Compliance: missing-label-dependencies

[don-petry]

Compliance Finding

Category: labels
Severity: warning
Check: missing-label-dependencies

Detail

Required label dependencies is missing

Standard Reference

standards/github-settings.md#labels--standard-set

Remediation

Please review the linked standard and bring this repository into compliance.

See the full standards documentation for implementation guidance.

---

This issue was automatically created by the weekly compliance audit.

[don-petry]

Weekly Compliance Audit (2026-04-06)

This finding is still open.

Detail: Required label dependencies is missing

Standard: standards/github-settings.md#labels--standard-set

[don-petry]

Weekly Compliance Audit (2026-04-06)

This finding is still open.

Detail: Required label dependencies is missing

Standard: standards/github-settings.md#labels--standard-set

[don-petry]

Weekly Compliance Audit (2026-04-06)

This finding is still open.

Detail: Required label dependencies is missing

Standard: standards/github-settings.md#labels--standard-set

[claude]

Claude finished @don-petry's task in 3m 10s —— View job • claude/issue-46-20260406-0322 • Create PR ➔

---

Implementation complete

• Read CLAUDE.md and understand repo structure
• Review label standards documentation
• Find label configuration files (scripts/compliance-audit.sh)
• Update compliance script to auto-create missing required labels
• Commit and push changes to claude/issue-46-20260406-0322

What was changed

scripts/compliance-audit.sh — two additions:

1. REQUIRED_LABEL_CONFIGS array with name, hex color, and description for all 6 required labels (matching the values in standards/github-settings.md)
2. ensure_required_labels() function that idempotently creates all required labels using --force, called in the main issue-management loop alongside the existing ensure_audit_label()

This eliminates the entire missing-label-* compliance finding category — the next audit run will create any missing labels instead of filing issues for them.

Immediate fix for this issue

The dependencies label still needs to be created now (the script change only takes effect on the next audit run). Run:

gh label create "dependencies" --repo petry-projects/.github --description "Dependency update PRs" --color "0075ca" --force

[don-petry]

Weekly Compliance Audit (2026-04-06)

This finding is still open.

Detail: Required label dependencies is missing

Standard: standards/github-settings.md#labels--standard-set

[claude]

Claude finished @don-petry's task in 3m 22s —— View job • claude/issue-46-20260406-0342 • Create PR ➔

---

Implementation complete

• Read repo structure and understand existing scripts
• Review label standards (standards/github-settings.md#labels--standard-set)
• Add ensure_required_labels() to scripts/compliance-audit.sh
• Add apply_labels() to scripts/apply-repo-settings.sh
• Commit and push to claude/issue-46-20260406-0342
• Create PR fix: auto-create required labels during compliance audit #67
• Self-review PR (no issues found)

---

What was changed

scripts/compliance-audit.sh

• Added ensure_required_labels() function that idempotently creates all 6 required labels (security, dependencies, scorecard, bug, enhancement, documentation) using gh label create --force
• Called in the main issue-management loop right after ensure_audit_label() — so every audit run will create any missing labels before checking for findings, eliminating the missing-label-* compliance finding category entirely

scripts/apply-repo-settings.sh

• Added apply_labels() function with the same label configs, including DRY_RUN support
• Called at the end of both single-repo and --all flows so running the remediation script also ensures labels are in place

Both functions use the exact colors defined in the standards (d93f0b, 0075ca, d73a4a, a2eeef).

@don-petry — PR #67 is ready for review and merge.
| Branch