Fill in the missing project scaffolding - #3
Merged
Conversation
The repository had CI, dependabot, mise and agent instructions, but none of the metadata files a public repository is expected to carry. - LICENSE: proprietary, all rights reserved. The repository is public so GitHub Pages can serve the site, not so the source can be reused. The boilerplate's "private and confidential" and "authorized personnel" clauses are dropped, since they are untrue of a world-readable repo, and a trademark clause is added for the Lab271 and Schuberg Philis marks. - CODE_OF_CONDUCT.md: Contributor Covenant 2.0, with enforcement routed to a maintainer or to abuse@schubergphilis.com. - CONTRIBUTING.md: states plainly that this repository does not take third-party contributions, while pointing reports of a broken or inaccurate page at the issue tracker and security reports at SECURITY.md. It also records that the repository list is generated, so getting a project listed means changing that project, not this site. - docs/agents/issue-tracker.md: GitHub issues, with the label set. Issues were disabled on the repository and four of the eight triage labels were missing; both are fixed on the remote side. Two mise tasks close the loop between local and CI: `ci` runs the same install, check and build the workflow runs, and `ci-watch` follows the real run afterwards. `ci` uses a sequential `run` list rather than `depends`, because mise resolves dependencies in parallel and these three are ordered. The root .gitignore covered only .DS_Store; it now also covers mise local overrides, env files and editor cruft. docs/.gitignore still ignored a font cache for scripts/refresh-marks.py, which was retired with the design refresh, so that entry and the leftover cache are gone. AGENTS.md gains the canonical-configuration header, the tasks it was missing, an Agent skills section naming the remote, tracker and labels, and a note that zizmor has to be scoped to .github/ locally: a bare `zizmor .` walks docs/node_modules and reports on vendored packages' own workflows. Assisted-by: Claude:claude-opus-5 Co-Authored-By: lsimons-bot <bot@leosimons.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The repository already had CI, dependabot, mise and agent instructions, but none of the metadata files a public repository is expected to carry. This adds them and closes a few gaps that had drifted.
Metadata files
LICENSE- proprietary, all rights reserved. The repository is public so GitHub Pages can serve the site, not so the source can be reused. The boilerplate's "private and confidential" and "authorized personnel" clauses are dropped, since they are untrue of a world-readable repo, and a trademark clause is added for the Lab271 and Schuberg Philis marks. This one wants a legal read.CODE_OF_CONDUCT.md- Contributor Covenant 2.0, enforcement routed to a maintainer or to abuse@schubergphilis.com.CONTRIBUTING.md- states plainly that this repository does not take third-party contributions, while pointing reports of a broken or inaccurate page at the issue tracker and security reports atSECURITY.md. It also records that the repository list is generated, so getting a project listed means changing that project rather than this site.docs/agents/issue-tracker.md- GitHub issues, with the label set written down.Remote-side changes (already applied, not in this diff)
needs-triage,needs-info,ready-for-agent,ready-for-human. All created.Tasks
Two mise tasks close the loop between local and CI:
ciruns the same install, check and build the workflow runs, andci-watchfollows the real run afterwards.ciuses a sequentialrunlist rather thandepends, because mise resolves dependencies in parallel and these three are ordered.Cleanups
.gitignorecovered only.DS_Store; it now also covers mise local overrides, env files and editor cruft.docs/.gitignorestill ignored a font cache forscripts/refresh-marks.py, which was retired with the design refresh. That entry and the 48K of leftover woff2 are gone.AGENTS.mdgains the canonical-configuration header, the tasks it was missing, an Agent skills section naming the remote, tracker and labels, and a note that zizmor has to be scoped to.github/locally: a barezizmor .walksdocs/node_modulesand reports on vendored packages' own workflows.README.mdgains a License section and links to the new files.Verification
mise run cipasses.zizmor --collect=all --strict-collection .github/reports zero findings, with the online audits active.actionlintclean.README.mdandAGENTS.mdexists inmise tasks; every relative link and referenced path resolves.No changes to the site itself, so the deploy output is unaffected.
Assisted-by: Claude:claude-opus-5
Co-Authored-By: lsimons-bot bot@leosimons.com