From 6615fcdda296ef04bfd02173f93a8830b5b60410 Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Wed, 30 Sep 2026 10:27:39 +0100 Subject: [PATCH] ci(rust): install the toolchain with the runner's rustup, not dtolnay/rust-toolchain rust-ci has startup-failed on every push since 0f53008. The workflow file did not change; this repo's Actions policy admits only GitHub-owned and verified actions (patterns_allowed is empty), and dtolnay/rust-toolchain is neither, so the run is refused before any job starts. The action was also redundant: rust-toolchain.toml already pins the channel (1.97.1) and the rustfmt/clippy components, which a bare `rustup toolchain install` reads. The action's `toolchain: stable` input was being overridden by that file anyway. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01WRvDivYwLSeVCJUrfjic3f --- .github/workflows/rust-ci.yml | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/.github/workflows/rust-ci.yml b/.github/workflows/rust-ci.yml index bd0cdf7..6dd1b13 100644 --- a/.github/workflows/rust-ci.yml +++ b/.github/workflows/rust-ci.yml @@ -14,10 +14,16 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - - uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable - with: - toolchain: stable - components: rustfmt, clippy + # The toolchain comes from rust-toolchain.toml (channel + components) via the + # runner's own rustup, not a third-party action: this repo's Actions policy + # admits only GitHub-owned and verified actions, and dtolnay/rust-toolchain is + # neither, so it killed every run at startup from 0f53008 onwards. + - name: toolchain + run: | + rustup toolchain install + rustc --version + cargo fmt --version + cargo clippy --version - name: fmt run: cargo fmt --check - name: clippy