fix(ci): actually repoint codeql-action at a SHA that exists - #61
Conversation
github/codeql-action@29b1f65 exists in no repository -- the GitHub API returns 422 -- so CodeQL could not build its run graph and reported startup_failure in 0 seconds. This repository has had no CodeQL scanning at all. Repointed at 4187e74d05793876e9989daffde9c3e66b4acd07, what the v3 tag resolves to (v3.37.3), verified against the API. Supersedes an earlier attempt that branched from the local checkout's HEAD rather than origin/main. Where the two had drifted, that commit carried an unrelated diff and left the workflow untouched, so the fix appeared to land while main still pinned the dead SHA. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Signed-off-by: Jonathan D.A. Jewell <6759885+hyperpolymath@users.noreply.github.com>
|
|
Note Automatic reviews are paused because your trial's included automatic processing has been used for this period. Upgrade now, or comment "Gitar review" to run a review anytime. Code Review ✅ ApprovedRepoints the CodeQL action to a valid, verified release SHA to restore CI scanning. No issues found.
OptionsDisplay: compact → Showing less information. Comment with these commands to change the behavior for this request:
Was this helpful? React with 👍 / 👎 | Gitar |
|
|
![gitar-bot[bot]](https://avatars.githubusercontent.com/in/827041?s=60&v=4){kind=small}
1 participant
github/codeql-action@29b1f65c1f735799893313399435a59f54045865exists in no repository — the GitHub API returns 422 — so CodeQL could not build its run graph and reportedstartup_failurein 0 seconds. This repository has had no CodeQL scanning at all.Repointed at
4187e74d05793876e9989daffde9c3e66b4acd07, what thev3tag resolves to (v3.37.3), verified against the API.Supersedes an earlier attempt that branched from the local checkout's HEAD rather than
origin/main. Where the two had drifted, that commit carried an unrelated diff and left the workflow untouched — so the fix appeared to land whilemainstill pinned the dead SHA. Caught by verifyingmainestate-wide, not by the merge tally.\n\nThis pass bases explicitly onorigin/mainand verifies the substitution before committing.