Compliance audit — 2026-07-24

[don-petry]

Compliance Audit — 2026-07-24

This umbrella issue tracks all findings from the automated compliance audit run on 2026-07-24.
Findings are grouped by remediation category. Address each category together to avoid duplicate agent PRs.

Total findings: 22 across 8 repositories

---

Remediation Work Breakdown

Push Protection & Secret Scanning (3 finding(s))

Remediation: apply-repo-settings.sh (security_and_analysis) + per-repo ci.yml and .gitignore
Affected repos: .github-private, markets, repo-template

Repo	Check	Severity
repo-template	gitignore_baseline	error
.github-private	gitignore_baseline	error
markets	gitignore_baseline	error

Repository Rulesets (12 finding(s))

Remediation: apply-rulesets.sh
Affected repos: .github, ContentTwin, broodly, markets

Repo	Check	Severity
.github	ruleset-drift-pr-quality-allowed_merge_methods	error
.github	ruleset-drift-code-quality-required_status_checks	error
ContentTwin	ruleset-drift-pr-quality-require_code_owner_review	error
ContentTwin	ruleset-drift-pr-quality-dismiss_stale_reviews_on_push	error
ContentTwin	ruleset-drift-pr-quality-require_last_push_approval	error
markets	ruleset-drift-pr-quality-require_code_owner_review	error
markets	ruleset-drift-pr-quality-dismiss_stale_reviews_on_push	error
markets	ruleset-drift-pr-quality-require_last_push_approval	error
markets	ruleset-drift-code-quality-required_status_checks	error
broodly	ruleset-drift-pr-quality-require_code_owner_review	error
broodly	ruleset-drift-pr-quality-dismiss_stale_reviews_on_push	error
broodly	ruleset-drift-pr-quality-require_last_push_approval	error

Workflows (7 finding(s))

Remediation: per-repo workflow additions
Affected repos: .github-private, ContentTwin, TalkTerm, bmad-bgreat-suite, markets

Repo	Check	Severity
.github-private	missing-permissions-dismiss-stale-bot-reviews.yml	warning
ContentTwin	stub-surface-drift-dependency-audit.yml-concurrency	warning
markets	stub-surface-drift-feature-ideation.yml-on	error
markets	stub-surface-drift-feature-ideation.yml-permissions	error
TalkTerm	ci-concurrency-missing-sha	warning
TalkTerm	stub-surface-drift-feature-ideation.yml-permissions	error
bmad-bgreat-suite	stub-surface-drift-feature-ideation.yml-permissions	error

---

Generated by the weekly compliance audit on 2026-07-24 14:00 UTC.
Address each remediation category as a single coordinated PR to avoid duplicate agent work.

[don-petry]

Resolved! This check is now passing as of 2026-07-31. Closing automatically.