From f695edcc0b8e9d0474e0a1c2f97251c92ff857c1 Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Tue, 21 Jul 2026 07:33:48 +0100 Subject: [PATCH] fix(ci): add missing SPDX headers to workflow files MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The Governance reusable's "Workflow security linter" job requires every .github/workflows/*.yml to carry an SPDX-License-Identifier on line 1. These files were missing it, so the Governance workflow failed on every push — one more red workflow feeding the ci_activity notification flood. Identifier (MPL-2.0) is taken from this repo's own existing workflow headers, which agree unanimously — not assumed. Files: codeql.yml generator-generic-ossf-slsa3-publish.yml pages.yml php.yml rust.yml Co-Authored-By: Claude Opus 4.8 --- .github/workflows/codeql.yml | 1 + .github/workflows/generator-generic-ossf-slsa3-publish.yml | 1 + .github/workflows/pages.yml | 1 + .github/workflows/php.yml | 1 + .github/workflows/rust.yml | 1 + 5 files changed, 5 insertions(+) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 5ddd600..ce99ca9 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -1,3 +1,4 @@ +# SPDX-License-Identifier: MPL-2.0 # For most projects, this workflow file will not need changing; you simply need # to commit it to your repository. # diff --git a/.github/workflows/generator-generic-ossf-slsa3-publish.yml b/.github/workflows/generator-generic-ossf-slsa3-publish.yml index 49476b3..a8484d1 100644 --- a/.github/workflows/generator-generic-ossf-slsa3-publish.yml +++ b/.github/workflows/generator-generic-ossf-slsa3-publish.yml @@ -1,3 +1,4 @@ +# SPDX-License-Identifier: MPL-2.0 # This workflow uses actions that are not certified by GitHub. # They are provided by a third-party and are governed by # separate terms of service, privacy policy, and support diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml index 649dcb1..2697b6e 100755 --- a/.github/workflows/pages.yml +++ b/.github/workflows/pages.yml @@ -1,3 +1,4 @@ +# SPDX-License-Identifier: MPL-2.0 name: GitHub Pages (Ddraig SSG) on: push: diff --git a/.github/workflows/php.yml b/.github/workflows/php.yml index b1f5a90..cfc1e5a 100644 --- a/.github/workflows/php.yml +++ b/.github/workflows/php.yml @@ -1,3 +1,4 @@ +# SPDX-License-Identifier: MPL-2.0 name: PHP Composer on: diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml index 26df678..c74b4b0 100644 --- a/.github/workflows/rust.yml +++ b/.github/workflows/rust.yml @@ -1,3 +1,4 @@ +# SPDX-License-Identifier: MPL-2.0 name: Rust on: