Repository navigation

fix: replace standalone dependency-audit.yml with org standard thin caller stub - #217

Closed

don-petry wants to merge 45 commits into

mainfrom

claude/issue-106-20260508-1732

Closed

fix: replace standalone dependency-audit.yml with org standard thin caller stub#217
don-petry wants to merge 45 commits into
mainfrom
claude/issue-106-20260508-1732

Commits on Jun 28, 2026
- Add multi-agent isolation strategy using git worktrees (#2)
  
  authored and
  donpetry-bot
  committed
  7fff8b4
- feat: add weekly compliance audit workflow (#12)
  
  authored and
  donpetry-bot
  committed
  2761820
- chore: run compliance audit every Friday at noon UTC
  
  authored and
  donpetry-bot
  committed
  a9ffaa7
- feat: add full CI pipeline for .github repo (#15)
  
  authored and
  donpetry-bot
  committed
  369ce47
- feat: extend compliance audit with CI/automation health survey (#13)
  
  authored and
  donpetry-bot
  committed
  9d5b9b9
- chore(deps): Bump anthropics/claude-code-action from 1.0.83 to 1.0.89 (#22)
  
  dependabot[bot]
  authored and
  donpetry-bot
  committed
  c832040
- feat: split Claude workflow into interactive + issue automation jobs (#54)
  
  authored and
  donpetry-bot
  committed
  f13806c
- feat: require GitHub Discussions on all repos (#53)
  
  authored and
  donpetry-bot
  committed
  c1861f4
- fix: grant claude-issue job tools to create PRs and check CI (#55)
  
  authored and
  donpetry-bot
  committed
  272cfb7
- fix: add concurrency guard and comment tools to claude-issue job
  
  authored and
  donpetry-bot
  committed
  b6446ad
- fix: add claude.yml template + checkout audit check (#63)
  
  authored and
  donpetry-bot
  committed
  d531697
- fix: auto-create required labels during compliance audit (#67)
  
  authored and
  donpetry-bot
  committed
  77e2c2c
- feat: reusable Claude Code workflow with workflows write permission (#77)
  
  authored and
  donpetry-bot
  committed
  0b7c2b1
- Add Feature Ideation workflow as standard for BMAD-enabled repos (#81)
  
  authored and
  donpetry-bot
  committed
  4eed707
- feat(workflows): centralize standards via reusable workflows (#87)
  
  authored and
  donpetry-bot
  committed
  7c4ca76
- feat(workflows): pin reusable callers to @v1 and document tier model (#88)
  
  authored and
  donpetry-bot
  committed
  3e29bf6
- feat(security): add codeql.yml for SAST scanning (#100)
  
  authored and
  donpetry-bot
  committed
  3f3ca02
- Replace per-repo CodeQL workflows with GitHub default setup (#103)
  
  authored and
  donpetry-bot
  committed
  ebe0a2d
- feat(claude): trigger Claude to fix CI failures on PRs (#148)
  
  authored and
  donpetry-bot
  committed
  6a615a6
- feat(feature-ideation): add curated reputable source list for Mary (#102)
  
  authored and
  donpetry-bot
  committed
  76c5014
- fix: correct reusable workflow path syntax (remove duplicate .github) (#154)
  
  authored and
  donpetry-bot
  committed
  0a3185d
- fix(claude-ci-fix): resolve PR via API when check_run payload is empty
  
  don-petry
  authored and
  donpetry-bot
  committed
  5a9b79f
- docs: document OIDC immutability constraint and exempt claude.yml from SHA pinning (#159)
  
  authored and
  donpetry-bot
  committed
  8def087
- fix: restore double .github path in agent-shield and claude reusable refs
  
  authored and
  donpetry-bot
  committed
  61056fd
- feat: trigger Claude on CodeRabbit and Copilot review comments (#198)
  
  authored and
  donpetry-bot
  committed
  3e7d340
- chore: deprecate pr-review-agent — remove all traces
  
  authored and
  donpetry-bot
  committed
  660242a
- feat: make pr-review-mention an org standard (#237)
  
  authored and
  donpetry-bot
  committed
  27d9f76
- fix(claude): add copilot-pull-request-reviewer and gemini-code-assist to bot allow list (#238)
  
  authored and
  donpetry-bot
  committed
  f35d659
- fix(feature-ideation): address Copilot + CodeRabbit review on PR #85 (18 fixes, 17 new tests) (#85)
  
  authored and
  donpetry-bot
  committed
  430cb71
- feat(claude): add claude-fix-review-comments job for bot review responses (#245)
  
  authored and
  donpetry-bot
  committed
  aaa4b9a
- chore(dev-lead): deprecate claude.yml in ci-standards, promote dev-lead.yml (#301)
  
  don-petry
  authored and
  donpetry-bot
  committed
  914d3e5
- chore(deps): Bump actions/upload-artifact from 4.6.2 to 7.0.1 (#303)
  
  authored and
  donpetry-bot
  committed
  471dbf0
- feat: implement issue #251 — Compliance: secret_scanning_ai_detection (#327)
  
  don-petry
  and
  donpetry-bot
  committed
  8a47e63
- docs: document fine-grained token scopes for ORG_SCORECARD_TOKEN (#248)
  
  authored and
  donpetry-bot
  committed
  2076eba
- fix(dependabot-rebase): handle 404 from compare API — skip PR when branch not found
  
  authored and
  donpetry-bot
  committed
  c2cbc1a
- fix(ci): downgrade pnpm/action-setup to v5 in dependency-audit reusable (#152)
  
  committed
  f20c5c3
- feat: add compliance-remediate.sh — close the audit -> auto-fix -> PR loop (#220)
  
  committed
  7bf84fc
- fix(ci): add gitleaks secret-scan job to satisfy compliance check (#219)
  
  committed
  6869f70
- feat: implement issue #375 — Compliance audit — 2026-05-29 (#376)
  
  committed
  12ea428
- chore: remove deprecated claude.yml from standards (#379)
  
  committed
  a844a58
- fix: enable delete_branch_on_merge on .github repo (#222)
  
  committed
  c92b291
- fix(ci): pin claude-code-reusable.yml ref to @v1 (#218)
  
  committed
  b16ab61
- fix: replace standalone dependency-audit.yml with org standard thin caller stub
  
  don-petry
  authored and
  donpetry-bot
  committed
  84abb80
- chore: apply manual instructions [skip ci-relay]
  donpetry-bot
  committed
  1d42e1a
- fix: remove duplicate sections and jobs causing lint failures
  
  donpetry-bot
  and
  claude
  committed
  6e43358

Commits

Commits on Jun 28, 2026