Compliance Category: Repository Settings (26 findings)

[don-petry]

Compliance Category: Repository Settings (26 findings)

Category: repository-settings
Severity: Majority error, some warning
Affected repos: All 8 repos (.github, .github-private, ContentTwin, TalkTerm, bmad-bgreat-suite, broodly, google-app-scripts, markets)

Summary

All repositories need CODEOWNERS and check-suite automation configuration updates. Key issues:

1. CODEOWNERS Missing Default Catchall (8 repos) — No * pattern catches unmapped files
2. Org Leads Not First in CODEOWNERS (8 repos) — Org-level code owners should be listed first
3. Check Suite Auto-Trigger Missing (8 repos × 2 check suites) — Two check suites (1236702, 347564) not auto-triggering on relevant events

Affected Checks

• codeowners-no-catchall (8 repos) — warning severity
• codeowners-org-leads-not-first (8 repos) — error severity
• check-suite-auto-trigger-1236702 (8 repos) — error severity
• check-suite-auto-trigger-347564 (8 repos) — error severity

Remediation Strategy

Run the centralized settings script on each repo to apply all standard settings in one pass:

GH_TOKEN=<admin-pat> bash scripts/apply-repo-settings.sh REPO_NAME

This applies all settings defined in standards/github-settings.md consistently across all repositories.

For a dry run to preview changes:

DRY_RUN=true GH_TOKEN=<admin-pat> bash scripts/apply-repo-settings.sh REPO_NAME

The script handles:

• CODEOWNERS file generation and validation
• Check suite auto-trigger configuration
• Repository-level branch protection rules
• Other standard org settings

Reference: scripts/apply-repo-settings.sh and standards/github-settings.md

---

This issue was automatically created by the compliance audit and groups 26 repository settings findings across all 8 repos. Address this coordinated with the other settings-related PRs to avoid duplicate work.

[don-petry]

Implementation Plan

All 8 repositories need repository settings applied. Run this script on each repo:

GH_TOKEN=<admin-token> bash scripts/apply-repo-settings.sh <REPO>

Affected repos (in order):

1. .github
2. .github-private
3. ContentTwin
4. TalkTerm
5. bmad-bgreat-suite
6. broodly
7. google-app-scripts
8. markets

This single command applies all standard settings including:

• CODEOWNERS file with catch-all and org-leads-first pattern
• Check suite auto-trigger configuration
• Branch protection rules
• All org standards

For a preview (dry-run), add DRY_RUN=true before the script command.

[don-petry]

@dev-lead Please execute the following commands to apply repository settings to all 8 repos:

for repo in .github .github-private ContentTwin TalkTerm bmad-bgreat-suite broodly google-app-scripts markets; do
  bash scripts/apply-repo-settings.sh $repo
done

The dev-lead workflow has access to necessary GitHub tokens via GitHub Actions secrets. This will fix all 26 repository settings findings and resolve issue #362.

[don-petry]

Resolved! This check is now passing as of 2026-05-29. Closing automatically.