fix: restore double .github path in agent-shield and claude reusable refs

[don-petry]

Summary

• Root cause: Commit 956b396 incorrectly removed the second .github segment from the uses: paths in agent-shield.yml and claude.yml, breaking both workflows since April 21, 2026
• Symptom: Every AgentShield and Claude Code run completes in 0 seconds with 0 jobs — GitHub's "workflow file issue" indicator
• Fix: Restore the correct double-.github path format that was working before the bad "fix"

Why double .github?

The GitHub Actions path format for calling a reusable in the org's .github repository is:

{owner}/{repo}/.github/workflows/{file}.yml@{ref}
         ↑                ↑
    repo name = .github   path within repo = .github/workflows/

So for petry-projects/.github:

• ✅ petry-projects/.github/.github/workflows/agent-shield-reusable.yml@v1
• ❌ petry-projects/.github/workflows/agent-shield-reusable.yml@v1

The standards/workflows/ templates and scripts/compliance-audit.sh (lines 225–234) already document the double .github as correct. This PR aligns the actual .github/workflows/ caller stubs with what the standards say.

Test plan

• AgentShield run starts jobs (no longer 0s / 0 jobs)
• Claude Code run starts jobs
• Both pass their respective checks on this PR

🤖 Generated with Claude Code

[coderabbitai]

Warning

Rate limit exceeded

@don-petry has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 41 minutes and 44 seconds before requesting another review.

To keep reviews running without waiting, you can enable usage-based add-on for your organization. This allows additional reviews beyond the hourly cap. Account admins can enable it under billing.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 8e05e507-0e7e-43ab-bb2d-fd27000ce8a0

📥 Commits

Reviewing files that changed from the base of the PR and between af066a7 and 6309648.

📒 Files selected for processing (2)

• .github/workflows/agent-shield.yml
• .github/workflows/claude.yml

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch claude/happy-fermat-d6fe62

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Review rate limit: 0/1 reviews remaining, refill in 41 minutes and 44 seconds.}

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[Copilot]

Pull request overview

Restores the correct reusable-workflow uses: path syntax (double .github) for org-level workflow caller stubs so the referenced reusable workflows can be resolved and runs no longer show “0s / 0 jobs” due to a workflow file issue.

Changes:

• Fix .github/workflows/agent-shield.yml to call the reusable via petry-projects/.github/.github/workflows/...
• Fix .github/workflows/claude.yml to call the reusable via petry-projects/.github/.github/workflows/...

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
.github/workflows/claude.yml	Restores the correct reusable-workflow path for Claude Code’s caller stub.
.github/workflows/agent-shield.yml	Restores the correct reusable-workflow path for AgentShield’s caller stub.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[don-petry]

Good catch on the inconsistency — it's intentional. This .github org repo itself uses @main so it always exercises the latest version of the reusable (since this IS the canonical source). Child repos that copy the stub from standards/workflows/claude.yml use @v1 for stability. The pre-956b396 state also used @main here, so this PR is a pure revert of the broken single-.github change.

[don-petry]

@coderabbitai review

[coderabbitai]

✅ Actions performed

Review triggered.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.