chore: seed org baseline file scaffold by don-petry · Pull Request #136 · combsmith/repo-template

don-petry · 2026-08-07T01:22:43Z

Seeds the org baseline scaffold (workflow stubs pinned to published channel tags + root/baseline files) from petry-projects/.github standards/. Generated by seed-repo-template.sh (#966).

Summary by CodeRabbit

Security
- Strengthened protection against accidentally committing secrets, credentials, tokens, certificates, infrastructure state, and other sensitive files.
- Preserved safe handling for public templates and encrypted configuration variants.
Chores
- Improved automation reliability by clarifying pull request eligibility and explicitly managing secrets.
- Updated tooling installation for broader environment compatibility, including fallback test execution when coverage tooling is unavailable.
- Refined automation configuration without changing existing permissions or review behavior.

chatgpt-codex-connector · 2026-08-07T01:22:49Z

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

codeant-ai · 2026-08-07T01:22:49Z

🤖 CodeAnt AI — Review Status

Status	Commit	Started (UTC)	Finished (UTC)
✅ Reviewed your PR	`8d18c12`	Aug 07, 2026 · 01:22	01:23

codeant-ai · 2026-08-07T01:22:50Z

Thanks for using CodeAnt! 🎉

We're free for open-source projects. if you're enjoying it, help us grow by sharing.

Share on X ·
Reddit ·
LinkedIn

gemini-code-assist · 2026-08-07T01:22:51Z

Note

Gemini is unable to generate a review for this pull request due to the file types involved not being currently supported.

qodo-code-review · 2026-08-07T01:22:53Z

ⓘ Qodo reviews are paused because your trial has ended. Ask your workspace admin to add credits to resume reviews. Manage billing

