fix(workflows): make workflows_ref required, guard empty refs, lint the default (BE-5546) - #103

Merged

mattmillerai merged 18 commits into

mainfrom

matt/be-5546-require-workflows-ref

Aug 12, 2026

Commits on Aug 1, 2026

fix(workflows): make workflows_ref required, guard empty refs, lint the default (BE-5546)
mattmillerai
committed
b668437
fix(workflows): close the review panel's gaps in the workflows_ref lint + guard (BE-5546)
mattmillerai
committed
a924144
docs(workflow-pins): correct the KNOWN_EXEMPT staleness comment (BE-5546)
mattmillerai
committed
697e07e
fix(workflow-pins): catch the flow-mapping form of the ref checkout (BE-5546)
mattmillerai
committed
a8f101e
fix(workflow-pins): catch the multi-line spelling of the ref checkout (BE-5546)
mattmillerai
committed
c9c4cf7
fix(workflow-pins): catch the commented spelling of the ref checkout (BE-5546)
mattmillerai
committed
c59ceae
fix(workflow-pins): the env binding is not the guard — verify the rejection (BE-5546)
mattmillerai
committed
66984ae
fix(workflow-pins): tie the guard's empty test to the ref and its own branch (BE-5546)
mattmillerai
committed
2866ac1
fix(workflow-pins): the guard's condition must be the empty test, not contain it (BE-5546)
mattmillerai
committed
ad1036e
fix(workflow-pins): the inline branch ends at `fi`, and its exit must be bare (BE-5546)
mattmillerai
committed
69e8a4e
fix(workflow-pins): the branch's exit must be at its own nesting depth (BE-5546)
mattmillerai
committed
156b1e7
fix(workflow-pins): a guard that can be skipped or soft-failed is not a guard (BE-5546)
mattmillerai
committed
c008967

Commits on Aug 4, 2026

fix(pr-size): require a pinned workflows_ref, guard empty refs, drain the exemption (BE-5858) (#124)
mattmillerai
authored
8c0b682

Commits on Aug 5, 2026

merge main: reconcile BE-5546 workflows_ref lint with BE-4169 self-pin

mattmillerai
and
claude
committed
d76c54b
docs(workflow-pins): document the job_workflow_sha exemption and length-guard shape

mattmillerai
and
claude
committed
31447bb

Commits on Aug 11, 2026

Merge remote-tracking branch 'origin/main' into matt/be-5546-require-workflows-ref
mattmillerai
committed
0e9a313
fix: resolve review feedback
mattmillerai
committed
deaa116
fix: resolve review feedback
mattmillerai
committed
a8f75b5