From c9cd9e79fcec70ffa8d17ce949b3e9b032b93844 Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 26 Jun 2026 18:33:23 +0000 Subject: [PATCH] ci: bump Hypatia scan reusable pin to GITHUB_TOKEN fix Point the scan wrapper at the standards reusable commit that sets GITHUB_TOKEN (HYPATIA_SCAN_PAT || GITHUB_TOKEN) in the scan step, so the Dependabot / code-scanning / secret-scanning alert checks stop emitting "GITHUB_TOKEN not set" warnings. The reusable at this pin also keeps the --exit-zero + always() artifact upload, so findings are published even when the severity gate fails. Co-Authored-By: Claude Opus 4.8 Claude-Session: https://claude.ai/code/session_01V13sGvHnaeCY5A9fF2QsDm --- .github/workflows/hypatia-scan.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml index 027d9891..e7a14f96 100644 --- a/.github/workflows/hypatia-scan.yml +++ b/.github/workflows/hypatia-scan.yml @@ -27,5 +27,5 @@ permissions: jobs: hypatia: - uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@d135b05bfc647d0c0fbfedc7e80f37ea50f49236 + uses: hyperpolymath/standards/.github/workflows/hypatia-scan-reusable.yml@abd93c3c3b8b3fce6843bafde2b3cc78359ebdab secrets: inherit