fix: CI failure on main (Validate Claude Code Plugin, 052d3a3) #107
Description
CI Failure: Validate Claude Code Plugin
Commit: 052d3a3d7183a0b0dd8cd0b63cb6a4ecf7affc20
Run: https://github.com/JacobPEvans/claude-code-plugins/actions/runs/22799098946
Failure Logs
=== FAILED JOB: validate ===
2026-03-07T12:32:12.5424910Z ❌ Deny in main worktree: None
2026-03-07T12:32:12.5425402Z ❌ Deny when branch is main: None
2026-03-07T12:32:12.5425687Z ✅ Allow for non-main: None
2026-03-07T12:32:12.5425941Z ✅ Ignore other tools: None
2026-03-07T12:32:12.5426194Z ❌ Deny NotebookEdit in main: None
2026-03-07T12:32:12.5490471Z Running: ./git-guards/scripts/test_shlex_valueerror.py
2026-03-07T12:32:12.6767813Z PASS [ValueError: unclosed double-quote with hooksPath in fallback subcommand]: decision=silent_allow
2026-03-07T12:32:12.6768781Z PASS [ValueError: unclosed single-quote with hooksPath substring]: decision=silent_allow
2026-03-07T12:32:12.6769385Z PASS [well-formed hooksPath bypass after unknown option still denies]: decision=deny
2026-03-07T12:32:12.6769991Z PASS [hooksPath pattern inside quoted commit message stays silent_allow]: decision=silent_allow
2026-03-07T12:32:12.6770343Z
2026-03-07T12:32:12.6770423Z ALL TESTS PASSED
2026-03-07T12:32:12.6821275Z Running: ./git-guards/scripts/test_graphql_guidance.py
2026-03-07T12:32:12.9097770Z PASS [shell var + -f flag]: decision=allow
2026-03-07T12:32:12.9098808Z PASS [wrong mutation: addPullRequestReviewComment]: decision=allow
2026-03-07T12:32:12.9099315Z PASS [wrong mutation: resolvePullRequestReviewThread]: decision=allow
2026-03-07T12:32:12.9099771Z PASS [correct mutation resolveReviewThread]: decision=silent_allow
2026-03-07T12:32:12.9100158Z PASS [gh pr list unaffected]: decision=silent_allow
2026-03-07T12:32:12.9100574Z PASS [combined: -f flag + wrong mutation + shell var]: decision=allow
2026-03-07T12:32:12.9100963Z PASS [jq false positive check]: decision=silent_allow
2026-03-07T12:32:12.9101297Z PASS [multi-line trailing backslash]: decision=allow
2026-03-07T12:32:12.9101512Z
2026-03-07T12:32:12.9101592Z ALL TESTS PASSED
2026-03-07T12:32:12.9156441Z Running: ./git-guards/scripts/test_gh_guard.py
2026-03-07T12:32:13.2515399Z PASS [gh pr comment deny]: decision=deny
2026-03-07T12:32:13.2516003Z PASS [gh pr comment -b flag]: decision=deny
2026-03-07T12:32:13.2516362Z PASS [gh repo delete ask]: decision=ask
2026-03-07T12:32:13.2516684Z PASS [gh release delete ask]: decision=ask
2026-03-07T12:32:13.2516962Z PASS [gh issue close ask]: decision=ask
2026-03-07T12:32:13.2517215Z PASS [gh pr close ask]: decision=ask
2026-03-07T12:32:13.2517467Z PASS [gh pr merge ask]: decision=ask
2026-03-07T12:32:13.2517739Z PASS [gh pr list silent]: decision=silent_allow
2026-03-07T12:32:13.2518051Z PASS [gh issue list silent]: decision=silent_allow
2026-03-07T12:32:13.2518369Z PASS [gh pr view silent]: decision=silent_allow
2026-03-07T12:32:13.2518687Z PASS [gh repo view silent]: decision=silent_allow
2026-03-07T12:32:13.2518991Z PASS [non-gh command]: decision=silent_allow
2026-03-07T12:32:13.2519178Z
2026-03-07T12:32:13.2519259Z ALL TESTS PASSED
2026-03-07T12:32:13.2577626Z Running: ./git-guards/scripts/test_permission_guard.py
2026-03-07T12:32:13.8776960Z PASS [git rm plain]: decision=silent_allow
2026-03-07T12:32:13.8777628Z PASS [git rm --cached]: decision=silent_allow
2026-03-07T12:32:13.8778181Z PASS [git rm -f]: decision=ask
2026-03-07T12:32:13.8778473Z PASS [git rm --force]: decision=ask
2026-03-07T12:32:13.8778741Z PASS [git rm -r]: decision=ask
2026-03-07T12:32:13.8778990Z PASS [git rm -rf]: decision=ask
2026-03-07T12:32:13.8779231Z PASS [git rm -r -f]: decision=ask
2026-03-07T12:32:13.8779478Z PASS [git restore]: decision=ask
2026-03-07T12:32:13.8779715Z PASS [git clean]: decision=ask
2026-03-07T12:32:13.8779941Z PASS [git reset]: decision=ask
2026-03-07T12:32:13.8780186Z FAIL [git push --force]: decision=deny
2026-03-07T12:32:13.8780460Z Expected: ask, Got: deny
2026-03-07T12:32:13.8780713Z PASS [git commit --no-verify]: decision=deny
2026-03-07T12:32:13.8780988Z PASS [rm .git/hooks]: decision=deny
2026-03-07T12:32:13.8781247Z PASS [ls command]: decision=silent_allow
2026-03-07T12:32:13.8781544Z PASS [git -C rm plain]: decision=silent_allow
2026-03-07T12:32:13.8781860Z PASS [git -C commit --no-verify]: decision=deny
2026-03-07T12:32:13.8782376Z PASS [git -C reset --hard]: decision=ask
2026-03-07T12:32:13.8783002Z PASS [git -C -c core.hooksPath deny]: decision=deny
2026-03-07T12:32:13.8783327Z PASS [git -C restore ask]: decision=ask
2026-03-07T12:32:13.8783624Z PASS [hooksPath in value only]: decision=silent_allow
2026-03-07T12:32:13.8783966Z PASS [--no-pager before -c hooksPath]: decision=deny
2026-03-07T12:32:13.8784323Z PASS [valid -c then --bare then -c hooksPath]: decision=deny
2026-03-07T12:32:13.8784702Z PASS [hooksPath in commit message]: decision=silent_allow
2026-03-07T12:32:13.8784920Z
2026-03-07T12:32:13.8784998Z SOME TESTS FAILED
2026-03-07T12:32:13.8843409Z ##[error]Process completed with exit code 1.
2026-03-07T12:32:13.8914950Z Post job cleanup.
2026-03-07T12:32:13.9764512Z [command]/usr/bin/git version
2026-03-07T12:32:13.9801809Z git version 2.53.0
2026-03-07T12:32:13.9844575Z Temporarily overriding HOME='/home/runner/work/_temp/5cc409c4-8caa-46a4-8d59-95e0ac690379' before making global git config changes
2026-03-07T12:32:13.9845990Z Adding repository directory to the temporary git global config as a safe directory
2026-03-07T12:32:13.9849453Z [command]/usr/bin/git config --global --add safe.directory /home/runner/work/claude-code-plugins/claude-code-plugins
2026-03-07T12:32:13.9881272Z Removing SSH command configuration
2026-03-07T12:32:13.9887853Z [command]/usr/bin/git config --local --name-only --get-regexp core\.sshCommand
2026-03-07T12:32:13.9922862Z [command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'core\.sshCommand' && git config --local --unset-all 'core.sshCommand' || :"
2026-03-07T12:32:14.0164930Z Removing HTTP extra header
2026-03-07T12:32:14.0169239Z [command]/usr/bin/git config --local --name-only --get-regexp http\.https\:\/\/github\.com\/\.extraheader
2026-03-07T12:32:14.0204866Z [command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'http\.https\:\/\/github\.com\/\.extraheader' && git config --local --unset-all 'http.https://github.com/.extraheader' || :"
2026-03-07T12:32:14.0436813Z Removing includeIf entries pointing to credentials config files
2026-03-07T12:32:14.0442884Z [command]/usr/bin/git config --local --name-only --get-regexp ^includeIf\.gitdir:
2026-03-07T12:32:14.0466861Z includeif.gitdir:/home/runner/work/claude-code-plugins/claude-code-plugins/.git.path
2026-03-07T12:32:14.0467934Z includeif.gitdir:/home/runner/work/claude-code-plugins/claude-code-plugins/.git/worktrees/*.path
2026-03-07T12:32:14.0468893Z includeif.gitdir:/github/workspace/.git.path
2026-03-07T12:32:14.0469557Z includeif.gitdir:/github/workspace/.git/worktrees/*.path
2026-03-07T12:32:14.0477458Z [command]/usr/bin/git config --local --get-all includeif.gitdir:/home/runner/work/claude-code-plugins/claude-code-plugins/.git.path
2026-03-07T12:32:14.0499779Z /home/runner/work/_temp/git-credentials-4a49c170-6216-4f45-8a55-7de778c09ac9.config
2026-03-07T12:32:14.0510447Z [command]/usr/bin/git config --local --unset includeif.gitdir:/home/runner/work/claude-code-plugins/claude-code-plugins/.git.path /home/runner/work/_temp/git-credentials-4a49c170-6216-4f45-8a55-7de778c09ac9.config
2026-03-07T12:32:14.0546146Z [command]/usr/bin/git config --local --get-all includeif.gitdir:/home/runner/work/claude-code-plugins/claude-code-plugins/.git/worktrees/*.path
2026-03-07T12:32:14.0569818Z /home/runner/work/_temp/git-credentials-4a49c170-6216-4f45-8a55-7de778c09ac9.config
2026-03-07T12:32:14.0579052Z [command]/usr/bin/git config --local --unset includeif.gitdir:/home/runner/work/claude-code-plugins/claude-code-plugins/.git/worktrees/*.path /home/runner/work/_temp/git-credentials-4a49c170-6216-4f45-8a55-7de778c09ac9.config
2026-03-07T12:32:14.0611644Z [command]/usr/bin/git config --local --get-all includeif.gitdir:/github/workspace/.git.path
2026-03-07T12:32:14.0634284Z /github/runner_temp/git-credentials-4a49c170-6216-4f45-8a55-7de778c09ac9.config
2026-03-07T12:32:14.0643099Z [command]/usr/bin/git config --local --unset includeif.gitdir:/github/workspace/.git.path /github/runner_temp/git-credentials-4a49c170-6216-4f45-8a55-7de778c09ac9.config
2026-03-07T12:32:14.0676228Z [command]/usr/bin/git config --local --get-all includeif.gitdir:/github/workspace/.git/worktrees/*.path
2026-03-07T12:32:14.0698780Z /github/runner_temp/git-credentials-4a49c170-6216-4f45-8a55-7de778c09ac9.config
2026-03-07T12:32:14.0708726Z [command]/usr/bin/git config --local --unset includeif.gitdir:/github/workspace/.git/worktrees/*.path /github/runner_temp/git-credentials-4a49c170-6216-4f45-8a55-7de778c09ac9.config
2026-03-07T12:32:14.0741874Z [command]/usr/bin/git submodule foreach --recursive git config --local --show-origin --name-only --get-regexp remote.origin.url
2026-03-07T12:32:14.0993042Z Removing credentials config '/home/runner/work/_temp/git-credentials-4a49c170-6216-4f45-8a55-7de778c09ac9.config'
2026-03-07T12:32:14.1150290Z Cleaning up orphan processes
Task
Please investigate and fix the CI failure on the main branch. Open a pull request with the fix.
Do not add workarounds or ignores - fix the actual root cause.