From 4610d8fdf020fa5d5516133381f76d1d0e597eaa Mon Sep 17 00:00:00 2001 From: hyperpolymath Date: Sun, 17 May 2026 00:10:14 +0100 Subject: [PATCH] ci: fix nonexistent actions/upload-artifact SHA pin Replace fabricated pin 65c79d7f54e76e4e3c7a8f34db0f4ac8b515c478 (does not exist in actions/upload-artifact) with the real v4.6.2 SHA ea165f8d65b6e75b540449e92b4886f43607fa02, matching the canonical rsr-template-repo / v3-templater pin. Unblocks 'Set up job' on every affected workflow. Refs hyperpolymath/standards#48 Co-Authored-By: Claude Opus 4.7 --- affinescript-vite/.github/workflows/hypatia-scan.yml | 2 +- .../.github/workflows/static-analysis-gate.yml | 8 ++++---- affinescriptiser/.github/workflows/hypatia-scan.yml | 2 +- .../.github/workflows/static-analysis-gate.yml | 6 +++--- road-skate/.github/workflows/hypatia-scan.yml | 2 +- road-skate/.github/workflows/static-analysis-gate.yml | 8 ++++---- 6 files changed, 14 insertions(+), 14 deletions(-) diff --git a/affinescript-vite/.github/workflows/hypatia-scan.yml b/affinescript-vite/.github/workflows/hypatia-scan.yml index fe687a8a..a9cbe5a1 100644 --- a/affinescript-vite/.github/workflows/hypatia-scan.yml +++ b/affinescript-vite/.github/workflows/hypatia-scan.yml @@ -74,7 +74,7 @@ jobs: echo "- Medium: $MEDIUM" >> $GITHUB_STEP_SUMMARY - name: Upload findings artifact - uses: actions/upload-artifact@65c79d7f54e76e4e3c7a8f34db0f4ac8b515c478 # v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: hypatia-findings path: hypatia-findings.json diff --git a/affinescript-vite/.github/workflows/static-analysis-gate.yml b/affinescript-vite/.github/workflows/static-analysis-gate.yml index 3804940a..996820e1 100644 --- a/affinescript-vite/.github/workflows/static-analysis-gate.yml +++ b/affinescript-vite/.github/workflows/static-analysis-gate.yml @@ -105,7 +105,7 @@ jobs: echo "Skipped: panic-attack not available in this environment." >> "$GITHUB_STEP_SUMMARY" - name: Upload panic-attack findings - uses: actions/upload-artifact@65c79d7f54e76e4e3c7a8f34db0f4ac8b515c478 # v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: panic-attack-findings path: panic-attack-findings.json @@ -218,7 +218,7 @@ jobs: echo "Skipped: Hypatia scanner not available in this environment." >> "$GITHUB_STEP_SUMMARY" - name: Upload hypatia findings - uses: actions/upload-artifact@65c79d7f54e76e4e3c7a8f34db0f4ac8b515c478 # v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: hypatia-findings path: hypatia-findings.json @@ -306,7 +306,7 @@ jobs: echo "Skipped: panic-attack not available in this environment." >> "$GITHUB_STEP_SUMMARY" - name: Upload bridge report - uses: actions/upload-artifact@65c79d7f54e76e4e3c7a8f34db0f4ac8b515c478 # v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: bridge-report path: bridge-report.json @@ -404,7 +404,7 @@ jobs: echo "low=$LOW" >> "$GITHUB_OUTPUT" - name: Upload unified findings (fleet scanner picks these up) - uses: actions/upload-artifact@65c79d7f54e76e4e3c7a8f34db0f4ac8b515c478 # v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: unified-findings path: findings/unified-findings.json diff --git a/affinescriptiser/.github/workflows/hypatia-scan.yml b/affinescriptiser/.github/workflows/hypatia-scan.yml index 50168765..ea8228ae 100644 --- a/affinescriptiser/.github/workflows/hypatia-scan.yml +++ b/affinescriptiser/.github/workflows/hypatia-scan.yml @@ -76,7 +76,7 @@ jobs: echo "- Medium: $MEDIUM" >> $GITHUB_STEP_SUMMARY - name: Upload findings artifact - uses: actions/upload-artifact@65c79d7f54e76e4e3c7a8f34db0f4ac8b515c478 # v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: hypatia-findings path: hypatia-findings.json diff --git a/affinescriptiser/.github/workflows/static-analysis-gate.yml b/affinescriptiser/.github/workflows/static-analysis-gate.yml index e75a6860..1bfe9edd 100644 --- a/affinescriptiser/.github/workflows/static-analysis-gate.yml +++ b/affinescriptiser/.github/workflows/static-analysis-gate.yml @@ -105,7 +105,7 @@ jobs: echo "Skipped: panic-attack not available in this environment." >> "$GITHUB_STEP_SUMMARY" - name: Upload panic-attack findings - uses: actions/upload-artifact@65c79d7f54e76e4e3c7a8f34db0f4ac8b515c478 # v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: panic-attack-findings path: panic-attack-findings.json @@ -217,7 +217,7 @@ jobs: echo "Skipped: Hypatia scanner not available in this environment." >> "$GITHUB_STEP_SUMMARY" - name: Upload hypatia findings - uses: actions/upload-artifact@65c79d7f54e76e4e3c7a8f34db0f4ac8b515c478 # v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: hypatia-findings path: hypatia-findings.json @@ -300,7 +300,7 @@ jobs: echo "low=$LOW" >> "$GITHUB_OUTPUT" - name: Upload unified findings (fleet scanner picks these up) - uses: actions/upload-artifact@65c79d7f54e76e4e3c7a8f34db0f4ac8b515c478 # v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: unified-findings path: findings/unified-findings.json diff --git a/road-skate/.github/workflows/hypatia-scan.yml b/road-skate/.github/workflows/hypatia-scan.yml index fe687a8a..a9cbe5a1 100644 --- a/road-skate/.github/workflows/hypatia-scan.yml +++ b/road-skate/.github/workflows/hypatia-scan.yml @@ -74,7 +74,7 @@ jobs: echo "- Medium: $MEDIUM" >> $GITHUB_STEP_SUMMARY - name: Upload findings artifact - uses: actions/upload-artifact@65c79d7f54e76e4e3c7a8f34db0f4ac8b515c478 # v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: hypatia-findings path: hypatia-findings.json diff --git a/road-skate/.github/workflows/static-analysis-gate.yml b/road-skate/.github/workflows/static-analysis-gate.yml index 3804940a..996820e1 100644 --- a/road-skate/.github/workflows/static-analysis-gate.yml +++ b/road-skate/.github/workflows/static-analysis-gate.yml @@ -105,7 +105,7 @@ jobs: echo "Skipped: panic-attack not available in this environment." >> "$GITHUB_STEP_SUMMARY" - name: Upload panic-attack findings - uses: actions/upload-artifact@65c79d7f54e76e4e3c7a8f34db0f4ac8b515c478 # v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: panic-attack-findings path: panic-attack-findings.json @@ -218,7 +218,7 @@ jobs: echo "Skipped: Hypatia scanner not available in this environment." >> "$GITHUB_STEP_SUMMARY" - name: Upload hypatia findings - uses: actions/upload-artifact@65c79d7f54e76e4e3c7a8f34db0f4ac8b515c478 # v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: hypatia-findings path: hypatia-findings.json @@ -306,7 +306,7 @@ jobs: echo "Skipped: panic-attack not available in this environment." >> "$GITHUB_STEP_SUMMARY" - name: Upload bridge report - uses: actions/upload-artifact@65c79d7f54e76e4e3c7a8f34db0f4ac8b515c478 # v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: bridge-report path: bridge-report.json @@ -404,7 +404,7 @@ jobs: echo "low=$LOW" >> "$GITHUB_OUTPUT" - name: Upload unified findings (fleet scanner picks these up) - uses: actions/upload-artifact@65c79d7f54e76e4e3c7a8f34db0f4ac8b515c478 # v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: unified-findings path: findings/unified-findings.json