Organization-wide GitHub configuration and workflows for the petry-projects org.
| Path | Purpose |
|---|---|
profile/ |
Public org profile page shown on the org's GitHub landing |
standards/ |
Engineering standards and policy documents |
standards/workflows/ |
Reusable CI workflow templates called by org repositories |
The standards/ directory contains the authoritative policy documents for this org.
| Standard | Topic | Key topics |
|---|---|---|
advanced-security |
GitHub Advanced Security configuration | Code Security Configurations, push-protection live-fire test (canary), licensing & billing, verification, compliance audit checks |
agent-standards |
Copilot and agentic workflow standards | Required files, agent configuration security, AgentShield CI workflow, Decision-Making Reusables, BMAD Method Workflows |
ci-standards |
CI pipeline conventions and enforcement | Staged promotion through concentric rings, reusable workflow versioning (stable channel), action pinning policy, permissions policy, required workflows |
codeowners-standard |
CODEOWNERS file policy | Rule, team composition, required setup for new bots, branch protection |
copilot-instructions-standard |
Copilot instructions file conventions | Canonical instruction files, adding a new language, content quality rules, compliance |
dependabot-policy |
Dependabot configuration and auto-merge rules | Policy, configuration files, auto-merge workflow, CODEOWNERS approval timing, vulnerability audit CI check |
feature-ideation-sources |
Sources and process for feature ideation | AI/ML vendor & lab sources, developer tooling changelogs, security & compliance, newsletters, podcasts |
github-settings |
Repository settings policy | Repository rulesets, organization-level secrets, GitHub Apps & integrations, labels — standard set, compliance audit process |
gitignore-standard |
gitignore policy and org-managed baseline (covering secrets, agent worktrees, and CI artifacts) | Two-Layer Model, L1 baseline (verbatim, required), managed-block markers, negation discipline, compliance check |
initiatives-project |
GitHub Projects board conventions | What belongs on the board, fields, Theme → Initiative, how the auto-add works, views |
persona-standards |
Agent and persona definition standards | The trigger matrix, canary onboarding, trust & permissions, definition layers, Definition of Done |
pr-limits |
Pull request size and scope limits | What is limited, exempt actors, reconciliation with Dependabot cap, operator runbook |
push-protection |
Secret push protection configuration | Layer 1 — GitHub Push Protection, Layer 2 — local pre-commit prevention, Layer 3 — CI secret scanning, incident response, compliance audit checks |
ruleset-remediation-runbook |
Runbook for resolving ruleset violations | Snapshot (rollback insurance), bypass actors, legacy ruleset migration, verify, 2026-06-10 fleet remediation |
Scheduled workflows in this repo post audit reports and status digests as issues or run summaries for maintainers.
| Workflow | Purpose |
|---|---|
compliance-audit-and-improvement.yml |
Weekly org standards compliance audit + runtime health survey, with per-finding remediation issues |
daily-org-status.yml |
Daily "Org Status" digest posted as an issue for maintainers |
org-scorecard.yml |
Weekly OpenSSF Scorecard security-posture review across public repos; findings tracked as issues |
The companion repository petry-projects/.github-private holds private automation:
Copilot custom agents, agentic workflow scripts, installed frameworks, and scheduled CI.