Compliance: non-stub-dependabot-rebase.yml

[don-petry]

Compliance Finding

Category: ci-workflows
Severity: error
Check: non-stub-dependabot-rebase.yml

Detail

Centralized workflow dependabot-rebase.yml references the reusable but is not pinned to @v1 (org standard). Replace with the canonical stub from standards/workflows/dependabot-rebase.yml which delegates to petry-projects/.github/.github/workflows/dependabot-rebase-reusable.yml@v1.

Standard Reference

standards/ci-standards.md#centralization-tiers

Remediation

Please review the linked standard and bring this repository into compliance.

See the full standards documentation for implementation guidance.

---

This issue was automatically created by the weekly compliance audit.

[don-petry]

Claude finished @don-petry's task in 1m 44s —— View job • claude/issue-256-20260508-1427 • Create PR ➔

---

Fixing Compliance Issue: dependabot-rebase.yml

• Analyze issue and gather context
• Fetch canonical template from petry-projects/.github/standards/workflows/dependabot-rebase.yml
• Review current dependabot-rebase.yml — missing schedule trigger and stale comment text
• Replace workflow file with canonical stub (verbatim copy)
• Commit and push changes
• Create pull request — petry-projects/google-app-scripts#260
• Self-review PR — single file change, diff matches canonical stub exactly, no issues found
• Tagged @petry-projects/org-leads on the PR

Summary

The dependabot-rebase.yml was missing the schedule trigger (0 */4 * * *) required by the org standard. I replaced the file with the verbatim canonical stub from petry-projects/.github/standards/workflows/dependabot-rebase.yml. Changes:

• Added schedule: cron: '0 */4 * * *' — safety net when no push to main triggers the chain
• Updated comment text to document the schedule trigger
• Fixed APP_ID comment to include contents:write

| View PR #260

[don-petry]

Weekly Compliance Audit (2026-05-11)

This finding is still open.

Detail: Centralized workflow dependabot-rebase.yml references the reusable but is not pinned to @v1 (org standard). Replace with the canonical stub from standards/workflows/dependabot-rebase.yml which delegates to petry-projects/.github/.github/workflows/dependabot-rebase-reusable.yml@v1.

Standard: standards/ci-standards.md#centralization-tiers

[don-petry]

Weekly Compliance Audit (2026-05-12)

This finding is still open.

Detail: Centralized workflow dependabot-rebase.yml references the reusable but is not pinned to @v1 (org standard). Replace with the canonical stub from standards/workflows/dependabot-rebase.yml which delegates to petry-projects/.github/.github/workflows/dependabot-rebase-reusable.yml@v1.

Standard: standards/ci-standards.md#centralization-tiers

[don-petry]

Weekly Compliance Audit (2026-05-12)

This finding is still open.

Detail: Centralized workflow dependabot-rebase.yml references the reusable but is not pinned to @v1 (org standard). Replace with the canonical stub from standards/workflows/dependabot-rebase.yml which delegates to petry-projects/.github/.github/workflows/dependabot-rebase-reusable.yml@v1.

Standard: standards/ci-standards.md#centralization-tiers

[don-petry]

Weekly Compliance Audit (2026-05-12)

This finding is still open.

Detail: Centralized workflow dependabot-rebase.yml references the reusable but is not pinned to @v1 (org standard). Replace with the canonical stub from standards/workflows/dependabot-rebase.yml which delegates to petry-projects/.github/.github/workflows/dependabot-rebase-reusable.yml@v1.

Standard: standards/ci-standards.md#centralization-tiers

[don-petry]

Weekly Compliance Audit (2026-05-12)

This finding is still open.

Detail: Centralized workflow dependabot-rebase.yml references the reusable but is not pinned to @v1 (org standard). Replace with the canonical stub from standards/workflows/dependabot-rebase.yml which delegates to petry-projects/.github/.github/workflows/dependabot-rebase-reusable.yml@v1.

Standard: standards/ci-standards.md#centralization-tiers

[don-petry]

Weekly Compliance Audit (2026-05-12)

This finding is still open.

Detail: Centralized workflow dependabot-rebase.yml references the reusable but is not pinned to @v1 (org standard). Replace with the canonical stub from standards/workflows/dependabot-rebase.yml which delegates to petry-projects/.github/.github/workflows/dependabot-rebase-reusable.yml@v1.

Standard: standards/ci-standards.md#centralization-tiers

[don-petry]

Weekly Compliance Audit (2026-05-13)

This finding is still open.

Detail: Centralized workflow dependabot-rebase.yml references the reusable but is not pinned to @v1 (org standard). Replace with the canonical stub from standards/workflows/dependabot-rebase.yml which delegates to petry-projects/.github/.github/workflows/dependabot-rebase-reusable.yml@v1.

Standard: standards/ci-standards.md#centralization-tiers

[don-petry]

Weekly Compliance Audit (2026-05-15)

This finding is still open.

Detail: Centralized workflow dependabot-rebase.yml references the reusable but is not pinned to @v1 (org standard). Replace with the canonical stub from standards/workflows/dependabot-rebase.yml which delegates to petry-projects/.github/.github/workflows/dependabot-rebase-reusable.yml@v1.

Standard: standards/ci-standards.md#centralization-tiers