Commit graph

11 commits

Author SHA1 Message Date
Adam Moussa
e431c74f71
Merge pull request #5 from Sea-Haven-Industries/feature/add-pr-trigger
Add pull_request trigger for required workflow ruleset
2026-05-06 20:08:05 -04:00
Adam Moussa
b305a4a887 Add pull_request trigger for required workflow ruleset
Required workflows via rulesets need a pull_request trigger directly.
Falls back to org secret when not called via workflow_call.
2026-05-06 20:01:41 -04:00
Adam Moussa
0da9b01905
Merge pull request #4 from Sea-Haven-Industries/feature/add-id-token-permission
Add id-token permission for claude-code-action
2026-05-06 19:45:00 -04:00
Adam Moussa
0889d0f4e4 Add id-token: write permission for claude-code-action
The action requires OIDC token access even when using an API key directly.
Also updates the rollout script template for future repos.
2026-05-06 19:44:35 -04:00
Adam Moussa
2323416ba8
Merge pull request #3 from Sea-Haven-Industries/feature/fix-workflow-inputs
Fix claude-code-action input names
2026-05-06 19:42:04 -04:00
Adam Moussa
6ab1889bb8 Fix claude-code-action input names
direct_prompt and review_comments are not valid inputs for
claude-code-action@v1. Use prompt instead.
2026-05-06 19:40:31 -04:00
Adam Moussa
4a1d53aca2
Merge pull request #2 from Sea-Haven-Industries/feature/fix-rollout-script
Fix false-positive existence check in rollout script
2026-05-06 18:09:55 -04:00
Adam Moussa
b7502a3bf8 Fix false-positive existence check in rollout script
gh api returns error JSON on 404, which made the variable non-empty.
Check exit code instead of output content.
2026-05-06 18:07:29 -04:00
Adam Moussa
5d3aed93c3
Merge pull request #1 from Sea-Haven-Industries/feature/exclude-shoc-repos
Exclude shoc-frontend-new and shoc-backend from workflows
2026-05-06 18:00:48 -04:00
Adam Moussa
0f166a5a6f Exclude shoc-frontend-new and shoc-backend from review and audit workflows 2026-05-06 17:34:29 -04:00
Adam Moussa
e24004415e Add Claude Code review and compliance audit workflows
- Reusable PR review workflow (repos call via thin wrapper)
- Weekly compliance audit across all org repos
- Rollout script to push wrapper workflow to all repos
- Uses GitHub App tokens for cross-repo auth (no PAT rotation needed)
2026-05-06 15:10:48 -04:00