From df954d1b61f0fbf1bb52612cb45351e9e57f4942 Mon Sep 17 00:00:00 2001 From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com> Date: Tue, 7 Apr 2026 17:33:44 +0000 Subject: [PATCH] feat: add agent-shield.yml compliance workflow Adds the required Agent Shield workflow as a thin caller that delegates to the org-level reusable workflow. Resolves the compliance finding for missing-agent-shield.yml. Closes #57 Co-authored-by: don-petry --- .github/workflows/agent-shield.yml | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 .github/workflows/agent-shield.yml diff --git a/.github/workflows/agent-shield.yml b/.github/workflows/agent-shield.yml new file mode 100644 index 00000000..ab29ac82 --- /dev/null +++ b/.github/workflows/agent-shield.yml @@ -0,0 +1,21 @@ +# Agent Shield — thin caller that delegates to the org-level reusable workflow. +# All logic is maintained centrally in agent-shield-reusable.yml. +# Standard: https://github.com/petry-projects/.github/blob/main/standards/ci-standards.md#required-workflows +name: Agent Shield + +on: + pull_request: + branches: [main] + types: [opened, reopened, synchronize] + push: + branches: [main] + +permissions: {} + +jobs: + agent-shield: + uses: petry-projects/.github/.github/workflows/agent-shield-reusable.yml@main + secrets: inherit + permissions: + contents: read + pull-requests: read