Skip to content

chore(CODEOWNERS): drop /.github/workflows/ line (Refs standards#55)#67

Merged
hyperpolymath merged 1 commit into
mainfrom
claude/codeowners-drop-workflows-55
May 17, 2026
Merged

chore(CODEOWNERS): drop /.github/workflows/ line (Refs standards#55)#67
hyperpolymath merged 1 commit into
mainfrom
claude/codeowners-drop-workflows-55

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

Per hyperpolymath/standards#55 decision (a) for solo-owned repos: removes the /.github/workflows/ CODEOWNERS line so Dependabot github-actions PRs stop auto-requesting review. No functional review gating is lost on a solo-owned repo.

Refs hyperpolymath/standards#55

🤖 Generated with Claude Code

Solo-owned repo: the workflow path line only causes Dependabot
github-actions PRs to auto-request review, driving the
review_requested notification flood. No functional gating lost.

Refs hyperpolymath/standards#55

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
@github-actions

Copy link
Copy Markdown

🔍 Hypatia Security Scan

Findings: 187 issues detected

Severity Count
🔴 Critical 37
🟠 High 75
🟡 Medium 75

⚠️ Action Required: Critical security issues found!

View findings
[
  {
    "reason": "Action haskell-actions/setup@v2 needs attention",
    "type": "unpinned_action",
    "file": "agda-meta-checker.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action actions/cache@v4 needs attention",
    "type": "unpinned_action",
    "file": "agda-meta-checker.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml@main needs attention",
    "type": "unpinned_action",
    "file": "security-scan.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Workflow executes remote script directly (curl/wget piped to shell). Download, verify checksum/signature, then execute.",
    "type": "download_then_run",
    "file": "mirror.yml",
    "action": "verify_download_integrity",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "believe_me undermines formal verification (1 occurrences, CWE-704)",
    "type": "believe_me",
    "file": "/home/runner/work/echidna/echidna/src/abi/TypeLLForeign.idr",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "critical"
  },
  {
    "reason": "believe_me undermines formal verification (2 occurrences, CWE-704)",
    "type": "believe_me",
    "file": "/home/runner/work/echidna/echidna/src/abi/CoprocessorForeign.idr",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "critical"
  },
  {
    "reason": "believe_me undermines formal verification (1 occurrences, CWE-704)",
    "type": "believe_me",
    "file": "/home/runner/work/echidna/echidna/src/abi/Overlay.idr",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "critical"
  },
  {
    "reason": "believe_me undermines formal verification (1 occurrences, CWE-704)",
    "type": "believe_me",
    "file": "/home/runner/work/echidna/echidna/src/abi/TentaclesForeign.idr",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "critical"
  },
  {
    "reason": "believe_me undermines formal verification (1 occurrences, CWE-704)",
    "type": "believe_me",
    "file": "/home/runner/work/echidna/echidna/src/abi/OverlayForeign.idr",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "critical"
  },
  {
    "reason": "believe_me undermines formal verification (1 occurrences, CWE-704)",
    "type": "believe_me",
    "file": "/home/runner/work/echidna/echidna/src/abi/BojForeign.idr",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "critical"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence

@hyperpolymath
hyperpolymath merged commit d201046 into main May 17, 2026
33 of 39 checks passed
@hyperpolymath
hyperpolymath deleted the claude/codeowners-drop-workflows-55 branch May 17, 2026 00:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant