From 51e3e0161ff8715b76da9d7d914021d8268b7f19 Mon Sep 17 00:00:00 2001 From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com> Date: Sun, 19 Apr 2026 18:35:15 +0000 Subject: [PATCH 1/2] fix: pin feature-ideation.yml reusable workflow to SHA Pins petry-projects/.github/.github/workflows/feature-ideation-reusable.yml from @v1 to its resolved SHA ee22b427cbce9ecadcf2b436acb57c3adf0cb63d to satisfy the action-pinning compliance policy. Also syncs the file with the latest upstream template: adds dry_run workflow_dispatch input, actions: read permission, and sources_file optional comment. Closes #88 Co-authored-by: don-petry --- .github/workflows/feature-ideation.yml | 40 +++++++++++++++++++------- 1 file changed, 30 insertions(+), 10 deletions(-) diff --git a/.github/workflows/feature-ideation.yml b/.github/workflows/feature-ideation.yml index 4807fbc1..bfa27645 100644 --- a/.github/workflows/feature-ideation.yml +++ b/.github/workflows/feature-ideation.yml @@ -28,16 +28,22 @@ # 2. Replace the `project_context` value with a 3-5 sentence description # of your project, its target users, and the competitive landscape Mary # should research. This is the only required customisation. -# 3. (Optional) Adjust the schedule cron if Friday morning UTC doesn't suit. -# 4. Ensure GitHub Discussions is enabled with an "Ideas" category. -# 5. Confirm the org-level secret CLAUDE_CODE_OAUTH_TOKEN is accessible. +# 3. (Optional) Copy standards/feature-ideation-sources.md from +# petry-projects/.github to .github/feature-ideation-sources.md in your +# repo and trim/extend it for your project. Mary uses YOUR copy — not the +# central template — so each repo controls its own source list. +# Pass `sources_file: path/to/your-list.md` to the reusable workflow if +# you prefer a different location. +# 4. (Optional) Adjust the schedule cron if Friday morning UTC doesn't suit. +# 5. Ensure GitHub Discussions is enabled with an "Ideas" category. +# 6. Confirm the org-level secret CLAUDE_CODE_OAUTH_TOKEN is accessible. # # Standard: https://github.com/petry-projects/.github/blob/main/standards/ci-standards.md#8-feature-ideation-feature-ideationyml--bmad-method-repos name: Feature Research & Ideation (BMAD Analyst) on: schedule: - - cron: '0 7 * * 5' # Friday 07:00 UTC (3 AM EDT / 2 AM EST) + - cron: '0 7 * * 5' # Friday 07:00 UTC (3 AM EDT / 2 AM EST) workflow_dispatch: inputs: focus_area: @@ -53,6 +59,11 @@ on: - quick - standard - deep + dry_run: + description: 'Skip Discussion mutations and log them to a JSONL artifact instead. Use this on a fork to smoke-test before going live.' + required: false + default: false + type: boolean permissions: {} @@ -64,18 +75,20 @@ jobs: ideate: # Permissions cascade from the calling job to the reusable workflow. # The reusable workflow's two jobs (gather-signals + analyze) need: - # - contents: read (checkout, file reads) - # - issues: read (signal collection) - # - pull-requests: read (signal collection) - # - discussions: write (CRITICAL — create/update Discussion threads) - # - id-token: write (claude-code-action OIDC for GitHub App token) + # - contents: read (checkout, file reads) + # - issues: read (signal collection) + # - pull-requests: read (signal collection) + # - discussions: write (CRITICAL — create/update Discussion threads) + # - id-token: write (claude-code-action OIDC for GitHub App token) + # - actions: read (feed checkpoint — last successful run query) permissions: contents: read issues: read pull-requests: read discussions: write id-token: write - uses: petry-projects/.github/.github/workflows/feature-ideation-reusable.yml@v1 + actions: read + uses: petry-projects/.github/.github/workflows/feature-ideation-reusable.yml@ee22b427cbce9ecadcf2b436acb57c3adf0cb63d # v1 with: # === CUSTOMISE THIS PER REPO — the only required edit === # Replace this paragraph with a 3-5 sentence description of your project, @@ -85,7 +98,14 @@ jobs: TODO: Replace this with a description of the project and its market. Example: "ProjectX is a [type of product] for [target user]. Competitors include A, B, C. Key emerging trends in this space: X, Y, Z." + # === OPTIONAL: repo-local reputable source list === + # Copy standards/feature-ideation-sources.md from petry-projects/.github + # to .github/feature-ideation-sources.md and customise it. The reusable + # workflow defaults to that path, so you only need to uncomment and change + # sources_file below if you store the list somewhere else. + # sources_file: 'docs/feature-ideation-sources.md' focus_area: ${{ inputs.focus_area || '' }} research_depth: ${{ inputs.research_depth || 'standard' }} + dry_run: ${{ inputs.dry_run || false }} secrets: CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} From 63373067db12608296a4828047333612bdb512d5 Mon Sep 17 00:00:00 2001 From: Claude Date: Mon, 27 Apr 2026 18:52:52 -0700 Subject: [PATCH 2/2] retrigger: bump workflows to run checks