Skip to content

docs(security): Gate 2 — Dependabot security updates + 15 required checks#198

Merged
brownjuly2003-code merged 1 commit into
mainfrom
chore/gate2-security-updates-required-checks
Jul 15, 2026
Merged

docs(security): Gate 2 — Dependabot security updates + 15 required checks#198
brownjuly2003-code merged 1 commit into
mainfrom
chore/gate2-security-updates-required-checks

Conversation

@brownjuly2003-code

Copy link
Copy Markdown
Owner

Summary

Closes Gate 2 (audit P1-3 / Stage 3 item 6) after applying repo settings via GitHub API.

Already applied (API-verified, not in this PR's code)

  1. Vulnerability alerts enabled
  2. Dependabot security updates (automated-security-fixes) enabled — 0 open alerts
  3. Branch protection required checks: 13 → 15 — added sdk-ts and lock-check

This PR (docs only)

  • .github/dependabot.yml header: DISABLED → enabled + verify commands
  • README.md / docs/release-readiness.md: 13 → 15 checks, list sdk-ts + lock-check
  • CHANGELOG.md Unreleased entry

Verify

gh api repos/brownjuly2003-code/agentflow --jq .security_and_analysis.dependabot_security_updates
gh api repos/brownjuly2003-code/agentflow/branches/main/protection/required_status_checks --jq .contexts

Test plan

  • API confirms dependabot_security_updates.status == enabled
  • API confirms 15 required contexts including sdk-ts and lock-check
  • CI green on this docs PR

…ecks

Repo settings (already applied via GitHub API):
- vulnerability alerts + automated security fixes enabled
- branch protection required checks 13→15 (+sdk-ts, +lock-check)

Living docs and dependabot header comment now match the API-verified state.
@github-actions

Copy link
Copy Markdown

DORA Metrics

  • Window: last 30 days
  • Branch: main
  • Deployment frequency: 104 total / 24.27 per week
  • Lead time for changes: avg 0.38h / median 0.0h
  • Change failure rate: 67.31% (70/104)
  • MTTR: 2.56h across 1 incident(s)

@brownjuly2003-code brownjuly2003-code merged commit f0320c5 into main Jul 15, 2026
22 checks passed
@brownjuly2003-code brownjuly2003-code deleted the chore/gate2-security-updates-required-checks branch July 15, 2026 22:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants