fix: replace standalone dependency-audit.yml with org standard thin caller stub#217

Open

don-petry wants to merge 45 commits into

mainfrom

claude/issue-106-20260508-1732

Commits on Jun 28, 2026

Add multi-agent isolation strategy using git worktrees (#2)

authored and
donpetry-bot
committed
feat: add weekly compliance audit workflow (#12)

authored and
donpetry-bot
committed
chore: run compliance audit every Friday at noon UTC

authored and
donpetry-bot
committed
feat: add full CI pipeline for .github repo (#15)

authored and
donpetry-bot
committed
feat: extend compliance audit with CI/automation health survey (#13)

authored and
donpetry-bot
committed
chore(deps): Bump anthropics/claude-code-action from 1.0.83 to 1.0.89 (#22)

dependabot[bot]
authored and
donpetry-bot
committed
feat: split Claude workflow into interactive + issue automation jobs (#54)

authored and
donpetry-bot
committed
feat: require GitHub Discussions on all repos (#53)

authored and
donpetry-bot
committed
fix: grant claude-issue job tools to create PRs and check CI (#55)

authored and
donpetry-bot
committed
fix: add concurrency guard and comment tools to claude-issue job

authored and
donpetry-bot
committed
fix: add claude.yml template + checkout audit check (#63)

authored and
donpetry-bot
committed
fix: auto-create required labels during compliance audit (#67)

authored and
donpetry-bot
committed
feat: reusable Claude Code workflow with workflows write permission (#77)

authored and
donpetry-bot
committed
Add Feature Ideation workflow as standard for BMAD-enabled repos (#81)

authored and
donpetry-bot
committed
feat(workflows): centralize standards via reusable workflows (#87)

authored and
donpetry-bot
committed
feat(workflows): pin reusable callers to @v1 and document tier model (#88)

authored and
donpetry-bot
committed
feat(security): add codeql.yml for SAST scanning (#100)

authored and
donpetry-bot
committed
Replace per-repo CodeQL workflows with GitHub default setup (#103)

authored and
donpetry-bot
committed
feat(claude): trigger Claude to fix CI failures on PRs (#148)

authored and
donpetry-bot
committed
feat(feature-ideation): add curated reputable source list for Mary (#102)

authored and
donpetry-bot
committed
fix: correct reusable workflow path syntax (remove duplicate .github) (#154)

authored and
donpetry-bot
committed
fix(claude-ci-fix): resolve PR via API when check_run payload is empty

don-petry
authored and
donpetry-bot
committed
docs: document OIDC immutability constraint and exempt claude.yml from SHA pinning (#159)

authored and
donpetry-bot
committed
fix: restore double .github path in agent-shield and claude reusable refs

authored and
donpetry-bot
committed
feat: trigger Claude on CodeRabbit and Copilot review comments (#198)

authored and
donpetry-bot
committed
chore: deprecate pr-review-agent — remove all traces

authored and
donpetry-bot
committed
feat: make pr-review-mention an org standard (#237)

authored and
donpetry-bot
committed
fix(claude): add copilot-pull-request-reviewer and gemini-code-assist to bot allow list (#238)

authored and
donpetry-bot
committed
fix(feature-ideation): address Copilot + CodeRabbit review on PR #85 (18 fixes, 17 new tests) (#85)

authored and
donpetry-bot
committed
feat(claude): add claude-fix-review-comments job for bot review responses (#245)

authored and
donpetry-bot
committed
chore(dev-lead): deprecate claude.yml in ci-standards, promote dev-lead.yml (#301)

don-petry
authored and
donpetry-bot
committed
chore(deps): Bump actions/upload-artifact from 4.6.2 to 7.0.1 (#303)

authored and
donpetry-bot
committed
feat: implement issue #251 — Compliance: secret_scanning_ai_detection (#327)

don-petry
and
donpetry-bot
committed
docs: document fine-grained token scopes for ORG_SCORECARD_TOKEN (#248)

authored and
donpetry-bot
committed
fix(dependabot-rebase): handle 404 from compare API — skip PR when branch not found

authored and
donpetry-bot
committed
fix(ci): downgrade pnpm/action-setup to v5 in dependency-audit reusable (#152)

committed
feat: add compliance-remediate.sh — close the audit -> auto-fix -> PR loop (#220)

committed
fix(ci): add gitleaks secret-scan job to satisfy compliance check (#219)

committed
feat: implement issue #375 — Compliance audit — 2026-05-29 (#376)

committed
chore: remove deprecated claude.yml from standards (#379)

committed
fix: enable delete_branch_on_merge on .github repo (#222)

committed
fix(ci): pin claude-code-reusable.yml ref to @v1 (#218)

committed
fix: replace standalone dependency-audit.yml with org standard thin caller stub

don-petry
authored and
donpetry-bot
committed
chore: apply manual instructions [skip ci-relay]
donpetry-bot
committed
fix: remove duplicate sections and jobs causing lint failures

donpetry-bot
and
claude
committed