Repository navigation
Compliance: legacy-ruleset-main #132
Description
Compliance Finding
Category: rulesets
Severity: error
Check: legacy-ruleset-main
Detail
Legacy ruleset main (id 24886320) targets the default branch. Only pr-quality and code-quality are sanctioned; classic protect-branches / ad-hoc main rulesets are deprecated and must be migrated into the two sanctioned rulesets and removed (a duplicate ruleset is a second place every bypass actor must be kept in sync). Migrate before deleting — these required checks are not yet required by pr-quality or code-quality, so deleting this ruleset would drop them as merge gates: verify Add them to code-quality first, then delete this ruleset.
Standard Reference
standards/github-settings.md#repository-rulesets
Remediation
Please review the linked standard and bring this repository into compliance.
See the full standards documentation for implementation guidance.
This issue was automatically created by the weekly compliance audit.
Activity
don-petry commentedon Oct 19, 2026
Closed on the Maintainer's decision of 2026-10-19 (plan review, decision 4). This repo departs from the org's workflow and ruleset standards where
docs/decisions/0014-where-this-repo-departs-from-the-orgs-standards.mdsays why: one required check, no proof-of-concept workflows, no bypass actor onmain, and rulesets the design (§4.9, #62) sets itself. This report asks for something that decision declines or that the design forbids, so it serves no requirement here. The standards repo is asked to exclude combsmith/software-factory from the audit; if it cannot, the next report is labelled hands-off and left.