Repository navigation
Compliance: missing-dependency-audit.yml #118
Description
Compliance Finding
Category: ci-workflows
Severity: error
Check: missing-dependency-audit.yml
Detail
Required workflow dependency-audit.yml is missing
Standard Reference
standards/ci-standards.md#required-workflows
Remediation
Copy the relevant workflow template from standards/workflows/ verbatim — do not generate from scratch:
gh api repos/combsmith/.github/contents/standards/workflows/<template>.yml --jq '.content' | base64 -d > .github/workflows/<template>.ymlAvailable templates: agent-shield.yml, dev-lead.yml, dependabot-automerge.yml, dependabot-rebase.yml, dependency-audit.yml, feature-ideation.yml
This issue was automatically created by the weekly compliance audit.
Activity
don-petry commentedon Oct 19, 2026
Closed on the Maintainer's decision of 2026-10-19 (plan review, decision 4). This repo departs from the org's workflow and ruleset standards where
docs/decisions/0014-where-this-repo-departs-from-the-orgs-standards.mdsays why: one required check, no proof-of-concept workflows, no bypass actor onmain, and rulesets the design (§4.9, #62) sets itself. This report asks for something that decision declines or that the design forbids, so it serves no requirement here. The standards repo is asked to exclude combsmith/software-factory from the audit; if it cannot, the next report is labelled hands-off and left.