Skip to content

Compliance: check-suite-auto-trigger-347564 #227

Closed
#271
Closed
Compliance: check-suite-auto-trigger-347564#227
#271
Labels
compliance-auditAutomated compliance audit findingdev-leadFor dev-lead agent pickup

Description

@don-petry
don-petry
opened on May 26, 2026

Compliance Finding

Category: settings
Severity: error
Check: check-suite-auto-trigger-347564

Detail

CodeRabbit (347564) auto-trigger is enabled: GitHub creates a queued check suite on every push that is never completed, permanently blocking auto-merge. Run: bash scripts/apply-repo-settings.sh TalkTerm

Standard Reference

standards/github-settings.md

Remediation

Run scripts/apply-repo-settings.sh TalkTerm with a token that has admin access to the repository (requires a classic PAT with repo scope or equivalent):

GH_TOKEN=<admin-pat> bash scripts/apply-repo-settings.sh TalkTerm

This script applies all standard settings defined in standards/github-settings.md in one pass.
For a dry run to preview changes without applying: DRY_RUN=true GH_TOKEN=<admin-pat> bash scripts/apply-repo-settings.sh TalkTerm

This issue was automatically created by the weekly compliance audit.

Activity

  1. don-petry
    added
    compliance-auditAutomated compliance audit finding
    claude
    on May 26, 2026

  2. don-petry commented on May 29, 2026

    @don-petry
    don-petry
    on May 29, 2026
    ContributorAuthor

    Weekly Compliance Audit (2026-05-29)

    This finding is still open.

    Detail: CodeRabbit (347564) auto-trigger is enabled: GitHub creates a queued check suite on every push that is never completed, permanently blocking auto-merge. Run: bash scripts/apply-repo-settings.sh TalkTerm

    Standard: standards/github-settings.md

  3. don-petry commented on May 30, 2026

    @don-petry
    don-petry
    on May 30, 2026
    ContributorAuthor

    Weekly Compliance Audit (2026-05-30)

    This finding is still open.

    Detail: CodeRabbit (347564) auto-trigger is enabled: GitHub creates a queued check suite on every push that is never completed, permanently blocking auto-merge. Run: bash scripts/apply-repo-settings.sh TalkTerm

    Standard: standards/github-settings.md

  4. don-petry commented on May 30, 2026

    @don-petry
    don-petry
    on May 30, 2026
    ContributorAuthor

    @dev-lead

  5. don-petry commented on May 30, 2026

    @don-petry
    don-petry
    on May 30, 2026
    ContributorAuthor

    @dev-lead

  6. don-petry commented on May 30, 2026

    @don-petry
    don-petry
    on May 30, 2026
    ContributorAuthor

    @don-petry-dev-lead

  7. don-petry commented on Jun 5, 2026

    @don-petry
    don-petry
    on Jun 5, 2026
    ContributorAuthor

    Weekly Compliance Audit (2026-06-05)

    This finding is still open.

    Detail: CodeRabbit (347564) auto-trigger is enabled: GitHub creates a queued check suite on every push that is never completed, permanently blocking auto-merge. Run: bash scripts/apply-repo-settings.sh TalkTerm

    Standard: standards/github-settings.md

  8. don-petry
    added
    dev-leadFor dev-lead agent pickup
    and removed
    claude
    on Jun 6, 2026

  9. don-petry commented on Jun 6, 2026

    @don-petry
    don-petry
    on Jun 6, 2026
    ContributorAuthor

    Dev-Lead Implementation Plan

    Issue: #227 — Compliance: check-suite-auto-trigger-347564

    Scope

    Add a scheduled cron trigger to .github/workflows/apply-repo-settings.yml so the script runs regularly and prevents CodeRabbit (app 347564) check-suite auto-trigger settings from drifting back to enabled.

    Root Cause

    The apply-repo-settings.yml workflow only triggers on push to main (when specific files change) or workflow_dispatch. If the GitHub setting drifts back to enabled between those events, the compliance check fails. A schedule ensures it is regularly re-applied.

    Implementation Checklist

    • Add schedule cron trigger to .github/workflows/apply-repo-settings.yml (weekly on Mondays)

    Tests to Write

    N/A — Pure workflow configuration change with no observable behavioral change in code. Exception applies per TDD rules: "For pure documentation, configuration, or behavior-preserving refactors with no observable behavioral change, skip this phase."

    Test Command

    bash .dev-lead/scripts/dev-lead-lint.sh (shellcheck on scripts/**/*.sh)

  10. don-petry
    added
    dev-leadFor dev-lead agent pickup
    and removed
    dev-leadFor dev-lead agent pickup
    on Jun 8, 2026

  11. 10 remaining items

  12. don-petry
    added 12 commits that reference this issue on Jun 20, 2026

    feat: implement issue #227 — Compliance: check-suite-auto-trigger-347564

    a821343

    feat: implement issue #227 — Compliance: check-suite-auto-trigger-347564

    727a82d

    feat: implement issue #227 — Compliance: check-suite-auto-trigger-347564

    b5dcd81

    feat: implement issue #227 — Compliance: check-suite-auto-trigger-347564

    90d28b4

    feat: implement issue #227 — Compliance: check-suite-auto-trigger-347…

    40cff14

    feat: implement issue #227 — Compliance: check-suite-auto-trigger-347…

    d1339f8

    feat: implement issue #227 — Compliance: check-suite-auto-trigger-347…

    4995807

    feat: implement issue #227 — Compliance: check-suite-auto-trigger-347…

    bbc313c

    feat: implement issue #227 — Compliance: check-suite-auto-trigger-347…

    39d41db

    feat: implement issue #227 — Compliance: check-suite-auto-trigger-347…

    a2a687d

    feat: implement issue #227 — Compliance: check-suite-auto-trigger-347…

    33fb76b

    feat: implement issue #227 — Compliance: check-suite-auto-trigger-347…

    b5cbadf
  13. don-petry
    added 3 commits that reference this issue on Aug 31, 2026

    feat: implement issue #227 — Compliance: check-suite-auto-trigger-347…

    a6ccd55

    feat: implement issue #227 — Compliance: check-suite-auto-trigger-347…

    02ad9e0

    feat: implement issue #227 — Compliance: check-suite-auto-trigger-347…

    8de4a1b
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    compliance-auditAutomated compliance audit findingdev-leadFor dev-lead agent pickup

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions