Skip to content

chore(registry): regenerate REGISTRY.a2ml (drift caught by #472's sync check)#473

Merged
hyperpolymath merged 2 commits into
mainfrom
fix/secret-scanner-caller-perms
Jul 7, 2026
Merged

chore(registry): regenerate REGISTRY.a2ml (drift caught by #472's sync check)#473
hyperpolymath merged 2 commits into
mainfrom
fix/secret-scanner-caller-perms

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

The registry-sync check failed on #472 (non-required, so auto-merge landed it anyway): .machine_readable/REGISTRY.a2ml was stale — the k9-svc source hash had drifted before that branch was cut. Regenerated via bash scripts/build-registry.sh (32 specs; only the k9-svc hash changed).

🤖 Generated with Claude Code

hyperpolymath and others added 2 commits July 7, 2026 06:53
…ions

The gitleaks job requests pull-requests: write + actions: read
(PR summary comments, .git-private-farm#69). A called workflow cannot
exceed the caller's grant, so every wrapper granting only
contents: read — including this repo's own and the documented caller
example — has died at startup_failure on every run, at any pin.

- Fix the header caller example (the shape wrapper sweeps copy)
- Fix this repo's own wrapper: grant the permissions at the calling
  job and bump the pin off known-bad d135b05 to current main

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@hyperpolymath hyperpolymath enabled auto-merge (squash) July 7, 2026 05:55
@sonarqubecloud

sonarqubecloud Bot commented Jul 7, 2026

Copy link
Copy Markdown

@hyperpolymath hyperpolymath merged commit 6208833 into main Jul 7, 2026
23 checks passed
@hyperpolymath hyperpolymath deleted the fix/secret-scanner-caller-perms branch July 7, 2026 05:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant