Skip to content

Fix/split live actions policy - #775

Merged
hyperpolymath merged 6 commits into
mainfrom
fix/split-live-actions-policy
Sep 12, 2026
Merged

Fix/split live actions policy#775
hyperpolymath merged 6 commits into
mainfrom
fix/split-live-actions-policy

Conversation

@hyperpolymath

@hyperpolymath hyperpolymath commented Sep 12, 2026

Copy link
Copy Markdown
Owner

Summary

Closes #

Type of change

  • 🐛 Bug fix (non-breaking change that fixes an issue)
  • ✨ New feature (non-breaking change that adds functionality)
  • 💥 Breaking change (would change existing behaviour)
  • 🕳️ Soundness fix (fixes a checker/proof false-negative)
  • 📖 Documentation
  • 🧹 Refactor / tech debt (behaviour-preserving)
  • ⚡ Performance
  • 🔧 Build / CI / tooling

How has this been verified?

Checklist

  • My commits are signed (git commit -S).
  • I ran the project's own checks/tests locally and they pass.
  • New files carry the correct SPDX-License-Identifier (code/config MPL-2.0,
    prose CC-BY-SA-4.0); I did not relicense existing files.
  • Docs are updated, and no public claim now overstates what the code does.
  • I have not introduced a soundness hole (or I have flagged where I might have).

Notes for reviewers

hyperpolymath and others added 5 commits August 29, 2026 02:52
@hyperpolymath
fix(governance): split credentialed live policy audit
4a32937
@hyperpolymath
fix(governance): distinguish unavailable live audit
2611295
@hyperpolymath
fix(governance): test pinned policy source
541214b
@hyperpolymath
fix(governance): validate pinned staleness source
28f7a2c
@mistral-vibe
Fix TokenPermissionsID: apply least-privilege permissions
e9ef009 
Apply principle of least privilege for GITHUB_TOKEN:
- Change top-level permissions to read-only
- Jobs inherit read permissions, can escalate as needed

This resolves Scorecard TokenPermissionsID alerts.

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <vibe@mistral.ai>
@coderabbitai

coderabbitai Bot commented Sep 12, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Warning

Review limit reached

Next included review available in 35 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 9886d7ce-2514-4126-936a-2786b9613048

📥 Commits

Reviewing files that changed from the base of the PR and between 210f14e and 5331019.

📒 Files selected for processing (1)
  • .github/workflows/governance-reusable.yml

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@hyperpolymath
hyperpolymath merged commit 40e5c1a into main Sep 12, 2026
12 of 15 checks passed
@hyperpolymath
hyperpolymath deleted the fix/split-live-actions-policy branch September 12, 2026 17:33
@sonarqubecloud

sonarqubecloud Bot commented Sep 12, 2026

Copy link
Copy Markdown

Quality Gate Failed Quality Gate failed

Failed conditions
C Security Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@JoshuaJewell JoshuaJewell JoshuaJewell approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@hyperpolymath @JoshuaJewell @mistral-vibe