fix: CI failure on main (Validate Claude Code Plugin, 8af9bec) #105
Description
CI Failure: Validate Claude Code Plugin
Commit: 8af9bec5b715231865240da952e3b2195bc35b9f
Run: https://github.com/JacobPEvans/claude-code-plugins/actions/runs/22799087979
Failure Logs
=== FAILED JOB: validate ===
2026-03-07T12:31:32.9665364Z ❌ Deny in main worktree: None
2026-03-07T12:31:32.9665901Z ❌ Deny when branch is main: None
2026-03-07T12:31:32.9666311Z ✅ Allow for non-main: None
2026-03-07T12:31:32.9666884Z ✅ Ignore other tools: None
2026-03-07T12:31:32.9667263Z ❌ Deny NotebookEdit in main: None
2026-03-07T12:31:32.9729709Z Running: ./git-guards/scripts/test_shlex_valueerror.py
2026-03-07T12:31:33.1094610Z PASS [ValueError: unclosed double-quote with hooksPath in fallback subcommand]: decision=silent_allow
2026-03-07T12:31:33.1095594Z PASS [ValueError: unclosed single-quote with hooksPath substring]: decision=silent_allow
2026-03-07T12:31:33.1096632Z PASS [well-formed hooksPath bypass after unknown option still denies]: decision=deny
2026-03-07T12:31:33.1097488Z PASS [hooksPath pattern inside quoted commit message stays silent_allow]: decision=silent_allow
2026-03-07T12:31:33.1098060Z
2026-03-07T12:31:33.1098186Z ALL TESTS PASSED
2026-03-07T12:31:33.1153422Z Running: ./git-guards/scripts/test_graphql_guidance.py
2026-03-07T12:31:33.3437514Z PASS [shell var + -f flag]: decision=allow
2026-03-07T12:31:33.3438227Z PASS [wrong mutation: addPullRequestReviewComment]: decision=allow
2026-03-07T12:31:33.3438717Z PASS [wrong mutation: resolvePullRequestReviewThread]: decision=allow
2026-03-07T12:31:33.3439208Z PASS [correct mutation resolveReviewThread]: decision=silent_allow
2026-03-07T12:31:33.3439622Z PASS [gh pr list unaffected]: decision=silent_allow
2026-03-07T12:31:33.3440042Z PASS [combined: -f flag + wrong mutation + shell var]: decision=allow
2026-03-07T12:31:33.3440461Z PASS [jq false positive check]: decision=silent_allow
2026-03-07T12:31:33.3440816Z PASS [multi-line trailing backslash]: decision=allow
2026-03-07T12:31:33.3441036Z
2026-03-07T12:31:33.3441118Z ALL TESTS PASSED
2026-03-07T12:31:33.3494955Z Running: ./git-guards/scripts/test_gh_guard.py
2026-03-07T12:31:33.6723266Z PASS [gh pr comment deny]: decision=deny
2026-03-07T12:31:33.6723839Z PASS [gh pr comment -b flag]: decision=deny
2026-03-07T12:31:33.6724372Z PASS [gh repo delete ask]: decision=ask
2026-03-07T12:31:33.6724862Z PASS [gh release delete ask]: decision=ask
2026-03-07T12:31:33.6725360Z PASS [gh issue close ask]: decision=ask
