Repository navigation
Compliance: non-stub-dependabot-rebase.yml #179
Description
Compliance Finding
Category: ci-workflows
Severity: error
Check: non-stub-dependabot-rebase.yml
Detail
Centralized workflow dependabot-rebase.yml references the reusable but is not pinned to @v1 (org standard). Replace with the canonical stub from standards/workflows/dependabot-rebase.yml which delegates to petry-projects/.github/.github/workflows/dependabot-rebase-reusable.yml@v1.
Standard Reference
standards/ci-standards.md#centralization-tiers
Remediation
Please review the linked standard and bring this repository into compliance.
See the full standards documentation for implementation guidance.
This issue was automatically created by the weekly compliance audit.
Activity
don-petry commentedon May 8, 2026
Claude finished @don-petry's task in 1m 38s —— View job •
claude/issue-179-20260508-1419• Create PR ➔Fixing compliance issue:
dependabot-rebase.ymlpetry-projects/.github/standards/workflows/dependabot-rebase.ymldependabot-rebase.ymlin this repo@petry-projects/org-leads)The fix syncs
.github/workflows/dependabot-rebase.ymlwith the canonical org stub. The only functional change is adding the missingscheduletrigger (0 */4 * * *) that serves as a 4-hour safety net when no pushes tomainoccur. Two comment lines were also updated to match the standard verbatim. Theuses:SHA pin, concurrency group, secrets block, and permissions are all unchanged.don-petry commentedon May 11, 2026
Weekly Compliance Audit (2026-05-11)
This finding is still open.
Detail: Centralized workflow
dependabot-rebase.ymlreferences the reusable but is not pinned to@v1(org standard). Replace with the canonical stub fromstandards/workflows/dependabot-rebase.ymlwhich delegates topetry-projects/.github/.github/workflows/dependabot-rebase-reusable.yml@v1.Standard: standards/ci-standards.md#centralization-tiers
don-petry commentedon May 12, 2026
Weekly Compliance Audit (2026-05-12)
This finding is still open.
Detail: Centralized workflow
dependabot-rebase.ymlreferences the reusable but is not pinned to@v1(org standard). Replace with the canonical stub fromstandards/workflows/dependabot-rebase.ymlwhich delegates topetry-projects/.github/.github/workflows/dependabot-rebase-reusable.yml@v1.Standard: standards/ci-standards.md#centralization-tiers
don-petry commentedon May 12, 2026
Weekly Compliance Audit (2026-05-12)
This finding is still open.
Detail: Centralized workflow
dependabot-rebase.ymlreferences the reusable but is not pinned to@v1(org standard). Replace with the canonical stub fromstandards/workflows/dependabot-rebase.ymlwhich delegates topetry-projects/.github/.github/workflows/dependabot-rebase-reusable.yml@v1.Standard: standards/ci-standards.md#centralization-tiers
don-petry commentedon May 12, 2026
Weekly Compliance Audit (2026-05-12)
This finding is still open.
Detail: Centralized workflow
dependabot-rebase.ymlreferences the reusable but is not pinned to@v1(org standard). Replace with the canonical stub fromstandards/workflows/dependabot-rebase.ymlwhich delegates topetry-projects/.github/.github/workflows/dependabot-rebase-reusable.yml@v1.Standard: standards/ci-standards.md#centralization-tiers
don-petry commentedon May 12, 2026
Weekly Compliance Audit (2026-05-12)
This finding is still open.
Detail: Centralized workflow
dependabot-rebase.ymlreferences the reusable but is not pinned to@v1(org standard). Replace with the canonical stub fromstandards/workflows/dependabot-rebase.ymlwhich delegates topetry-projects/.github/.github/workflows/dependabot-rebase-reusable.yml@v1.Standard: standards/ci-standards.md#centralization-tiers
don-petry commentedon May 12, 2026
Weekly Compliance Audit (2026-05-12)
This finding is still open.
Detail: Centralized workflow
dependabot-rebase.ymlreferences the reusable but is not pinned to@v1(org standard). Replace with the canonical stub fromstandards/workflows/dependabot-rebase.ymlwhich delegates topetry-projects/.github/.github/workflows/dependabot-rebase-reusable.yml@v1.Standard: standards/ci-standards.md#centralization-tiers
don-petry commentedon May 13, 2026
Weekly Compliance Audit (2026-05-13)
This finding is still open.
Detail: Centralized workflow
dependabot-rebase.ymlreferences the reusable but is not pinned to@v1(org standard). Replace with the canonical stub fromstandards/workflows/dependabot-rebase.ymlwhich delegates topetry-projects/.github/.github/workflows/dependabot-rebase-reusable.yml@v1.Standard: standards/ci-standards.md#centralization-tiers
don-petry commentedon May 15, 2026
Weekly Compliance Audit (2026-05-15)
This finding is still open.
Detail: Centralized workflow
dependabot-rebase.ymlreferences the reusable but is not pinned to@v1(org standard). Replace with the canonical stub fromstandards/workflows/dependabot-rebase.ymlwhich delegates topetry-projects/.github/.github/workflows/dependabot-rebase-reusable.yml@v1.Standard: standards/ci-standards.md#centralization-tiers
feat: implement issue #179 — Compliance: non-stub-dependabot-rebase.y…
feat: implement issue #179 — Compliance: non-stub-dependabot-rebase.y…