* seed .github/workflows/agent-shield.yml * seed .github/workflows/auto-rebase.yml * seed .github/workflows/ci.yml * seed .github/workflows/copilot-setup-steps.yml * seed .github/workflows/dependabot-automerge.yml * seed .github/workflows/dependabot-rebase.yml * seed .github/workflows/dependency-audit.yml * seed .github/workflows/dev-lead.yml * seed .github/workflows/pr-review-mention.yml * seed .github/workflows/sonarcloud.yml * seed AGENTS.md * seed CLAUDE.md * seed .github/CODEOWNERS * seed .github/dependabot.yml * seed .gitleaks.toml * seed sonar-project.properties * seed .gitignore * seed LICENSE * seed SECURITY.md * seed README.md * seed BOOTSTRAP.md * seed .github/workflows/agent-shield.yml * seed .github/workflows/auto-rebase.yml * seed .github/workflows/ci.yml * seed .github/workflows/copilot-setup-steps.yml * seed .github/workflows/dependabot-automerge.yml * seed .github/workflows/dependabot-rebase.yml * seed .github/workflows/dependency-audit.yml * seed .github/workflows/dev-lead.yml * seed .github/workflows/pr-review-mention.yml * seed .github/workflows/sonarcloud.yml * seed AGENTS.md * seed CLAUDE.md * seed .github/CODEOWNERS * seed .github/dependabot.yml * seed .gitleaks.toml * seed sonar-project.properties * seed .gitignore * seed LICENSE * seed SECURITY.md * seed README.md * seed BOOTSTRAP.md * seed .github/workflows/agent-shield.yml * seed .github/workflows/auto-rebase.yml * seed .github/workflows/ci.yml * seed .github/workflows/copilot-setup-steps.yml * seed .github/workflows/dependabot-automerge.yml * seed .github/workflows/dependabot-rebase.yml * seed .github/workflows/dependency-audit.yml * seed .github/workflows/dev-lead.yml * seed .github/workflows/pr-review-mention.yml * seed .github/workflows/sonarcloud.yml * seed AGENTS.md * seed CLAUDE.md * seed .github/CODEOWNERS * seed .github/dependabot.yml * seed .gitleaks.toml * seed sonar-project.properties * seed .gitignore * seed LICENSE * seed SECURITY.md * seed README.md * seed BOOTSTRAP.md * seed .github/workflows/agent-shield.yml * seed .github/workflows/auto-rebase.yml * seed .github/workflows/ci.yml * seed .github/workflows/copilot-setup-steps.yml * seed .github/workflows/dependabot-automerge.yml * seed .github/workflows/dependabot-rebase.yml * seed .github/workflows/dependency-audit.yml * seed .github/workflows/dev-lead.yml * seed .github/workflows/pr-review-mention.yml * seed .github/workflows/sonarcloud.yml * seed AGENTS.md * seed CLAUDE.md * seed .github/CODEOWNERS * seed .github/dependabot.yml * seed .gitleaks.toml * seed sonar-project.properties * seed .gitignore * seed LICENSE * seed SECURITY.md * seed README.md * seed BOOTSTRAP.md * fix(bot): address bot feedback [skip ci-relay] * fix(reviews): address review comments [skip ci-relay] * seed .github/workflows/agent-shield.yml * seed .github/workflows/auto-rebase.yml * seed .github/workflows/ci.yml * seed .github/workflows/copilot-setup-steps.yml * seed .github/workflows/dependabot-automerge.yml * seed .github/workflows/dependabot-rebase.yml * seed .github/workflows/dependency-audit.yml * seed .github/workflows/dev-lead.yml * seed .github/workflows/pr-review-mention.yml * seed .github/workflows/sonarcloud.yml * seed AGENTS.md * seed CLAUDE.md * seed .github/CODEOWNERS * seed .github/dependabot.yml * seed .gitleaks.toml * seed sonar-project.properties * seed .gitignore * seed LICENSE * seed SECURITY.md * seed README.md * seed BOOTSTRAP.md * chore: dev-lead update (review-changes) [skip ci-relay] * fix(ci): auto-fix for SonarCloud Code Analysis [skip ci-relay] * fix(bot): address bot feedback [skip ci-relay] * fix(ci): graceful kcov fallback for Ubuntu 24.04+ .github/workflows/ci.yml: Split bats and kcov installation. When kcov is unavailable in apt (Ubuntu 24.04+), the coverage job falls back to running bats directly — tests still verify correctness, keeping the required check green. tests/gitignore-baseline.bats: Update GITIGNORE_L1_SHA256 hash to 052cc5b9dfce4b01f248f534caa6ef8711db6f13d00ffe9ecb3e6a0fc2a52206 to reflect the new .gitignore L1 baseline that includes *.credentials.* and *.secrets.* patterns added per CodeRabbit feedback. Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com> * chore: dev-lead update (review-changes) [skip ci-relay] * seed .github/workflows/agent-shield.yml * seed .github/workflows/auto-rebase.yml * seed .github/workflows/ci.yml * seed .github/workflows/copilot-setup-steps.yml * seed .github/workflows/dependabot-automerge.yml * seed .github/workflows/dependabot-rebase.yml * seed .github/workflows/dependency-audit.yml * seed .github/workflows/dev-lead.yml * seed .github/workflows/pr-review-mention.yml * seed .github/workflows/sonarcloud.yml * seed AGENTS.md * seed CLAUDE.md * seed .github/CODEOWNERS * seed .github/dependabot.yml * seed .gitleaks.toml * seed sonar-project.properties * seed .gitignore * seed LICENSE * seed SECURITY.md * seed README.md * seed BOOTSTRAP.md * seed .github/workflows/agent-shield.yml * seed .github/workflows/auto-rebase.yml * seed .github/workflows/ci.yml * seed .github/workflows/copilot-setup-steps.yml * seed .github/workflows/dependabot-automerge.yml * seed .github/workflows/dependabot-rebase.yml * seed .github/workflows/dependency-audit.yml * seed .github/workflows/dev-lead.yml * seed .github/workflows/pr-review-mention.yml * seed .github/workflows/sonarcloud.yml * seed AGENTS.md * seed CLAUDE.md * seed .github/CODEOWNERS * seed .github/dependabot.yml * seed .gitleaks.toml * seed sonar-project.properties * seed .gitignore * seed LICENSE * seed SECURITY.md * seed README.md * seed BOOTSTRAP.md * seed .github/workflows/agent-shield.yml * seed .github/workflows/auto-rebase.yml * seed .github/workflows/ci.yml * seed .github/workflows/copilot-setup-steps.yml * seed .github/workflows/dependabot-automerge.yml * seed .github/workflows/dependabot-rebase.yml * seed .github/workflows/dependency-audit.yml * seed .github/workflows/dev-lead.yml * seed .github/workflows/pr-review-mention.yml * seed .github/workflows/sonarcloud.yml * seed AGENTS.md * seed CLAUDE.md * seed .github/CODEOWNERS * seed .github/dependabot.yml * seed .gitleaks.toml * seed sonar-project.properties * seed .gitignore * seed LICENSE * seed SECURITY.md * seed README.md * seed BOOTSTRAP.md --------- Co-authored-by: donpetry-bot <281750570+donpetry-bot@users.noreply.github.com> Co-authored-by: Claude Haiku 4.5 <noreply@anthropic.com>

