From 1ed033b2875fa3888d5acd6474200542bf9895f4 Mon Sep 17 00:00:00 2001
From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com>
Date: Sun, 19 Apr 2026 16:09:02 +0000
Subject: [PATCH 1/2] fix: update code-quality ruleset to full required check
 list

Add all required status checks to scripts/setup-rulesets.sh:
- SonarCloud, Analyze (actions), Lint, Format
- agent-shield / AgentShield, dependency-audit / Detect ecosystems

Explicitly excludes claude-code / claude (see comment) to avoid
deadlocking workflow-modifying PRs. Also enables
strict_required_status_checks_policy to match the live ruleset.

Closes #81

Co-authored-by: don-petry <don-petry@users.noreply.github.com>
---
 scripts/setup-rulesets.sh | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/scripts/setup-rulesets.sh b/scripts/setup-rulesets.sh
index 44a64c2..4c1247f 100644
--- a/scripts/setup-rulesets.sh
+++ b/scripts/setup-rulesets.sh
@@ -38,14 +38,24 @@ PAYLOAD='{
       "type": "required_status_checks",
       "parameters": {
         "required_status_checks": [
-          { "context": "SonarCloud" }
+          { "context": "SonarCloud" },
+          { "context": "Analyze (actions)" },
+          { "context": "Lint" },
+          { "context": "Format" },
+          { "context": "agent-shield / AgentShield" },
+          { "context": "dependency-audit / Detect ecosystems" }
         ],
-        "strict_required_status_checks_policy": false,
+        "strict_required_status_checks_policy": true,
         "do_not_enforce_on_create": false
       }
     }
   ]
 }'
+# NOTE: "claude-code / claude" is intentionally excluded from required checks.
+# claude-code-action refuses to mint a token for PRs that touch workflow files,
+# which would deadlock every workflow-modifying PR. The check still runs for
+# review feedback on normal PRs but must not be a merge gate.
+# See: https://github.com/petry-projects/ContentTwin/issues/81
 
 if [ -n "$EXISTING_ID" ]; then
   echo "  Updating existing '$RULESET_NAME' ruleset (id: $EXISTING_ID)..."

From 3af8c8ee4d1261c5448263525cb2a7dfec611cd7 Mon Sep 17 00:00:00 2001
From: Claude <claude@anthropic.com>
Date: Mon, 27 Apr 2026 18:52:34 -0700
Subject: [PATCH 2/2] retrigger: bump workflows to run checks