fix(standards): rename GITLEAKS_SHA256→GITLEAKS_CHECKSUM, add .gitleaks.toml template#167

Open

don-petry wants to merge 55 commits into

mainfrom

fix/gitleaks-standard-checksum-and-toml

Commits on Jun 11, 2026

Add multi-agent isolation strategy using git worktrees (#2)

authored and
donpetry-bot
committed
feat: add weekly compliance audit workflow (#12)

authored and
donpetry-bot
committed
chore: run compliance audit every Friday at noon UTC

authored and
donpetry-bot
committed
feat: add full CI pipeline for .github repo (#15)

authored and
donpetry-bot
committed
feat: extend compliance audit with CI/automation health survey (#13)

authored and
donpetry-bot
committed
chore(deps): Bump anthropics/claude-code-action from 1.0.83 to 1.0.89 (#22)

dependabot[bot]
authored and
donpetry-bot
committed
feat: split Claude workflow into interactive + issue automation jobs (#54)

authored and
donpetry-bot
committed
feat: require GitHub Discussions on all repos (#53)

authored and
donpetry-bot
committed
fix: grant claude-issue job tools to create PRs and check CI (#55)

authored and
donpetry-bot
committed
fix: add concurrency guard and comment tools to claude-issue job

authored and
donpetry-bot
committed
fix: auto-create required labels during compliance audit (#67)

authored and
donpetry-bot
committed
feat: reusable Claude Code workflow with workflows write permission (#77)

authored and
donpetry-bot
committed
Add Feature Ideation workflow as standard for BMAD-enabled repos (#81)

authored and
donpetry-bot
committed
fix: pass GH_PAT_WORKFLOWS to actions/checkout so git push uses workflow-scoped token (#82)

don-petry
authored and
donpetry-bot
committed
fix: encode compliance-fix learnings into standards and Claude prompt (#86)

don-petry
authored and
donpetry-bot
committed
feat(security): add codeql.yml for SAST scanning (#100)

authored and
donpetry-bot
committed
Replace per-repo CodeQL workflows with GitHub default setup (#103)

authored and
donpetry-bot
committed
Auto-respond to all PR review comments without @claude mention (#123)

authored and
donpetry-bot
committed
fix(ci): move Dependabot exclusion to job-level if in claude-code-reusable.yml (#136)

authored and
donpetry-bot
committed
chore(deps): Bump anthropics/claude-code-action from 1.0.89 to 1.0.93 (#128)

authored and
donpetry-bot
committed
feat(claude): trigger Claude to fix CI failures on PRs (#148)

authored and
donpetry-bot
committed
feat(feature-ideation): add curated reputable source list for Mary (#102)

authored and
donpetry-bot
committed
fix: correct reusable workflow path syntax (remove duplicate .github) (#154)

authored and
donpetry-bot
committed
fix(claude-ci-fix): resolve PR via API when check_run payload is empty

don-petry
authored and
donpetry-bot
committed
fix: update auto-rebase template SHA to version containing the reusable workflow

don-petry
authored and
donpetry-bot
committed
docs: document OIDC immutability constraint and exempt claude.yml from SHA pinning (#159)

authored and
donpetry-bot
committed
fix(standards): update gitleaks job to use GITLEAKS_CHECKSUM and require .gitleaks.toml

don-petry
authored and
donpetry-bot
committed
fix(standards): add canonical .gitleaks.toml template with _bmad/ allowlist

don-petry
authored and
donpetry-bot
committed
fix: restore double .github path in agent-shield and claude reusable refs

authored and
donpetry-bot
committed
fix: add dedup pre-flight to claude-issue to prevent duplicate PRs (#182)

authored and
donpetry-bot
committed
ci: trigger CI with clean check-suite preferences

don-petry
authored and
donpetry-bot
committed
feat: trigger Claude on CodeRabbit and Copilot review comments (#198)

authored and
donpetry-bot
committed
test: trigger re-review to validate Claude bot-comment workflow

don-petry
authored and
donpetry-bot
committed
fix: address Copilot and CodeRabbit review comments

authored and
donpetry-bot
committed
fix(push-protection): broaden has_binary detection to handle multiline run blocks

authored and
donpetry-bot
committed
chore(deps): Bump anthropics/claude-code-action from 1.0.97 to 1.0.115 (#150)

authored and
donpetry-bot
committed
chore(deps): Bump anthropics/claude-code-action from 1.0.115 to 1.0.119 (#226)

authored and
donpetry-bot
committed
fix(push-protection): collapse newlines before binary-pattern grep

authored and
donpetry-bot
committed
chore: deprecate pr-review-agent — remove all traces

authored and
donpetry-bot
committed
feat: make pr-review-mention an org standard (#237)

authored and
donpetry-bot
committed
fix(claude): add copilot-pull-request-reviewer and gemini-code-assist to bot allow list (#238)

authored and
donpetry-bot
committed
fix(feature-ideation): address Copilot + CodeRabbit review on PR #85 (18 fixes, 17 new tests) (#85)

authored and
donpetry-bot
committed
feat(claude): add claude-fix-review-comments job for bot review responses (#245)

authored and
donpetry-bot
committed
feat(auto-rebase): add claude-rebase agentic fallback for merge conflicts (#281)

authored and
donpetry-bot
committed
fix(bot): address bot feedback [skip ci-relay]
donpetry-bot
committed
chore: apply manual instructions [skip ci-relay]
donpetry-bot
committed
chore: apply manual instructions [skip ci-relay]
donpetry-bot
committed
fix(ci): auto-fix for SonarCloud Code Analysis [skip ci-relay]
donpetry-bot
committed
Merge branch 'main' into fix/gitleaks-standard-checksum-and-toml
don-petry
authored
Merge branch 'main' into fix/gitleaks-standard-checksum-and-toml
don-petry
authored
Merge branch 'main' into fix/gitleaks-standard-checksum-and-toml
don-petry
authored
Merge branch 'main' into fix/gitleaks-standard-checksum-and-toml
don-petry
authored
Merge branch 'main' into fix/gitleaks-standard-checksum-and-toml
don-petry
authored
Merge branch 'main' into fix/gitleaks-standard-checksum-and-toml
don-petry
authored
Merge branch 'main' into fix/gitleaks-standard-checksum-and-toml
don-petry
authored