From 26fe6eeb93907b6017f549a56813df14f1459727 Mon Sep 17 00:00:00 2001 From: Einar Date: Thu, 10 Sep 2026 14:36:26 +0200 Subject: [PATCH] Skip Chronicle.Wolverine in the common workflow bootstrap Chronicle.Wolverine's reviewed workflow composition requires full-SHA pins, the declared secret only, extra-allowed VERSIONS, and a manual reviewed package-update path. The bootstrap rewrites those wrappers to unpinned @main calls and fails the repository's own workflow tests. --- .github/workflows/bootstrap-common-workflows.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.github/workflows/bootstrap-common-workflows.yml b/.github/workflows/bootstrap-common-workflows.yml index 9c9c6c1..feb31e9 100644 --- a/.github/workflows/bootstrap-common-workflows.yml +++ b/.github/workflows/bootstrap-common-workflows.yml @@ -44,7 +44,10 @@ env: # Chronicle.Dapr - its own publication-boundary governance (tools/verify-workflow-boundary.py) # declares exactly build, preview-publish, and the pinned verify-no-work-records; # the bootstrap's wrappers and wrapper rewrites violate it - REPOS_TO_IGNORE: '["Workflows","cratis.github.io","StudioIssues","Documentation","cratis.studio","Automation",".github","Dockerfiles","AI","Templates","Dockerfiles","release-action","Chronicle.Dapr"]' + # Chronicle.Wolverine - its reviewed workflow composition (test_reviewed_workflow_composition.py) + # requires full-SHA pins, the declared secret only, extra-allowed VERSIONS, and the + # manual reviewed-update path; the bootstrap's @main rewrites violate it + REPOS_TO_IGNORE: '["Workflows","cratis.github.io","StudioIssues","Documentation","cratis.studio","Automation",".github","Dockerfiles","AI","Templates","Dockerfiles","release-action","Chronicle.Dapr","Chronicle.Wolverine"]' jobs: bootstrap: