Compliance audit — 2026-06-26

[don-petry]

Compliance Audit — 2026-06-26

This umbrella issue tracks all findings from the automated compliance audit run on 2026-06-26.
Findings are grouped by remediation category. Address each category together to avoid duplicate agent PRs.

Total findings: 14 across 6 repositories

---

Remediation Work Breakdown

Workflows (12 finding(s))

Remediation: per-repo workflow additions
Affected repos: .github-private, TalkTerm, bmad-bgreat-suite, broodly, google-app-scripts, markets

Repo	Check	Severity
.github-private	sonar-s7637-exemption-missing	warning
.github-private	non-stub-feature-ideation.yml	error
TalkTerm	non-stub-feature-ideation.yml	error
bmad-bgreat-suite	sonar-s7637-exemption-missing	warning
bmad-bgreat-suite	dev-lead-stub-concurrency	warning
broodly	sonar-s7637-exemption-missing	warning
broodly	non-stub-feature-ideation.yml	error
markets	sonar-s7637-exemption-missing	warning
markets	non-stub-feature-ideation.yml	error
google-app-scripts	sonar-s7637-exemption-missing	warning
google-app-scripts	non-stub-feature-ideation.yml	error
google-app-scripts	dev-lead-stub-concurrency	warning

Agent Standards (CLAUDE.md / AGENTS.md / copilot-setup-steps.yml) (2 finding(s))

Remediation: per-repo doc and workflow additions
Affected repos: google-app-scripts

Repo	Check	Severity
google-app-scripts	copilot-instructions-missing-tech-stack	warning
google-app-scripts	copilot-instructions-missing-local-dev-commands	warning

---

Generated by the weekly compliance audit on 2026-06-26 14:36 UTC.
Address each remediation category as a single coordinated PR to avoid duplicate agent work.

[don-petry]

Dev-Lead: issue #537 implementation failed — will retry

The engine failed (engine-error — e.g. a timeout or transient engine error). This was attempt 1 of 3; dev-lead will retry automatically. You can also re-apply the dev-lead label to retry now.

• Cause: engine-error
• Run: https://github.com/petry-projects/.github/actions/runs/28326611531

Last 40 lines of engine output (redacted)

    [copilot] calling gh copilot (model=openai/o4-mini, timeout=600s, flags=--yolo)
Error: Classic Personal Access Tokens (ghp_) are not supported by Copilot.

The GH_TOKEN environment variable contains a classic PAT.
Please use a Fine-Grained Personal Access Token or another authentication method.

To fix this, you can:
  • Replace the token in GH_TOKEN with a fine-grained PAT
  • Unset GH_TOKEN and run 'gh auth login' to authenticate
  • Unset GH_TOKEN and start 'copilot', then use the '/login' command

[don-petry]

Dev-Lead: issue #537 implementation failed — will retry

The engine failed (engine-error — e.g. a timeout or transient engine error). This was attempt 2 of 3; dev-lead will retry automatically. You can also re-apply the dev-lead label to retry now.

• Cause: engine-error
• Run: https://github.com/petry-projects/.github/actions/runs/28327337152

Last 40 lines of engine output (redacted)

    [copilot] calling gh copilot (model=openai/o4-mini, timeout=600s, flags=--yolo)
Error: Classic Personal Access Tokens (ghp_) are not supported by Copilot.

The GH_TOKEN environment variable contains a classic PAT.
Please use a Fine-Grained Personal Access Token or another authentication method.

To fix this, you can:
  • Replace the token in GH_TOKEN with a fine-grained PAT
  • Unset GH_TOKEN and run 'gh auth login' to authenticate
  • Unset GH_TOKEN and start 'copilot', then use the '/login' command

[don-petry]

Dev-Lead: cannot implement issue #537 — needs human attention

Automatic retries are exhausted (attempt 3 of 3). The most recent failure was engine-error.

• Run: https://github.com/petry-projects/.github/actions/runs/28329537346

Last 40 lines of engine output (redacted)

    [copilot] calling gh copilot (model=openai/o4-mini, timeout=600s, flags=--yolo)
Error: Classic Personal Access Tokens (ghp_) are not supported by Copilot.

The GH_TOKEN environment variable contains a classic PAT.
Please use a Fine-Grained Personal Access Token or another authentication method.

To fix this, you can:
  • Replace the token in GH_TOKEN with a fine-grained PAT
  • Unset GH_TOKEN and run 'gh auth login' to authenticate
  • Unset GH_TOKEN and start 'copilot', then use the '/login' command

Please review the failures above. To retry anyway, remove the dev-lead:needs-human label and re-apply the dev-lead label.

[don-petry]

Dev-Lead: cannot implement issue #537 — needs human attention

Automatic retries are exhausted (attempt 4 of 3). The most recent failure was engine-error.

• Run: https://github.com/petry-projects/.github/actions/runs/28332871714

Last 40 lines of engine output (redacted)

    [copilot] calling gh copilot (model=openai/o4-mini, timeout=600s, flags=--yolo)
Error: Classic Personal Access Tokens (ghp_) are not supported by Copilot.

The GH_TOKEN environment variable contains a classic PAT.
Please use a Fine-Grained Personal Access Token or another authentication method.

To fix this, you can:
  • Replace the token in GH_TOKEN with a fine-grained PAT
  • Unset GH_TOKEN and run 'gh auth login' to authenticate
  • Unset GH_TOKEN and start 'copilot', then use the '/login' command

Please review the failures above. To retry anyway, remove the dev-lead:needs-human label and re-apply the dev-lead label.