Compliance: security_and_analysis_unavailable

[don-petry]

Compliance Finding

Category: push-protection
Severity: warning
Check: security_and_analysis_unavailable

Detail

Could not fetch security_and_analysis — token may lack admin scope, or the repo's plan does not expose these settings

Standard Reference

standards/push-protection.md#required-repo-level-settings

Remediation

Please review the linked standard and bring this repository into compliance.

See the full standards documentation for implementation guidance.

---

This issue was automatically created by the weekly compliance audit.

[don-petry]

Weekly Compliance Audit (2026-04-09)

This finding is still open.

Detail: Could not fetch security_and_analysis — token may lack admin scope, or the repo's plan does not expose these settings

Standard: standards/push-protection.md#required-repo-level-settings

[don-petry]

Claude encountered an error —— View job

---

I'll analyze this and get back to you.

[don-petry]

Weekly Compliance Audit (2026-04-10)

This finding is still open.

Detail: Could not fetch security_and_analysis — token may lack admin scope, or the repo's plan does not expose these settings

Standard: standards/push-protection.md#required-repo-level-settings

[don-petry]

Claude finished @don-petry's task in 3m 59s —— View job • claude/issue-170-20260414-1141

---

Analysis and Fix for Issue #170

• Gather context and understand the issue
• Read the push-protection standard
• Check current repository security settings
• Update .gitignore with org baseline (added *.pem, *.key, and all required credential patterns)
• Add secret-scan gitleaks job to ci.yml
• Commit and push changes
• Create pull request

Findings and actions:

Check	Status	Action taken
secret_scanning	✓ already enabled	—
secret_scanning_push_protection	✓ already enabled	—
secret_scan_ci_job_present	✗ missing	Added SHA-pinned gitleaks-action@v2.3.9 job to ci.yml
gitignore_secrets_block	✗ partial (.env only)	Replaced with full org secrets baseline
secret_scanning_non_provider_patterns	disabled (plan limitation)	Cannot enable via API — needs manual toggle in GitHub Settings → Code security and analysis

Create a PR — PR #189 already created: #189

[don-petry]

Weekly Compliance Audit (2026-04-17)

This finding is still open.

Detail: Could not fetch security_and_analysis — token may lack admin scope, or the repo's plan does not expose these settings

Standard: standards/push-protection.md#required-repo-level-settings

[don-petry]

Claude encountered an error —— View job

---

Analysis and Fix for Issue #170

• Gather context and understand the issue
• Read the push-protection standard
• Check PR security: add gitleaks secret-scan CI job and expand .gitignore to org baseline #189 status and what was already done
• Understand the compliance audit check
• Implement any missing fixes
• Run tests and lint checks
• Commit and push changes
• Create pull request
• Self-review PR and check CI