You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
fix: address copilot PR feedback on skill and template
- Remove reference to non-existent TEAM_CHECKLIST.md file
- Update template path to use relative markdown link
- Replace hardcoded status check names with reference to aggregator pattern in github-actions skill
- Fix capitalization: BCGov → BC Gov
Copy file name to clipboardExpand all lines: skills/github-repo-setup/SKILL.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -31,14 +31,14 @@ Evaluate repository compliance against contractually mandated BC Gov DevOps and
31
31
3.**Assess Repo configuration (GitHub API/Git)**:
32
32
- Check local git configurations and repository parameters when querying. If online API tools are unavailable, perform manual reasoning on branch naming, rulesets, and pull requests.
33
33
4.**Draft the Compliance Scorecard**:
34
-
- Compare the findings against the [BCGov DevOps & Dependency Security Standards](https://github.com/bcgov/agent-skills/blob/main/TEAM_CHECKLIST.md) (or `TEAM_CHECKLIST.md`).
35
-
- Use the reference template `skills/github-repo-setup/resources/REPORT_TEMPLATE.md` as the format.
34
+
- Compare the findings against the BC Gov DevOps & Dependency Security Standards (detailed in the **Rules** section below).
35
+
- Use the reference template [REPORT_TEMPLATE.md](./resources/REPORT_TEMPLATE.md) as the format.
36
36
5.**Write Report**: Generate `MATURITY_REPORT.md` in the target repository's root directory. The report must be thorough, precise, and state clear, actionable remediation items.
37
37
38
38
## Rules
39
39
-**No-Exemption Policy**: All security vulnerabilities must be remediated regardless of justifications like "trusted environments," "internal access," or "unreachable paths."
40
40
-**GitHub Repository Settings**: Enforce Squash Merging Only (uncheck merge/rebase commits). Enable Branch Auto-Cleanup and Always Suggest Updating PR branches.
41
-
-**Branch Protection Ruleset**: The `main` branch ruleset must require a PR, at least 1 approval, conversation resolution, linear history, and strict status checks (`Analysis Results`, `PR Results`, `Validate Results`). Block force pushes.
41
+
-**Branch Protection Ruleset**: The `main` branch ruleset must require a PR, at least 1 approval, conversation resolution, linear history, and a required status check. Require a single aggregated results check (per [github-actions SKILL](../github-actions/SKILL.md)) and block force pushes.
42
42
-**TypeScript Hygiene**: For TypeScript projects, compiler options must enforce strictness:
43
43
```json
44
44
{
@@ -106,7 +106,7 @@ Always generate a `MATURITY_REPORT.md` file in the root of the audited repositor
Copy file name to clipboardExpand all lines: skills/github-repo-setup/resources/REPORT_TEMPLATE.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,6 @@
1
1
# Repository Compliance & Maturity Assessment
2
2
3
-
This report evaluates compliance against the [BCGov DevOps & Dependency Security Standards](https://github.com/bcgov/agent-skills/blob/main/TEAM_CHECKLIST.md).
3
+
This report evaluates compliance against BC Gov DevOps & Dependency Security Standards (see [skill documentation](../SKILL.md) for detailed requirements).
4
4
5
5
## Executive Summary
6
6
@@ -62,7 +62,7 @@ This report evaluates compliance against the [BCGov DevOps & Dependency Security
0 commit comments