- pr.yml: Conventional Commit title, DCO, dependency review
- security.yml: gitleaks (full history), Trivy + OSV-Scanner (malicious
packages), zizmor + actionlint; all pinned by SHA or digest
- codeql.yml: security-extended with a high-severity gate
- this repo's CI, Scorecard, Dependabot, CODEOWNERS
- templates for repository files and caller workflows
- tools/Test-RepoConformance.ps1: checks K22-REPO-* and K22-CI-* via the
GitHub API and a local clone, honoring the exception register
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: James Maes <james@kof22.com>
