #120), which re-indents `actions: read` INTO the analysis job's own permissions block. That is the correct cure: job-level permissions REPLACE the top-level map, so the analysis job never inherited `read-all` and Scorecard was running without `actions: read`. Deleting the stray line made the file parse but left the job functionally short. Restoring this file from main so PR #120 owns it uncontested. Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_0178nN4Nm3neFRy5K9StZKnB --- .github/workflows/scorecard.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 8a8b13e7..b5e21ca1 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -7,6 +7,7 @@ on: - cron: '23 4 * * 1' permissions: read-all + actions: read jobs: analysis: