You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Add required-ready checks for organization docs - #2
Give the public organization community-health repository an always-on check before any PR can merge.
Changes
Validate that README.md and SECURITY.md are present and that README links to SECURITY.md.
Check changed lines for whitespace errors on every PR and main push.
Use a pinned checkout action and read-only permissions.
Verification
actionlint .github/workflows/docs.yml
Local document check and staged diff check passed.
Independent review remains required. After this PR's check succeeds, the docs job can become a strict required check. Existing PR #1 will need to pick up the workflow before it can merge.
Note
Low Risk
Adds CI-only validation and whitespace checks with read-only permissions; no runtime or application code changes.
Overview
Adds a new GitHub Actions workflow Organization docs that runs on every pull request and on pushes to main, intended to become a merge-blocking required check for this community-health repo.
The docs job validates that README.md and SECURITY.md exist and are non-empty, and that README.md visibly includes a Markdown table link to ./SECURITY.md (HTML comments and fenced code blocks are stripped before matching). It also runs git diff --check on PR diffs or push ranges to catch whitespace errors in changed lines.
The workflow uses read-onlycontents permissions, a pinnedactions/checkout v4 SHA, full history checkout, and a 5-minute timeout.
Reviewed by Cursor Bugbot for commit 7dcd7bb. Bugbot is set up for automated code reviews on this repo. Configure here.
Prevent image and inline-code syntax from bypassing SECURITY link check
.github/workflows/docs.yml:48
This matcher accepts Markdown that does not render a navigable link. For example, both  (an image) and an inline-code span containing example: [Security](./SECURITY.md) satisfy the regex, so the required check can pass after the actual SECURITY link is removed. Parse link nodes, or strip inline-code spans and explicitly exclude image syntax before matching.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
Purpose
Give the public organization community-health repository an always-on check before any PR can merge.
Changes
Verification
actionlint .github/workflows/docs.ymlIndependent review remains required. After this PR's check succeeds, the
docsjob can become a strict required check. Existing PR #1 will need to pick up the workflow before it can merge.Note
Low Risk
Adds CI-only validation and whitespace checks with read-only permissions; no runtime or application code changes.
Overview
Adds a new GitHub Actions workflow
Organization docsthat runs on every pull request and on pushes tomain, intended to become a merge-blocking required check for this community-health repo.The
docsjob validates thatREADME.mdandSECURITY.mdexist and are non-empty, and thatREADME.mdvisibly includes a Markdown table link to./SECURITY.md(HTML comments and fenced code blocks are stripped before matching). It also runsgit diff --checkon PR diffs or push ranges to catch whitespace errors in changed lines.The workflow uses read-only
contentspermissions, a pinnedactions/checkoutv4 SHA, full history checkout, and a 5-minute timeout.Reviewed by Cursor Bugbot for commit 7dcd7bb. Bugbot is set up for automated code reviews on this repo. Configure here.