[Fleet Monitor] petry-projects/.github — claude.yml #427

Activity

1. don-petry

   added

   health-check

   dev-leadFor dev-lead agent pickupFor dev-lead agent pickup

   fleet-tracker

   in-progressAn agent is actively working this issueAn agent is actively working this issue

   and removed

   dev-leadFor dev-lead agent pickupFor dev-lead agent pickup

   on Jun 9, 2026
2. don-petry commented on Jun 9, 2026

   

   don-petry

   on Jun 9, 2026

   ContributorAuthor

   More actions

   Dev-Lead Implementation Plan

   Issue: #427 — [Fleet Monitor] petry-projects/.github — claude.yml

   Root Cause

   claude.yml on PR branches (e.g., PR #167 fix/gitleaks-standard-checksum-and-toml) references petry-projects/.github/.github/workflows/claude-code-reusable.yml@main, but claude-code-reusable.yml does not exist on main. GitHub immediately fails all claude.yml workflow runs with "workflow file issue" (0s duration), producing a 100% failure rate across all 9 monitored runs.

   A secondary OIDC constraint failure also occurs: Anthropic's token endpoint requires .github/workflows/claude.yml on the PR branch to be byte-for-byte identical to main. Since claude.yml doesn't exist on main, the check fails even if the workflow file issue is resolved.

   Scope

   Add two missing workflow files to main so that:

   1. claude-code-reusable.yml@main resolves → fixes the "workflow file issue"
   2. claude.yml on main matches the PR branch content → fixes the OIDC byte-for-byte constraint

   Content is taken verbatim from PR #167's branch (fix/gitleaks-standard-checksum-and-toml), which already contains the correct implementation.

   Implementation Checklist

   • Add .github/workflows/claude.yml — thin caller stub matching PR fix(standards): rename GITLEAKS_SHA256→GITLEAKS_CHECKSUM, add .gitleaks.toml template #167's branch exactly (OIDC constraint)
   • Add .github/workflows/claude-code-reusable.yml — the centralized reusable workflow for all org repos

   Tests to Write

   TDD Exception: These are GitHub Actions workflow files with no locally-executable behavioral logic. The observable test is whether workflow runs on GitHub succeed after the fix lands. Skipping the red/green TDD phase; correctness is validated by the fleet monitor in the next monitoring window.

   Test Command

   bash ".dev-lead/scripts/dev-lead-lint.sh"
3. don-petry commented on Jun 9, 2026

   

   don-petry

   on Jun 9, 2026

   ContributorAuthor

   More actions

   Dev-Lead: Implementation Complete

   Root Cause

   claude.yml in this repo (on PR #167's branch fix/gitleaks-standard-checksum-and-toml) references claude-code-reusable.yml@main, but neither claude-code-reusable.yml nor claude.yml existed on main. Every pull_request sync of PR #167 triggered the claude.yml workflow (same-repo PR uses the PR-branch workflow) and immediately failed (0s) with "workflow file issue" because the referenced reusable workflow didn't exist on main. A secondary failure was the OIDC byte-for-byte constraint: Anthropic's token endpoint requires claude.yml on the PR branch to match main exactly.

   Plan Execution

   • Added .github/workflows/claude.yml — thin caller stub, content matches PR fix(standards): rename GITLEAKS_SHA256→GITLEAKS_CHECKSUM, add .gitleaks.toml template #167 branch exactly (satisfies OIDC byte-for-byte constraint)
   • Added .github/workflows/claude-code-reusable.yml — centralized reusable workflow (fixes the "workflow file issue" — @main reference now resolves)
   • Ran dev-lead-lint.sh — all checks passed

   Test Results

     [lint] shellcheck on 12 file(s)...
     [lint] all checks passed
   

   Files Changed

   • .github/workflows/claude.yml: Added thin caller stub delegating to claude-code-reusable.yml@main
   • .github/workflows/claude-code-reusable.yml: Added centralized reusable workflow for the org (473 lines — contains claude, claude-fix-review-comments, claude-ci-fix, claude-issue, and claude-rebase jobs)

   TDD Exception

   These are GitHub Actions workflow files — there are no locally-executable tests. Correctness is validated by workflow runs on GitHub. Skipped Phase 2 (TDD) per the exception for pure configuration changes.

   Notes

   • Once this PR merges to main, PR fix(standards): rename GITLEAKS_SHA256→GITLEAKS_CHECKSUM, add .gitleaks.toml template #167 will no longer fail: claude-code-reusable.yml@main will resolve and claude.yml on main will match the PR branch byte-for-byte
   • The fleet monitor should see successful runs in the next monitoring window, dropping the failure rate from 100% to 0%
   • The claude-code-reusable.yml uses anthropics/claude-code-action@476e359e6203e73dad705c8b322e333fabbd7416 (v1.0.119) with SHA-pinned actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd (v6.0.2), both compliant with the Action Pinning Policy
4. don-petry

   added a commit that references this issue on Jun 13, 2026

   feat: implement issue #427 — [Fleet Monitor] petry-projects/.github —…

   ...

   d2dc325
5. don-petry commented on Jul 14, 2026

   

   don-petry

   on Jul 14, 2026

   ContributorAuthor

   More actions

   Closing — this tracks claude.yml/claude-code-reusable.yml, which was deprecated and deleted (#456). Fleet Monitor only scans active workflows, so it can't re-evaluate or close alerts for a removed workflow. Auto-close for recovered/deleted workflows is being added in combsmith/.github-private#1204 (tracked in #1203).
6. don-petry

   closed this as completedon Jul 14, 2026