fix(ci): repair never-parsed workflow(s) - #300
Conversation
These files were rejected by the workflow parser before any run could be scheduled: the API reported each name as its file path (the never-parsed fallback), and every run failed at 0s with zero jobs and no logs. - .github/workflows/scorecard.yml:YAML_INVALID:drop mapping under scalar permissions: actions: read Not changed (needs review): - .github/workflows/security-scan.yml:UNKNOWN-needs-judgement - .github/workflows/boj-build.yml:UNKNOWN-needs-judgement Validated per file: actionlint, yaml.safe_load, duplicate-key check. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
|
Note Automatic reviews are paused because your trial's included automatic processing has been used for this period. Upgrade now, or comment "Gitar review" to run a review anytime. Code Review ✅ ApprovedRemoves the redundant indented actions: read block under permissions: read-all to fix a YAML syntax error that prevented GitHub from parsing the workflow. No issues found.
OptionsDisplay: compact → Showing less information. Comment with these commands to change the behavior for this request:
Important Your trial ends in 7 days — upgrade now to keep code review, CI analysis, auto-apply, custom automations, and more. Was this helpful? React with 👍 / 👎 | Gitar |
|
|
![gitar-bot[bot]](https://avatars.githubusercontent.com/in/827041?s=60&v=4){kind=small}
1 participant
Repairs GitHub Actions workflows that GitHub has never parsed. They were rejected by the workflow parser before any run could be scheduled: the API reported each workflow's
nameas its file path (the never-parsed fallback), and every run failed at 0s with zero jobs and no logs — invisible togh pr checks.Cause and fix
permissions: read-allfollowed by an indentedactions: read— a mapping indented under a scalar value, which is a YAML syntax error. Injected by an automated permissions sweep.read-allalready grants read on every scope, so the stray line is redundant as well as fatal; deleted.How this was found
An estate-wide scan of 425 repos found 263 such workflows across 133 repos.
Verification
The edited file passes actionlint,
yaml.safe_load, and a duplicate-key check. Decisive post-merge proof: the workflow resolves its declared name instead of its path.🤖 Generated with Claude Code