Skip to content

fix(ci): the same illegal reusable refs in the nested workflow copies - #11

Merged
hyperpolymath merged 1 commit into
mainfrom
fix/reusable-workflow-refs
Sep 19, 2026
Merged

hyperpolymath merged 1 commit into
mainfrom
fix/reusable-workflow-refs

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

The root .github/workflows/ repair merged as #10. This is the rest of the same defect: the same refs sitting in nested copies of the same six workflows, which are inert where they sit but are what new repos are minted from.

uses: ../….github/workflows/<x>-reusable.yml is not a ref form GitHub Actions supports, so each of these files fails at parse time wherever it is used. Each ref becomes the pinned cross-repo form hyperpolymath/standards/.github/workflows/<x>-reusable.yml@4e6ffe55…, and each calling job is granted the permissions its callee declares (keyed off the callee named in the ref, not the caller's filename).

Refs hyperpolymath/standards#808.

…d copies

`uses: ../….github/workflows/<x>-reusable.yml` is not a ref form GitHub Actions supports, so every
workflow carrying it fails at parse time: conclusion=failure, 0 jobs, and a run name equal to its
path rather than its declared `name:`.

This repairs them throughout the tree, not only in the root `.github/workflows/`, because the root
is where they are *live* but the nested copies are where they *propagate* — standards' format
templates, k9-ecosystem's dispatch templates and deed-core's action scaffolds are what new repos are
minted from, and each one carried an unparseable ref.

Each ref becomes the pinned cross-repo form
`hyperpolymath/standards/.github/workflows/<x>-reusable.yml@4e6ffe55…`, and each calling job is
granted the permissions its callee declares — keyed off the callee named in the ref, since several
callers point at the same reusable. Without that step the repair only moves the failure from parse
time to run time.

Refs hyperpolymath/standards#808.
@coderabbitai

coderabbitai Bot commented Sep 19, 2026

Copy link
Copy Markdown
Contributor

Warning

Review limit reached

Next included review available in 52 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: c0557b6d-e52a-4fb6-9519-0a4734fe7c69

📥 Commits

Reviewing files that changed from the base of the PR and between 33e1fc8 and 9f571bc.

📒 Files selected for processing (42)
  • actions/validate/.github/workflows/codeql.yml
  • actions/validate/.github/workflows/governance.yml
  • actions/validate/.github/workflows/hypatia-scan.yml
  • actions/validate/.github/workflows/mirror.yml
  • actions/validate/.github/workflows/scorecard-enforcer.yml
  • actions/validate/.github/workflows/scorecard.yml
  • actions/validate/.github/workflows/secret-scanner.yml
  • bindings/deno/.github/workflows/codeql.yml
  • bindings/deno/.github/workflows/governance.yml
  • bindings/deno/.github/workflows/hypatia-scan.yml
  • bindings/deno/.github/workflows/mirror.yml
  • bindings/deno/.github/workflows/scorecard-enforcer.yml
  • bindings/deno/.github/workflows/scorecard.yml
  • bindings/deno/.github/workflows/secret-scanner.yml
  • bindings/haskell/.github/workflows/codeql.yml
  • bindings/haskell/.github/workflows/governance.yml
  • bindings/haskell/.github/workflows/hypatia-scan.yml
  • bindings/haskell/.github/workflows/mirror.yml
  • bindings/haskell/.github/workflows/scorecard-enforcer.yml
  • bindings/haskell/.github/workflows/scorecard.yml
  • bindings/haskell/.github/workflows/secret-scanner.yml
  • bindings/rust/.github/workflows/codeql.yml
  • bindings/rust/.github/workflows/governance.yml
  • bindings/rust/.github/workflows/hypatia-scan.yml
  • bindings/rust/.github/workflows/mirror.yml
  • bindings/rust/.github/workflows/scorecard-enforcer.yml
  • bindings/rust/.github/workflows/scorecard.yml
  • bindings/rust/.github/workflows/secret-scanner.yml
  • editors/vscode/.github/workflows/codeql.yml
  • editors/vscode/.github/workflows/governance.yml
  • editors/vscode/.github/workflows/hypatia-scan.yml
  • editors/vscode/.github/workflows/mirror.yml
  • editors/vscode/.github/workflows/scorecard-enforcer.yml
  • editors/vscode/.github/workflows/scorecard.yml
  • editors/vscode/.github/workflows/secret-scanner.yml
  • pandoc/.github/workflows/codeql.yml
  • pandoc/.github/workflows/governance.yml
  • pandoc/.github/workflows/hypatia-scan.yml
  • pandoc/.github/workflows/mirror.yml
  • pandoc/.github/workflows/scorecard-enforcer.yml
  • pandoc/.github/workflows/scorecard.yml
  • pandoc/.github/workflows/secret-scanner.yml

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@sonarqubecloud

Copy link
Copy Markdown

@hyperpolymath
hyperpolymath merged commit fba7446 into main Sep 19, 2026
11 of 16 checks passed
@hyperpolymath
hyperpolymath deleted the fix/reusable-workflow-refs branch September 19, 2026 19:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant