You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
fix(ci): drop invalid job-level timeout-minutes from reusable-workflow calls
governance.yml, hypatia-scan.yml, mirror.yml and secret-scanner.yml each set
`timeout-minutes:` on a job that calls a reusable workflow via `uses:`. GitHub
does not permit that key on a workflow_call job, so it rejected all four files
at parse time: each failed instantly (0s, titled by raw filename) on every
push and never ran a single job. That silently disabled governance, hypatia
scanning, GitLab mirroring and secret scanning on the hub.
The standards `*-reusable.yml` workflows already declare `timeout-minutes` on
every internal job, so the caller-side key was redundant as well as invalid.
Removing it restores the four workflows and matches the already-correct
rsr-template-repo pattern. The upstream hypatia rule `missing_timeout_minutes`
(lib/rules/workflow_audit.ex) already exempts reusable-call jobs, so these
will not be re-flagged.
Verified with actionlint (real tool): all four files parse clean, exit 0; zero
`timeout-minutes is not available` findings remain on the hub.
Part of the estate-wide CI cleanup: 84 repos carry this same dead pattern.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
0 commit comments