Skip to content

Fix ci actions - #111

Closed
hyperpolymath wants to merge 7 commits into
mainfrom
fix-ci-actions
Closed

hyperpolymath wants to merge 7 commits into
mainfrom
fix-ci-actions

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

Summary

Closes #

Type of change

  • 🐛 Bug fix (non-breaking change that fixes an issue)
  • ✨ New feature (non-breaking change that adds functionality)
  • 💥 Breaking change (would change existing behaviour)
  • 🕳️ Soundness fix (fixes a checker/proof false-negative)
  • 📖 Documentation
  • 🧹 Refactor / tech debt (behaviour-preserving)
  • ⚡ Performance
  • 🔧 Build / CI / tooling

How has this been verified?

Checklist

  • My commits are signed (git commit -S).
  • I ran the project's own checks/tests locally and they pass.
  • New files carry the correct SPDX-License-Identifier (code/config MPL-2.0,
    prose CC-BY-SA-4.0); I did not relicense existing files.
  • Docs are updated, and no public claim now overstates what the code does.
  • I have not introduced a soundness hole (or I have flagged where I might have).

Notes for reviewers

hyperpolymath and others added 7 commits July 26, 2026 17:56
Update reusable workflow SHA from d135b05 to f2f8e6791b09f1f498f01b798e4670a1ebc9c986
to pick up fixes for:
- Bug A: Invalid timeout-minutes at workflow_call level and duplicates
- Bug B: Permissions escalation in scorecard-reusable

Part of hyperpolymath/standards#426 remediation.

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <vibe@mistral.ai>
Final SHA update for Bug A and Bug B fixes.
Part of hyperpolymath/standards#426 remediation.

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <vibe@mistral.ai>
Apply principle of least privilege for GITHUB_TOKEN:
- Change top-level permissions to read-only
- Jobs inherit read permissions, can escalate as needed

This resolves Scorecard TokenPermissionsID alerts.

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <vibe@mistral.ai>
@coderabbitai

coderabbitai Bot commented Sep 12, 2026

Copy link
Copy Markdown
Contributor

Warning

Review limit reached

Next included review available in 59 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 17fc5247-0a4c-4597-8735-31aae8416a7b

📥 Commits

Reviewing files that changed from the base of the PR and between 4a00d5c and 30670b3.

⛔ Files ignored due to path filters (1)
  • beam/mix.lock is excluded by !**/*.lock
📒 Files selected for processing (17)
  • .github/workflows/ci-benchmarks.yml
  • .github/workflows/krl-verification.yml
  • .github/workflows/mirror.yml
  • .github/workflows/secret-scanner.yml
  • .gitlab-ci.yml
  • READINESS.md
  • beam/benches/nif_bench.exs
  • beam/mix.exs
  • beam/native/quandle_db_nif.zig
  • beam/test/aspect_test.exs
  • beam/test/property_test.exs
  • beam/test/quandle_db_nif_live_integration_test.exs
  • beam/test/quandle_db_nif_test.exs
  • server/Project.toml
  • server/seed_db.jl
  • server/serve.jl
  • tests/integration/full_stack_smoke.sh

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@hyperpolymath
hyperpolymath enabled auto-merge (squash) September 12, 2026 15:24
@hyperpolymath
hyperpolymath enabled auto-merge (squash) September 15, 2026 20:14
@hyperpolymath

Copy link
Copy Markdown
Owner Author

Closing as superseded: after merging current main into this branch, the remaining diff is empty — every change here (explain-capability server work, resolution-boundary tests, workflow reworks, and the READINESS updates, now in READINESS.adoc with [line-through] markers) has already landed on main via #102/#106/#108/#110/#113/#114.

auto-merge was automatically disabled September 17, 2026 08:58

Pull request was closed

@hyperpolymath
hyperpolymath deleted the fix-ci-actions branch September 18, 2026 13:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants