feat: add agent-shield.yml workflow for compliance

[don-petry]

Summary

• Adds .github/workflows/agent-shield.yml — a thin caller stub for the org-level reusable agent-shield-reusable.yml@v1
• File copied verbatim from standards/workflows/agent-shield.yml per the standards-conformance rules
• Resolves the compliance finding from the weekly audit

Closes #40

Generated with Claude Code

Summary by CodeRabbit

• Chores
  • Added automated workflow integration to improve code quality and security checks on pull requests and pushes to the main branch.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 617ebc26-bb14-4ccd-97a6-809a5afb60e5

📥 Commits

Reviewing files that changed from the base of the PR and between b1e410a and b6ea6b0.

📒 Files selected for processing (1)

• .github/workflows/agent-shield.yml

---

📝 Walkthrough

Walkthrough

Added a new GitHub Actions workflow file that implements the AgentShield compliance check by delegating to an organization-level reusable workflow. The workflow triggers on push and pull_request events to the main branch and operates with read-only permissions.

Changes

Cohort / File(s)	Summary
AgentShield Workflow .github/workflows/agent-shield.yml	New workflow file that delegates to the org-level AgentShield reusable workflow (petry-projects/.github/.github/workflows/agent-shield-reusable.yml@v1) with triggers for main branch push and pull_request events.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related issues

• Compliance: missing-agent-shield.yml markets#57 — Addresses the missing agent-shield.yml compliance finding by adding the required workflow file.
• Compliance: missing-agent-shield.yml broodly#74 — Fulfills the compliance requirement for the missing agent-shield.yml workflow in this repository type.
• Compliance: missing-agent-shield.yml ContentTwin#33 — Resolves the missing-agent-shield.yml compliance check by implementing the required workflow stub.

Possibly related PRs

• feat(workflows): pin reusable callers to @v1 and document tier model #88 — Establishes the same agent-shield caller pattern delegating to the org-level reusable workflow pinned to @v1.
• feat(compliance-audit): detect non-stub centralized workflow copies #89 — Validates the centralized workflow stub pattern that this PR implements for agent-shield.yml.
• feat: add AgentShield CI standard and agent-shield.yml workflow template #25 — Defines the org-level AgentShield CI workflow template that this PR's new workflow delegates to.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'feat: add agent-shield.yml workflow for compliance' clearly describes the main change: adding a new workflow file for compliance purposes.
Linked Issues check	✅ Passed	The pull request successfully addresses issue #40 by adding the missing agent-shield.yml workflow file as required by the organization's compliance standards.
Out of Scope Changes check	✅ Passed	All changes are within scope: only the required agent-shield.yml workflow file was added to resolve the compliance finding with no extraneous modifications.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch claude/issue-40-20260408-2242

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[don-petry]

@don-petry — CI is running. This PR adds .github/workflows/agent-shield.yml (verbatim copy of the standards template) to resolve the compliance finding. Please review and merge when CI is green.

[Copilot]

Pull request overview

Adds the required AgentShield workflow stub to bring the repo into compliance with the org CI standards and resolve the “missing-agent-shield.yml” audit finding (Closes #40).

Changes:

• Added .github/workflows/agent-shield.yml thin caller workflow.
• Workflow delegates to the org-level reusable agent-shield-reusable.yml@v1 and triggers on push/pull_request to main.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[sonarqubecloud]

Quality Gate failed

Failed conditions
1 Security Hotspot

See analysis details on SonarQube Cloud