ci: add link checking, maintainer gate, and contributor reputation check - #19
Merged
Conversation
- links.yml: lychee over README.md on PRs touching it plus a weekly link-rot sweep; 403/429 accepted (bot-hostile sites), SPA anchors excluded. - require-maintainer-approval.yml: the fixed gate (re-evaluates on review events, head-SHA-matched approvals, paginated) ported from agentrust-io/.github#8. - contributor-check.yml: org reputation check with the .github checkout pinned by commit SHA. The repo previously had no CI: community PRs merged with no link validation or review gate. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
…fault) Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
- CSA MCP Security Resource Center moved to modelcontextprotocol-security.io - CyberSecEval directory renamed to CybersecurityBenchmarks in PurpleLlama - Anthropic zero-trust URL never resolved; replaced with the real Trustworthy Agents in Practice research page and an accurate description - Tuning Engines repo was deleted upstream; entry removed Also pass GITHUB_TOKEN to lychee: API resolution avoids rate-limit flakiness and covers org repos that are private until launch. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
The repo-scoped GITHUB_TOKEN cannot see other private repos in the org, so the three pre-launch links 404 in CI until the 2026-06-23 launch (dated removal note in the config). aisafety.camp regularly exceeds CI timeouts despite being alive. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The repo had no CI: community PRs merged with no link validation, review gate, or submitter screening. This adds the three workflows the other org repos carry, in their fixed/pinned forms:
The lychee run on this PR doubles as the first full link sweep of the README.
Generated with Claude Code