Compliance audit — 2026-07-10

[don-petry]

Compliance Audit — 2026-07-10

This umbrella issue tracks all findings from the automated compliance audit run on 2026-07-10.
Findings are grouped by remediation category. Address each category together to avoid duplicate agent PRs.

Total findings: 10 across 7 repositories

---

Remediation Work Breakdown

Push Protection & Secret Scanning (2 finding(s))

Remediation: apply-repo-settings.sh (security_and_analysis) + per-repo ci.yml and .gitignore
Affected repos: broodminder-export

Repo	Check	Severity
broodminder-export	secret_scan_ci_job_present	error
broodminder-export	gitignore_secrets_block	warning

Repository Rulesets (1 finding(s))

Remediation: apply-rulesets.sh
Affected repos: repo-template

Repo	Check	Severity
repo-template	missing-code-quality	error

Workflows (6 finding(s))

Remediation: per-repo workflow additions
Affected repos: .github-private, bmad-bgreat-suite, broodly, google-app-scripts, markets

Repo	Check	Severity
.github-private	non-stub-feature-ideation.yml	error
broodly	non-stub-feature-ideation.yml	error
google-app-scripts	non-stub-feature-ideation.yml	error
markets	non-stub-feature-ideation.yml	error
bmad-bgreat-suite	non-stub-feature-ideation.yml	error
bmad-bgreat-suite	dev-lead-stub-concurrency	warning

Agent Standards (CLAUDE.md / AGENTS.md / copilot-setup-steps.yml) (1 finding(s))

Remediation: per-repo doc and workflow additions
Affected repos: broodminder-export

Repo	Check	Severity
broodminder-export	missing-copilot-instructions	error

---

Generated by the weekly compliance audit on 2026-07-10 14:44 UTC.
Address each remediation category as a single coordinated PR to avoid duplicate agent work.