First pass at making this repo work

.editorconfig

@@ -0,0 +1,19 @@
+# https://EditorConfig.org
+
+# top-most EditorConfig file
+root=true
+
+# Unix-style newlines with a newline ending every file
+[*]
+end_of_line = lf
+insert_final_newline = true
+
+# 2 space indentation
+indent_style = space
+indent_size = 2
+
+# Avoid issues parsing cookbook files later
+charset = utf-8
+
+# Avoid cookstyle warnings
+trim_trailing_whitespace = true

.expeditor/buildkite/artifact.habitat.test.ps1

@@ -105,4 +105,4 @@ try {
 finally {
     # Ensure we always return to the original directory
     Pop-Location
-}
+}

.expeditor/buildkite/artifact.habitat.test.sh

@@ -72,4 +72,4 @@ export PATH
 echo "PATH is $PATH"
 
 echo "--- :mag_right: Testing $PLAN"
-${project_root}/habitat/tests/test.sh "$pkg_ident" || error 'failures during test of executables'
+${project_root}/habitat/tests/test.sh "$pkg_ident" || error 'failures during test of executables'

.expeditor/verify.pipeline.yml

@@ -79,4 +79,4 @@ steps:
             - FORCE_FFI_YAJL=ext
             - EXPIRE_CACHE=true
             - CHEF_LICENSE=accept-no-persist
-            - CHEF_LICENSE_SERVER=http://hosted-license-service-lb-8000-606952349.us-west-2.elb.amazonaws.com:8000/
+            - CHEF_LICENSE_SERVER=http://hosted-license-service-lb-8000-606952349.us-west-2.elb.amazonaws.com:8000/

.github/CODEOWNERS

@@ -0,0 +1,4 @@
+# Order is important. The last matching pattern has the most precedence.
+
+*            @chef/chef-infra-reviewers @chef/chef-infra-approvers @chef/chef-infra-owners @jaymzh
+.expeditor/  @chef/build-engineering-systems-team

.github/dependabot.yml

@@ -1,11 +1,18 @@
-# To get started with Dependabot version updates, you'll need to specify which
-# package ecosystems to update and where the package manifests are located.
-# Please see the documentation for all configuration options:
-# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
-
 version: 2
 updates:
-  - package-ecosystem: "bundler" # See documentation for possible values
-    directory: "/" # Location of package manifests
+  - package-ecosystem: bundler
+    directory: "/"
+    target-branch: "main"
+    schedule:
+      interval: daily
+    open-pull-requests-limit: 20
+    labels:
+      - "Type: Chore"
+
+  - package-ecosystem: github-actions
+    directory: "/"
     schedule:
-      interval: "weekly"
+      interval: daily
+    open-pull-requests-limit: 10
+    labels:
+      - "Type: Chore"

.github/labeler.yml

@@ -0,0 +1,6 @@
+documentation:
+  - changed-files:
+      - any-glob-to-any-file:
+        - 'README.md'
+        - 'CODE_OF_CONDUCT.md'
+        - 'CONTRIBUTING.md'

.github/workflows/allchecks.yml

@@ -0,0 +1,18 @@
+name: All checks pass
+on:
+  pull_request:
+    types: [ opened, synchronize, reopened, ready_for_review ]
+
+jobs:
+  allchecks:
+    runs-on: ubuntu-latest
+    permissions:
+      checks: read
+      contents: read
+    steps:
+      - uses: wechuli/allcheckspassed@v2
+        with:
+          checks_exclude: ".*(SonarCloud Code Analysis).*"
+          # Retry every minute for 30 minutes...
+          retries: 90
+          verbose: true

.github/workflows/ci-main-pull-request-stub-1.0.7.yml

@@ -158,4 +158,4 @@ jobs:
 
       # udf1: 'default' # user defined flag 1
       # udf2: 'default' # user defined flag 2
-      # udf3: 'default' # user defined flag 3
+      # udf3: 'default' # user defined flag 3

.github/workflows/dco.yml

@@ -0,0 +1,22 @@
+name: DCO Check
+on: [pull_request]
+
+permissions: {}
+
+jobs:
+  dco_check_job:
+    permissions:
+      contents: read
+      pull-requests: read
+    runs-on: ubuntu-latest
+    name: DCO Check
+    steps:
+    - name: Get PR Commits
+      uses: tim-actions/get-pr-commits@master
+      id: 'get-pr-commits'
+      with:
+        token: ${{ secrets.GITHUB_TOKEN }}
+    - name: DCO Check
+      uses: tim-actions/dco@master
+      with:
+        commits: ${{ steps.get-pr-commits.outputs.commits }}

.github/workflows/labeler.yml

@@ -0,0 +1,16 @@
+name: "Pull Request Labeler"
+on:
+  pull_request_target:
+    branches:
+      - main
+concurrency:
+  group: labeler--${{ github.event.pull_request.number || github.run_id }}
+  cancel-in-progress: true
+
+jobs:
+  triage:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/labeler@v6.0.1
+        with:
+          repo-token: "${{ secrets.GITHUB_TOKEN }}"

.github/workflows/lint.yml

@@ -0,0 +1,46 @@
+---
+name: lint
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+
+concurrency:
+  group: lint-${{ github.event.pull_request.number || github.run_id }}
+  cancel-in-progress: true
+
+jobs:
+  cookstyle:
+    runs-on: ubuntu-latest
+    env:
+      BUNDLE_WITHOUT: ruby_shadow:packaging
+    steps:
+      - uses: actions/checkout@v6
+      - uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: 3.4
+          bundler-cache: false
+      - uses: r7kamura/rubocop-problem-matchers-action@v1  # this shows the failures in the PR
+      - run: |
+          bundle install
+          bundle exec rake style
+
+  spellcheck:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+      - run: |
+          curl --location 'https://raw.githubusercontent.com/chef/chef_dictionary/main/chef.txt' --output chef_dictionary.txt
+      - uses: streetsidesoftware/cspell-action@v8.3.0
+
+  linelint:
+    runs-on: ubuntu-latest
+    name: Check if all files end in newline
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+      - name: Linelint
+        uses: fernandrone/linelint@master
+        id: linelint