Compliance: missing-label-scorecard

[don-petry]

Compliance Finding

Category: labels
Severity: warning
Check: missing-label-scorecard

Detail

Required label scorecard is missing

Standard Reference

standards/github-settings.md#labels--standard-set

Remediation

Please review the linked standard and bring this repository into compliance.

See the full standards documentation for implementation guidance.

---

This issue was automatically created by the weekly compliance audit.

[don-petry]

Weekly Compliance Audit (2026-04-06)

This finding is still open.

Detail: Required label scorecard is missing

Standard: standards/github-settings.md#labels--standard-set

[don-petry]

Weekly Compliance Audit (2026-04-06)

This finding is still open.

Detail: Required label scorecard is missing

Standard: standards/github-settings.md#labels--standard-set

[don-petry]

Weekly Compliance Audit (2026-04-06)

This finding is still open.

Detail: Required label scorecard is missing

Standard: standards/github-settings.md#labels--standard-set

[claude]

Claude finished @don-petry's task in 2m 42s —— View job • claude/issue-47-20260406-0322 • Create PR ➔

---

Tasks

• Gather context
• Read standards documentation
• Add label auto-remediation to scripts/compliance-audit.sh
  • Added REQUIRED_LABEL_SPECS array with name, color, and description for each required label
  • Modified check_labels() to auto-create missing labels with gh label create, falling back to filing a finding only if creation fails
• Committed and pushed changes

What was done

The compliance audit was detecting the missing scorecard label and filing a finding every week, but never fixing it. The fix modifies scripts/compliance-audit.sh to auto-remediate missing labels:

1. Added REQUIRED_LABEL_SPECS with the label name, color (#d93f0b for scorecard), and description per the standard
2. check_labels() now calls gh label create for any missing label — creating it immediately rather than just reporting it
3. Only files a compliance finding if creation fails (e.g. insufficient permissions), flagging it for manual remediation

On the next compliance audit run, the scorecard label will be auto-created on any repo missing it, resolving this issue and preventing recurrence.

[don-petry]

Weekly Compliance Audit (2026-04-06)

This finding is still open.

Detail: Required label scorecard is missing

Standard: standards/github-settings.md#labels--standard-set

[claude]

Claude finished @don-petry's task in 17m 34s —— View job • claude/issue-47-20260406-0342 • [Create PR ➔](https://github.com/petry-projects/.github/compare/main...claude/issue-47-20260406-0342?quick_pull=1&title=Issue%20%2347%3A%20Changes%20from%20Claude&body=This%20PR%20addresses%20issue%20%2347%0A%0AGenerated%20with%20%5BClaude%20Code%5D(https%3A%2F%2Fclaude.ai%2Fcode)

---

Tasks

• Gather context
• Read standards documentation
• Understand codebase and previous attempts
• Implement fix:
  • Add REQUIRED_LABEL_SPECS to compliance-audit.sh with name/color/description per standard
  • Modify check_labels() to auto-create missing labels (falls back to filing a finding only if creation fails; respects DRY_RUN)
  • Add apply_labels() to apply-repo-settings.sh for manual remediation path
  • Remove now-unused REQUIRED_LABELS array
• Commit and push changes
• Create PR: petry-projects/.github#64
• Self-review: found and fixed DRY_RUN issue (label creation was firing even during dry runs)
• CI: CodeQL passed ✓
• Tag code owners for review

What was done

The compliance audit kept filing the missing-label-scorecard finding each week without fixing it. The fix modifies scripts/compliance-audit.sh so check_labels() now auto-creates any missing required label via gh label create --force, only falling back to a finding if creation fails. In DRY_RUN=true mode it files the finding as before (no repo modification). The scripts/apply-repo-settings.sh remediation script also gains label management.

@don-petry — no CODEOWNERS file exists in this repo. Please review and merge petry-projects/.github#64 when ready.
| claude/issue-47-20260406-0342