From 08fcdbcdd2541ffebf59a995fd0427c382f3eff2 Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 3 Jul 2026 02:39:48 +0000 Subject: [PATCH] ci(governance): re-pin to post-#464 standards so the baseline filter actually runs MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Follow-up to #171. That PR bumped the governance-reusable pin to standards 832b157 (which had #455's baseline-filter wire-in), but #455 had a bug: the scan's by-design exit-on-findings aborted the step under `bash -e` before the filter ran, so the gate stayed mechanically broken (verified on #171's own CI: "scan complete: 18 findings; exit 1" with zero apply-baseline.sh output). standards#464 fixed that (`|| true` + a JSON-array crash guard). This re-pins governance-reusable 832b157 -> f81bb04 (current standards main, both #455 and #464 present) so neurophone's validate-hypatia-baseline actually reaches the filter. Still surgical: the other five standards reusables stay at 7c9db0e. Note: a newer hypatia HEAD now reports 18 findings vs the 14 neurophone's .hypatia-baseline.json was written against (#168), so this may still surface un-baselined findings (incl. a new critical) that need honest per-repo handling — not blind baselining. This PR's CI is the diagnostic that surfaces exactly which. Co-Authored-By: Claude Opus 4.8 Claude-Session: https://claude.ai/code/session_0172RBMz3qYjb1ttzD2i7RNh --- .github/workflows/governance.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml index c32611c..88d52b9 100644 --- a/.github/workflows/governance.yml +++ b/.github/workflows/governance.yml @@ -31,4 +31,4 @@ permissions: jobs: governance: - uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@832b1578ecaeeb27dad54f133630ebd670f6e752 # bumped 2026-07-03: standards#455 wires apply-baseline.sh into validate-hypatia-baseline (the check now actually consults .hypatia-baseline.json). Other standards reusables intentionally left at 7c9db0e. + uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@f81bb0453ab7fda0cea94127d3855f83968fb9e8 # bumped 2026-07-03: standards#455 wired apply-baseline.sh into validate-hypatia-baseline AND #464 fixed it actually running (the #455 wire-in aborted under `bash -e` on the scan's exit-on-findings before the filter ran). Other standards reusables intentionally left at 7c9db0e.