Compliance: dev-lead-stub-pin

[don-petry]

Compliance Finding

Category: ci-workflows
Severity: error
Check: dev-lead-stub-pin

Detail

The dev-lead.yml caller stub must pin a dev-lead channel tag — petry-projects/.github-private/.github/workflows/dev-lead-reusable.yml@dev-lead/<channel> where is stable (default), next, or ring<N>. Re-sync from standards/workflows/dev-lead.yml.

Standard Reference

standards/ci-standards.md#dev-lead-agent

Remediation

Copy the relevant workflow template from standards/workflows/ verbatim — do not generate from scratch:

gh api repos/petry-projects/.github/contents/standards/workflows/<template>.yml --jq '.content' | base64 -d > .github/workflows/<template>.yml

Available templates: agent-shield.yml, dev-lead.yml, dependabot-automerge.yml, dependabot-rebase.yml, dependency-audit.yml, feature-ideation.yml

---

This issue was automatically created by the weekly compliance audit.

[don-petry]

Dev-Lead: implementation deferred — automation PR queue is full

No pull request was opened for issue #369. The org-wide
open-automation-PR queue is currently at its signed-off cap (see
standards/pr-limits.json in petry-projects/.github).

This issue stays labeled dev-lead and will be re-attempted automatically once
the queue drains — no action is required.