Repository navigation

Compliance: missing-security-label #54

Closed

Labels

compliance-audit

opened

Compliance Finding

Category: dependabot
Severity: warning
Check: missing-security-label

Detail

Dependabot config missing security label on updates

Standard Reference

standards/dependabot-policy.md#policy

Remediation

Please review the linked standard and bring this repository into compliance.

See the full standards documentation for implementation guidance.

This issue was automatically created by the weekly compliance audit.

don-petry
added
claude

compliance-auditAutomated compliance audit finding
on May 8, 2026
don-petry commented on May 8, 2026
don-petry
on May 8, 2026
CollaboratorAuthor
Claude finished @don-petry's task in 2m 50s —— View job • claude/issue-54-20260508-1409 • Create PR ➔

Compliance fix complete

Check for existing open PRs

Read CLAUDE.md and gather context

Read existing dependabot config (none at root)

Read dependabot standards

Create .github/dependabot.yml with security label

security label already exists in repo

Commit and push changes

Create PR

Created .github/dependabot.yml per the dependabot policy standard:

github-actions ecosystem (required for all repos with workflows)

security and dependencies labels on all Dependabot PRs

open-pull-requests-limit: 10 for weekly GitHub Actions version updates

PR: #81
don-petry commented on May 11, 2026
don-petry
on May 11, 2026
CollaboratorAuthor
Weekly Compliance Audit (2026-05-11)

This finding is still open.

Detail: Dependabot config missing security label on updates

Standard: standards/dependabot-policy.md#policy
don-petry commented on May 12, 2026
don-petry
on May 12, 2026
CollaboratorAuthor
Weekly Compliance Audit (2026-05-12)

This finding is still open.

Detail: Dependabot config missing security label on updates

Standard: standards/dependabot-policy.md#policy
don-petry commented on May 12, 2026
don-petry
on May 12, 2026
CollaboratorAuthor
Weekly Compliance Audit (2026-05-12)

This finding is still open.

Detail: Dependabot config missing security label on updates

Standard: standards/dependabot-policy.md#policy
don-petry commented on May 12, 2026
don-petry
on May 12, 2026
CollaboratorAuthor
Weekly Compliance Audit (2026-05-12)

This finding is still open.

Detail: Dependabot config missing security label on updates

Standard: standards/dependabot-policy.md#policy
don-petry commented on May 12, 2026
don-petry
on May 12, 2026
CollaboratorAuthor
Weekly Compliance Audit (2026-05-12)

This finding is still open.

Detail: Dependabot config missing security label on updates

Standard: standards/dependabot-policy.md#policy
don-petry commented on May 12, 2026
don-petry
on May 12, 2026
CollaboratorAuthor
Weekly Compliance Audit (2026-05-12)

This finding is still open.

Detail: Dependabot config missing security label on updates

Standard: standards/dependabot-policy.md#policy
don-petry commented on May 13, 2026
don-petry
on May 13, 2026
CollaboratorAuthor
Weekly Compliance Audit (2026-05-13)

This finding is still open.

Detail: Dependabot config missing security label on updates

Standard: standards/dependabot-policy.md#policy
don-petry commented on May 15, 2026
don-petry
on May 15, 2026
CollaboratorAuthor
Resolved! This check is now passing as of 2026-05-15. Closing automatically.
don-petry
closed this as completed on May 15, 2026

to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

Labels

compliance-audit

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests