Use one scan gate and bump skillspector to v2.11.1

Andrew Dunnrequested to merge
ci/one-scan-gate into main

Two accept files and two gate scripts judged the same skillspector report, and their rules had drifted. One gate now judges both.

flowchart LR
  A[Authored skill] --> S[skillspector v2.11.1]
  V[Vendored skills] --> S
  S --> G[scan-gate.py with scan-accept.yml]
  G --> Q{Every finding accepted?}
  Q -- yes --> P[Pass]
  Q -- no --> F[Fail]
  • scripts/scan-gate.py is the only gate. scan-accept.yml at the root holds both reviews as an authored and a vendored section of one schema. The vendored section stays bound to its upstream pin; the authored section is bound by signature and count.
  • Every existing acceptance carries over: 150 authored signatures (960 findings) and four vendored (5 findings). A new finding, a changed count or a stale entry fails.
  • skillspector moves from v2.2.3 to v2.11.1. The authored scan now lists 177 signatures. The vendored scan drops one row and adds two Anti-Refusal findings, prose saying a glab behaviour gives no warning.

just ci passes, with the gate tested against fixtures.

Merge request reports