Skip to content

chore(CODEOWNERS): drop /.github/workflows/ line (Refs standards#55)#22

Merged
hyperpolymath merged 1 commit into
mainfrom
claude/codeowners-drop-workflows-55
May 16, 2026
Merged

chore(CODEOWNERS): drop /.github/workflows/ line (Refs standards#55)#22
hyperpolymath merged 1 commit into
mainfrom
claude/codeowners-drop-workflows-55

Conversation

@hyperpolymath
Copy link
Copy Markdown
Owner

Per hyperpolymath/standards#55 decision (a) for solo-owned repos: removes the /.github/workflows/ CODEOWNERS line so Dependabot github-actions PRs stop auto-requesting review. No functional review gating is lost on a solo-owned repo.

Refs hyperpolymath/standards#55

🤖 Generated with Claude Code

Solo-owned repo: the workflow path line only causes Dependabot
github-actions PRs to auto-request review, driving the
review_requested notification flood. No functional gating lost.

Refs hyperpolymath/standards#55

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
@github-actions
Copy link
Copy Markdown

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

@github-actions
Copy link
Copy Markdown

🔍 Hypatia Security Scan

Findings: 24 issues detected

Severity Count
🔴 Critical 6
🟠 High 11
🟡 Medium 7

⚠️ Action Required: Critical security issues found!

View findings
[
  {
    "reason": "Stray AI.a2ml in root -- use 0-AI-MANIFEST.a2ml only",
    "type": "banned",
    "file": "AI.a2ml",
    "action": "delete",
    "rule_module": "root_hygiene",
    "severity": "high"
  },
  {
    "reason": "npm banned -- use Deno",
    "type": "banned",
    "file": "package-lock.json",
    "action": "delete",
    "rule_module": "root_hygiene",
    "severity": "high"
  },
  {
    "reason": "Superseded by 0-AI-MANIFEST.a2ml",
    "type": "banned",
    "file": "AI.djot",
    "action": "delete",
    "rule_module": "root_hygiene",
    "severity": "high"
  },
  {
    "reason": "No test directory or test files found",
    "type": "no_tests",
    "file": "/home/runner/work/coq-jr/coq-jr",
    "action": "flag",
    "rule_module": "honest_completion",
    "severity": "high",
    "deduction": 20
  },
  {
    "reason": "Workflow executes remote script directly (curl/wget piped to shell). Download, verify checksum/signature, then execute.",
    "type": "download_then_run",
    "file": "mirror.yml",
    "action": "verify_download_integrity",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Js.Promise deprecated -- use Promise (2 occurrences)",
    "type": "deprecated_api",
    "file": "/home/runner/work/coq-jr/coq-jr/src/Deno.res",
    "action": "module_replace",
    "rule_module": "migration_rules",
    "severity": "medium"
  },
  {
    "reason": "Js.Nullable deprecated -- use Nullable (3 occurrences)",
    "type": "deprecated_api",
    "file": "/home/runner/work/coq-jr/coq-jr/src/Dom.res",
    "action": "module_replace",
    "rule_module": "migration_rules",
    "severity": "medium"
  },
  {
    "reason": "Js.Promise deprecated -- use Promise (2 occurrences)",
    "type": "deprecated_api",
    "file": "/home/runner/work/coq-jr/coq-jr/src/JsCoq.res",
    "action": "module_replace",
    "rule_module": "migration_rules",
    "severity": "medium"
  },
  {
    "reason": "Js.Array2 deprecated -- use Array (11 occurrences)",
    "type": "deprecated_api",
    "file": "/home/runner/work/coq-jr/coq-jr/src/Components.res",
    "action": "search_replace",
    "rule_module": "migration_rules",
    "severity": "high"
  },
  {
    "reason": "Js.Array2 deprecated -- use Array (2 occurrences)",
    "type": "deprecated_api",
    "file": "/home/runner/work/coq-jr/coq-jr/src/Page.res",
    "action": "search_replace",
    "rule_module": "migration_rules",
    "severity": "high"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence

@hyperpolymath hyperpolymath merged commit 3b48330 into main May 16, 2026
13 of 16 checks passed
@hyperpolymath hyperpolymath deleted the claude/codeowners-drop-workflows-55 branch May 16, 2026 23:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant