#1 Initial content

.claude/CLAUDE.md

@@ -0,0 +1,29 @@
+# CLAUDE.md
+
+This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+
+## Repository Purpose
+
+This repository is currently empty. It exists as a starting point — the workflows,
+linter configs, and contribution scaffolding under `.github/`, `.vscode/`, and `.claude/`
+are the canonical Senzing baseline, but no project code lives here yet.
+
+When work begins, replace this section with:
+
+- A short description of what the repository builds or contains.
+- Build / test / lint commands (typically driven by `make`).
+- Notable architecture decisions or external dependencies a contributor needs to know.
+- Any CI/CD workflows specific to this project (beyond the standard add-labels /
+  add-to-project / dependabot / lint-workflows / spellcheck baseline that's already wired up).
+
+## CI/CD Workflows (baseline)
+
+- `add-labels-standardized.yaml` — labels new/reopened issues.
+- `add-to-project-senzing.yaml` / `add-to-project-senzing-dependabot.yaml` — adds issues
+  and Dependabot PRs to the Senzing project board.
+- `claude-pr-review.yaml` — runs Claude review on PR open/synchronize.
+- `dependabot-approve-and-merge.yaml` — auto-approves and merges Dependabot PRs.
+- `link-issues-to-pr-post-merge.yaml` — closes referenced issues when a PR merges.
+- `lint-workflows.yaml` — super-linter pass over `.github/workflows`.
+- `move-pr-to-done-dependabot.yaml` — moves merged Dependabot PRs to "Done" on the board.
+- `spellcheck.yaml` — cspell over the repo.

.claude/commands/senzing.md

@@ -0,0 +1,3 @@
+# Senzing
+
+- Perform the steps specified by <https://raw.githubusercontent.com/senzing-factory/claude/refs/tags/v1/commands/senzing.md>

.claude/settings.json

@@ -0,0 +1,3 @@
+{
+  "includeCoAuthoredBy": false
+}

.github/CODEOWNERS

@@ -0,0 +1,5 @@
+# Default code owner
+
+* @Senzing/senzing-community
+
+/.github/ @Senzing/senzing-devsecops

.github/dependabot.yml

@@ -0,0 +1,16 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    assignees:
+      - "kernelsam"
+    cooldown:
+      default-days: 21
+      exclude:
+        - "senzing-factory/*"
+    directory: "/"
+    groups:
+      senzing-factory:
+        patterns:
+          - "senzing-factory/*"
+    schedule:
+      interval: "daily"

.github/linters/.jscpd.json

@@ -0,0 +1,3 @@
+{
+  "threshold": 4
+}

.github/linters/.yaml-lint.yml

@@ -0,0 +1,12 @@
+# Extends the default yamllint config by adjusting some options.
+extends: default
+
+rules:
+  comments:
+    min-spaces-from-content: 1
+  document-start: disable
+  comments-indentation: disable
+  line-length:
+    level: warning
+    allow-non-breakable-inline-mappings: true
+  truthy: disable

.github/linters/zizmor.yaml

@@ -0,0 +1,7 @@
+rules:
+  secrets-outside-env:
+    disable: true
+  unpinned-uses:
+    config:
+      policies:
+        "*": ref-pin

.github/workflows/add-labels-standardized.yaml

@@ -0,0 +1,20 @@
+name: Add labels standardized
+
+on:
+  issues:
+    types:
+      - opened
+      - reopened
+
+permissions: {}
+
+jobs:
+  add-issue-labels:
+    permissions:
+      issues: write
+    secrets:
+      ORG_MEMBERSHIP_TOKEN: ${{ secrets.ORG_MEMBERSHIP_TOKEN }}
+      MEMBERS: ${{ secrets.SENZING_MEMBERS }}
+      SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }}
+      SLACK_CHANNEL: ${{ secrets.SLACK_CHANNEL }}
+    uses: senzing-factory/build-resources/.github/workflows/add-labels-to-issue.yaml@v4

.github/workflows/add-to-project-senzing-dependabot.yaml

@@ -0,0 +1,19 @@
+name: Add to project senzing github organization dependabot
+
+on:
+  pull_request:
+    branches: [main]
+
+permissions: {}
+
+jobs:
+  add-to-project-dependabot:
+    permissions:
+      repository-projects: write
+    secrets:
+      PROJECT_RW_TOKEN: ${{ secrets.SENZING_GITHUB_PROJECT_RW_TOKEN }}
+      SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }}
+      SLACK_CHANNEL: ${{ secrets.SLACK_CHANNEL }}
+    uses: senzing-factory/build-resources/.github/workflows/add-to-project-dependabot.yaml@v4
+    with:
+      project: ${{ vars.SENZING_GITHUB_ORGANIZATION_PROJECT }}

.github/workflows/add-to-project-senzing.yaml

@@ -0,0 +1,22 @@
+name: Add to project senzing github organization
+
+on:
+  issues:
+    types:
+      - opened
+      - reopened
+
+permissions: {}
+
+jobs:
+  add-to-project:
+    permissions:
+      repository-projects: write
+    secrets:
+      PROJECT_RW_TOKEN: ${{ secrets.SENZING_GITHUB_PROJECT_RW_TOKEN }}
+      SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }}
+      SLACK_CHANNEL: ${{ secrets.SLACK_CHANNEL }}
+    uses: senzing-factory/build-resources/.github/workflows/add-to-project.yaml@v4
+    with:
+      project-number: ${{ vars.SENZING_GITHUB_ORGANIZATION_PROJECT }}
+      org: ${{ vars.SENZING_GITHUB_ACCOUNT_NAME }}

.github/workflows/claude-pr-review.yaml

@@ -0,0 +1,20 @@
+name: Claude PR Review
+
+on:
+  pull_request:
+    types: [opened, synchronize]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref_name }}
+  cancel-in-progress: true
+
+permissions: {}
+
+jobs:
+  review:
+    uses: senzing-factory/build-resources/.github/workflows/claude-pull-request-review.yaml@v4
+    permissions:
+      contents: read
+      pull-requests: write
+    secrets:
+      CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}

.github/workflows/dependabot-approve-and-merge.yaml

@@ -0,0 +1,20 @@
+name: Dependabot approve and merge
+
+on:
+  pull_request:
+    branches: [main]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref_name }}
+  cancel-in-progress: true
+
+permissions: {}
+
+jobs:
+  dependabot-approve-and-merge:
+    permissions:
+      contents: write
+      pull-requests: write
+    secrets:
+      CODEOWNER_PR_RW_TOKEN: ${{ secrets.SENZING_GITHUB_CODEOWNER_PR_RW_TOKEN }}
+    uses: senzing-factory/build-resources/.github/workflows/dependabot-approve-and-merge.yaml@v4

.github/workflows/link-issues-to-pr-post-merge.yaml

@@ -0,0 +1,16 @@
+name: Link Issues to PR Post Merge
+
+on:
+  pull_request:
+    types: [closed]
+
+permissions: {}
+
+jobs:
+  link-issues:
+    # Only run if PR was actually merged (not just closed)
+    if: github.event.pull_request.merged == true
+    permissions:
+      pull-requests: write
+      contents: read
+    uses: senzing-factory/build-resources/.github/workflows/link-issues-to-pull-request-post-merge.yaml@v4

.github/workflows/lint-workflows.yaml

@@ -0,0 +1,20 @@
+name: Lint workflows
+
+on:
+  pull_request:
+    branches: [main]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref_name }}
+  cancel-in-progress: true
+
+permissions: {}
+
+jobs:
+  lint-workflows:
+    permissions:
+      contents: read
+      packages: read
+      pull-requests: write
+      statuses: write
+    uses: senzing-factory/build-resources/.github/workflows/lint-workflows.yaml@v4

.github/workflows/move-pr-to-done-dependabot.yaml

@@ -0,0 +1,18 @@
+name: Move pr to done dependabot
+
+on:
+  pull_request:
+    branches: [main]
+    types: [closed]
+
+permissions: {}
+
+jobs:
+  move-pr-to-done-dependabot:
+    permissions:
+      repository-projects: write
+    secrets:
+      PROJECT_RW_TOKEN: ${{ secrets.SENZING_GITHUB_PROJECT_RW_TOKEN }}
+    uses: senzing-factory/build-resources/.github/workflows/move-pr-to-done-dependabot.yaml@v4
+    with:
+      project: ${{ vars.SENZING_GITHUB_ORGANIZATION_PROJECT }}

.github/workflows/spellcheck.yaml

@@ -0,0 +1,17 @@
+name: Spellcheck
+
+on:
+  pull_request:
+    branches: [main]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref_name }}
+  cancel-in-progress: true
+
+permissions: {}
+
+jobs:
+  spellcheck:
+    permissions:
+      contents: read
+    uses: senzing-factory/build-resources/.github/workflows/cspell.yaml@v4

.vscode/cspell.json

@@ -0,0 +1,17 @@
+{
+  "version": "0.2",
+  "language": "en",
+  "words": [
+    "bootcamp",
+    "CCLA",
+    "cooldown",
+    "esbenp",
+    "ICLA",
+    "kernelsam",
+    "Senzing",
+    "senzingsdk",
+    "trixie",
+    "zizmor"
+  ],
+  "ignorePaths": [".git/**"]
+}

.vscode/settings.json

@@ -0,0 +1,12 @@
+{
+  "[json]": {
+    "editor.defaultFormatter": "esbenp.prettier-vscode"
+  },
+  "[markdown]": {
+    "editor.defaultFormatter": "esbenp.prettier-vscode"
+  },
+  "[yaml]": {
+    "editor.defaultFormatter": "esbenp.prettier-vscode"
+  },
+  "editor.formatOnSave": true
+}

CHANGELOG.md

@@ -0,0 +1,14 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The changelog format is based on [Keep a Changelog] and [CommonMark].
+This project adheres to [Semantic Versioning].
+
+## [Unreleased]
+
+### Changed in Unreleased
+
+[CommonMark]: https://commonmark.org/
+[Keep a Changelog]: https://keepachangelog.com/
+[Semantic Versioning]: https://semver.org/