2026-03-07T12:31:33.6725843Z PASS [gh pr close ask]: decision=ask
2026-03-07T12:31:33.6726299Z PASS [gh pr merge ask]: decision=ask
2026-03-07T12:31:33.6727189Z PASS [gh pr list silent]: decision=silent_allow
2026-03-07T12:31:33.6727546Z PASS [gh issue list silent]: decision=silent_allow
2026-03-07T12:31:33.6727875Z PASS [gh pr view silent]: decision=silent_allow
2026-03-07T12:31:33.6728197Z PASS [gh repo view silent]: decision=silent_allow
2026-03-07T12:31:33.6728500Z PASS [non-gh command]: decision=silent_allow
2026-03-07T12:31:33.6728685Z
2026-03-07T12:31:33.6728773Z ALL TESTS PASSED
2026-03-07T12:31:33.6782674Z Running: ./git-guards/scripts/test_permission_guard.py
2026-03-07T12:31:34.2849634Z PASS [git rm plain]: decision=silent_allow
2026-03-07T12:31:34.2850269Z PASS [git rm --cached]: decision=silent_allow
2026-03-07T12:31:34.2850652Z PASS [git rm -f]: decision=ask
2026-03-07T12:31:34.2850929Z PASS [git rm --force]: decision=ask
2026-03-07T12:31:34.2851194Z PASS [git rm -r]: decision=ask
2026-03-07T12:31:34.2851435Z PASS [git rm -rf]: decision=ask
2026-03-07T12:31:34.2851687Z PASS [git rm -r -f]: decision=ask
2026-03-07T12:31:34.2851950Z PASS [git restore]: decision=ask
2026-03-07T12:31:34.2852188Z PASS [git clean]: decision=ask
2026-03-07T12:31:34.2852413Z PASS [git reset]: decision=ask
2026-03-07T12:31:34.2852681Z FAIL [git push --force]: decision=deny
2026-03-07T12:31:34.2852957Z Expected: ask, Got: deny
2026-03-07T12:31:34.2853217Z PASS [git commit --no-verify]: decision=deny
2026-03-07T12:31:34.2853505Z PASS [rm .git/hooks]: decision=deny
2026-03-07T12:31:34.2853763Z PASS [ls command]: decision=silent_allow
2026-03-07T12:31:34.2854062Z PASS [git -C rm plain]: decision=silent_allow
2026-03-07T12:31:34.2854368Z PASS [git -C commit --no-verify]: decision=deny
2026-03-07T12:31:34.2854688Z PASS [git -C reset --hard]: decision=ask
2026-03-07T12:31:34.2855429Z PASS [git -C -c core.hooksPath deny]: decision=deny
2026-03-07T12:31:34.2855751Z PASS [git -C restore ask]: decision=ask
2026-03-07T12:31:34.2856077Z PASS [hooksPath in value only]: decision=silent_allow
2026-03-07T12:31:34.2856655Z PASS [--no-pager before -c hooksPath]: decision=deny
2026-03-07T12:31:34.2857054Z PASS [valid -c then --bare then -c hooksPath]: decision=deny
2026-03-07T12:31:34.2857436Z PASS [hooksPath in commit message]: decision=silent_allow
2026-03-07T12:31:34.2857670Z
2026-03-07T12:31:34.2857811Z SOME TESTS FAILED
2026-03-07T12:31:34.2915475Z ##[error]Process completed with exit code 1.
2026-03-07T12:31:34.3005838Z Post job cleanup.
2026-03-07T12:31:34.3805267Z [command]/usr/bin/git version
2026-03-07T12:31:34.3844494Z git version 2.53.0
2026-03-07T12:31:34.3883656Z Temporarily overriding HOME='/home/runner/work/_temp/2364643d-06bf-4395-94ad-6be42602d410' before making global git config changes
2026-03-07T12:31:34.3884987Z Adding repository directory to the temporary git global config as a safe directory
2026-03-07T12:31:34.3889879Z [command]/usr/bin/git config --global --add safe.directory /home/runner/work/claude-code-plugins/claude-code-plugins
2026-03-07T12:31:34.3923395Z Removing SSH command configuration
2026-03-07T12:31:34.3929811Z [command]/usr/bin/git config --local --name-only --get-regexp core\.sshCommand
2026-03-07T12:31:34.3967533Z [command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'core\.sshCommand' && git config --local --unset-all 'core.sshCommand' || :"
2026-03-07T12:31:34.4210983Z Removing HTTP extra header
2026-03-07T12:31:34.4215572Z [command]/usr/bin/git config --local --name-only --get-regexp http\.https\:\/\/github\.com\/\.extraheader
2026-03-07T12:31:34.4251954Z [command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'http\.https\:\/\/github\.com\/\.extraheader' && git config --local --unset-all 'http.https://github.com/.extraheader' || :"
2026-03-07T12:31:34.4487749Z Removing includeIf entries pointing to credentials config files
2026-03-07T12:31:34.4495013Z [command]/usr/bin/git config --local --name-only --get-regexp ^includeIf\.gitdir:
2026-03-07T12:31:34.4551863Z includeif.gitdir:/home/runner/work/claude-code-plugins/claude-code-plugins/.git.path
2026-03-07T12:31:34.4552943Z includeif.gitdir:/home/runner/work/claude-code-plugins/claude-code-plugins/.git/worktrees/*.path
2026-03-07T12:31:34.4553495Z includeif.gitdir:/github/workspace/.git.path
2026-03-07T12:31:34.4553889Z includeif.gitdir:/github/workspace/.git/worktrees/*.path
2026-03-07T12:31:34.4562207Z [command]/usr/bin/git config --local --get-all includeif.gitdir:/home/runner/work/claude-code-plugins/claude-code-plugins/.git.path
2026-03-07T12:31:34.4584974Z /home/runner/work/_temp/git-credentials-97750565-8c32-4494-88af-6ec593d1a9bd.config
2026-03-07T12:31:34.4596667Z [command]/usr/bin/git config --local --unset includeif.gitdir:/home/runner/work/claude-code-plugins/claude-code-plugins/.git.path /home/runner/work/_temp/git-credentials-97750565-8c32-4494-88af-6ec593d1a9bd.config
2026-03-07T12:31:34.4632273Z [command]/usr/bin/git config --local --get-all includeif.gitdir:/home/runner/work/claude-code-plugins/claude-code-plugins/.git/worktrees/*.path
2026-03-07T12:31:34.4655605Z /home/runner/work/_temp/git-credentials-97750565-8c32-4494-88af-6ec593d1a9bd.config
2026-03-07T12:31:34.4665248Z [command]/usr/bin/git config --local --unset includeif.gitdir:/home/runner/work/claude-code-plugins/claude-code-plugins/.git/worktrees/*.path /home/runner/work/_temp/git-credentials-97750565-8c32-4494-88af-6ec593d1a9bd.config
2026-03-07T12:31:34.4698019Z [command]/usr/bin/git config --local --get-all includeif.gitdir:/github/workspace/.git.path
2026-03-07T12:31:34.4720082Z /github/runner_temp/git-credentials-97750565-8c32-4494-88af-6ec593d1a9bd.config
2026-03-07T12:31:34.4728786Z [command]/usr/bin/git config --local --unset includeif.gitdir:/github/workspace/.git.path /github/runner_temp/git-credentials-97750565-8c32-4494-88af-6ec593d1a9bd.config
2026-03-07T12:31:34.4760799Z [command]/usr/bin/git config --local --get-all includeif.gitdir:/github/workspace/.git/worktrees/*.path
2026-03-07T12:31:34.4782746Z /github/runner_temp/git-credentials-97750565-8c32-4494-88af-6ec593d1a9bd.config
2026-03-07T12:31:34.4792185Z [command]/usr/bin/git config --local --unset includeif.gitdir:/github/workspace/.git/worktrees/*.path /github/runner_temp/git-credentials-97750565-8c32-4494-88af-6ec593d1a9bd.config
2026-03-07T12:31:34.4826227Z [command]/usr/bin/git submodule foreach --recursive git config --local --show-origin --name-only --get-regexp remote.origin.url
2026-03-07T12:31:34.5071209Z Removing credentials config '/home/runner/work/_temp/git-credentials-97750565-8c32-4494-88af-6ec593d1a9bd.config'
2026-03-07T12:31:34.5216001Z Cleaning up orphan processes
Task
Please investigate and fix the CI failure on the main branch. Open a pull request with the fix.
Do not add workarounds or ignores - fix the actual root cause.