fix(ci): repair unparseable permissions scalar (1 workflow file(s)) - #47
hyperpolymath wants to merge 2 commits into
Conversation
A scalar `permissions: read-all` followed by an indented ` actions: read` is a YAML parse error, so the workflow never starts. It emits no check run at all, which means a required context silently never reports and the repository looks greener than a repaired one. `read-all` already grants `actions: read`, so deleting the stray line is a semantic no-op. Verified with a real parser: each file fails `yq` before the change and parses after it. Files: scorecard.yml Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0178nN4Nm3neFRy5K9StZKnB
|
Warning Review limit reachedNext included review available in 3 minutes. View limit detailsLimit details: You’ve used the included review currently available. You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository. Review configuration: ⚙️ Run configurationConfiguration used: Organization UI Review profile: ASSERTIVE Plan: Advanced Run ID: 📒 Files selected for processing (1)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
scorecard.yml is already repaired on branch fix/repair-startup-dead-scorecard-yml (PR #46), which re-indents `actions: read` INTO the analysis job's own permissions block. That is the correct cure: job-level permissions REPLACE the top-level map, so the analysis job never inherited `read-all` and Scorecard was running without `actions: read`. Deleting the stray line made the file parse but left the job functionally short. Restoring this file from main so PR #46 owns it uncontested. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0178nN4Nm3neFRy5K9StZKnB
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
|
Closing: this PR only touched #46 is the correct cure. It re-indents No parse-defect work is lost: every other file in this campaign is unaffected. 🤖 Generated with Claude Code |
Pull request was closed
1 participant
permissions: read-allfollowed by an indentedactions: readis a YAMLparse error. The workflow never starts, so it emits no check run — a
required context silently never reports, and this repository currently looks
greener than a repaired one.
read-allalready grantsactions: read, so removing the stray line is asemantic no-op. Each file was verified with a real YAML parser: it fails
yqbefore the change and parses after it. Every diff is exactly one deleted line.Files changed: scorecard.yml
Measured estate-wide: 42 such files across 28 repositories on
main, allcarrying the identical stray key. Zero overlap with the TokenPermissions sweep.
🤖 Generated with Claude Code
https://claude.ai/code/session_0178nN4Nm3neFRy5K9StZKnB