fix(checkpoints): GH-08/09 .yml form templates + GH-19/20 reusable workflow#63
fix(checkpoints): GH-08/09 .yml form templates + GH-19/20 reusable workflow#63
Conversation
…kflow **GH-8 / GH-9** issue templates: accept the modern `.yml` form templates (structured fields, validation, required inputs) in addition to the legacy `.md` files. The `.yml` form is the recommended Netresearch standard. **GH-19 / GH-20** CodeQL / OpenSSF Scorecard: same fix pattern as ER-19/20 from PR #55 — accept either a dedicated workflow file OR a job in another workflow that calls the canonical action (github/codeql-action, ossf/scorecard-action) or delegates to the netresearch reusable workflow. Verified against netresearch/t3x-nr-llm — all four pass with the project's modern setup (.yml templates + reusable-workflow CodeQL/ Scorecard jobs in ci.yml). Signed-off-by: Sebastian Mendel <sebastian.mendel@netresearch.de>
Dependency Review✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.Scanned FilesNone |
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request updates the checkpoints.yaml file to support modern .yml issue templates alongside legacy .md files and transitions CodeQL and OpenSSF Scorecard checks from simple file existence to regex-based pattern matching within workflow files. The review feedback suggests using shell command chains for multi-file existence checks to align with existing repository patterns and recommends refining regex patterns to target unique path strings instead of the uses: prefix to improve robustness against formatting variations.
There was a problem hiding this comment.
Pull request overview
Updates the github-project skill’s mechanical checkpoints to better align with Netresearch’s preferred GitHub configuration patterns (issue form templates and reusable workflows), reducing drift across repos.
Changes:
- Allow issue templates to be satisfied by either modern
.ymlissue forms or legacy.mdtemplates (with.ymlpreferred). - Change CodeQL and OpenSSF Scorecard checks from “file exists” to workflow content detection (supports dedicated workflows or jobs delegating to reusable workflows).
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Signed-off-by: Sebastian Mendel <sebastian.mendel@netresearch.de>
Skill batch fix series — see commit messages for per-checkpoint rationale and verification against netresearch/t3x-nr-llm. Part of the 2026-04 unification sweep to eliminate skill drift across the Netresearch TYPO3 portfolio.