adam/.github
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/.github.git synced 2026-09-30 04:43:12 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
Organization-level GitHub configuration — Claude Code review and compliance workflows
4 commits 4 branches 21 tags 2.4 MiB
Find a file
Adam Moussa b7502a3bf8 Fix false-positive existence check in rollout script 
gh api returns error JSON on 404, which made the variable non-empty.
Check exit code instead of output content.
2026-05-06 18:07:29 -04:00
.github/workflows Exclude shoc-frontend-new and shoc-backend from review and audit workflows 2026-05-06 17:34:29 -04:00
scripts Fix false-positive existence check in rollout script 2026-05-06 18:07:29 -04:00
.gitignore Add Claude Code review and compliance audit workflows 2026-05-06 15:10:48 -04:00
README.md Add Claude Code review and compliance audit workflows 2026-05-06 15:10:48 -04:00

README.md

.github

Organization-level GitHub configuration for Sea Haven Industries.

What's in here

Reusable Workflows

.github/workflows/claude-code-review.yaml — Reusable PR review workflow powered by Claude Code. Individual repos call this via a thin wrapper workflow. Reviews for code correctness, security issues, and Sea Haven conventions (kebab-case, secrets placement, Lambda defaults).

.github/workflows/compliance-audit.yaml — Scheduled weekly audit (Mondays 10am ET) that checks all org repos for compliance with Sea Haven conventions. Creates GitHub issues on repos with violations. Can also be triggered manually via workflow_dispatch.

Scripts

scripts/rollout-review-workflow.sh — One-time script to push the thin PR review wrapper workflow to all org repos via the GitHub API. Creates a branch and PR on each repo.

Setup

1. Create a GitHub App

  1. Go to Organization Settings > Developer settings > GitHub Apps > New GitHub App
  2. Name it claude-code-ci (or similar)
  3. Set Homepage URL to your org URL
  4. Disable Webhook (uncheck "Active")
  5. Set these Repository permissions:
    • Contents: Read and write
    • Issues: Read and write
    • Metadata: Read-only
    • Pull requests: Read and write
  6. Set Where can this app be installed? to "Only on this account"
  7. Click Create GitHub App
  8. Note the App ID from the app's settings page
  9. Under Private keys, click Generate a private key — save the .pem file

2. Install the App

  1. From the app's settings page, click Install App
  2. Select Sea-Haven-Industries
  3. Choose All repositories

3. Add org-level secrets

Go to Organization Settings > Secrets and variables > Actions and add:

Secret Value
ANTHROPIC_API_KEY Your Claude API key
CLAUDE_CI_APP_ID The App ID from step 1
CLAUDE_CI_APP_PRIVATE_KEY The full contents of the .pem file from step 1

4. Roll out PR reviews to repos

./scripts/rollout-review-workflow.sh

This creates a PR on each repo adding the thin wrapper workflow. Review and merge them, then delete the add-claude-review branches.