don-petry added 21 commits August 7, 2026 01:22

seed .github/workflows/agent-shield.yml

9cb07da

seed .github/workflows/auto-rebase.yml

14aa6ab

seed .github/workflows/ci.yml

598e4cc

seed .github/workflows/copilot-setup-steps.yml

ba93263

seed .github/workflows/dependabot-automerge.yml

63d4ff2

seed .github/workflows/dependabot-rebase.yml

6926425

seed .github/workflows/dependency-audit.yml

1019978

seed .github/workflows/dev-lead.yml

2d9b4bd

seed .github/workflows/pr-review-mention.yml

55b35c9

seed .github/workflows/sonarcloud.yml

b21b0fe

seed AGENTS.md

67daf05

seed CLAUDE.md

6a44be7

seed .github/CODEOWNERS

72d702f

seed .github/dependabot.yml

4cfbbde

seed .gitleaks.toml

54093d2

seed sonar-project.properties

3fb9743

seed .gitignore

9008c36

seed LICENSE

4a85332

seed SECURITY.md

b43244c

seed README.md

6805f8b

seed BOOTSTRAP.md

8d18c12

don-petry added 4 commits August 7, 2026 01:29

seed .github/workflows/agent-shield.yml

63b0690

seed .github/workflows/auto-rebase.yml

01e15af

seed .github/workflows/ci.yml

a39bd63

seed .github/workflows/copilot-setup-steps.yml

734eb96

github-actions Bot mentioned this pull request Aug 10, 2026

📊 Token Cost Observatory — Weekly Report combsmith/.github-private#464

Open

Navigation Menu

Repository navigation

chore: seed org baseline file scaffold - #136

chore: seed org baseline file scaffold#136
don-petry merged 175 commits into
mainfrom
seed-scaffold/2026-08-07

don-petry commented Aug 7, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

chatgpt-codex-connector Bot commented Aug 7, 2026

Uh oh!

codeant-ai Bot commented Aug 7, 2026 •

edited

Loading

Uh oh!

codeant-ai Bot commented Aug 7, 2026

Uh oh!

gemini-code-assist Bot commented Aug 7, 2026

Uh oh!

qodo-code-review Bot commented Aug 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

don-petry commented Aug 7, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary by CodeRabbit

Uh oh!

chatgpt-codex-connector Bot commented Aug 7, 2026

Uh oh!

codeant-ai Bot commented Aug 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🤖 CodeAnt AI — Review Status

Uh oh!

codeant-ai Bot commented Aug 7, 2026

Thanks for using CodeAnt! 🎉

Uh oh!

gemini-code-assist Bot commented Aug 7, 2026

Uh oh!

qodo-code-review Bot commented Aug 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

don-petry commented Aug 7, 2026 •

edited by coderabbitai Bot

Loading

codeant-ai Bot commented Aug 7, 2026 •

edited

Loading