Add workflow to audit chef org repos for ci-main-pull-request-stub.yml v1.0.5+

[Copilot]

No existing mechanism to identify which chef org repos have adopted ci-main-pull-request-stub.yml at a minimum version threshold.

Changes

• New workflow .github/workflows/ci-org-stub-version-report.yml — workflow_dispatch-triggered audit that:

  • Paginates gh api orgs/chef/repos (100/page) to enumerate all org repos
  • For each repo, fetches .github/workflows/ci-main-pull-request-stub.yml via the Contents API
  • Extracts STUB_VERSION via regex (handles double-quoted and unquoted YAML values)
  • Compares versions using sort -V for correct semver ordering
  • Emits a per-repo log and a final summary split into >= 1.0.5 (MATCH) and < 1.0.5 (LOWER) buckets

• Uses secrets.GH_TOKEN (PAT) rather than GITHUB_TOKEN — org-wide repo enumeration requires elevated scope beyond the default repo-scoped token.

Example output

MATCH: chef-360-platform - STUB_VERSION=1.0.7
LOWER: mixlib-cli - STUB_VERSION=1.0.3
...
============================== SUMMARY ==============================
Total repos scanned: 142

Repos with .github/workflows/ci-main-pull-request-stub.yml at STUB_VERSION >= 1.0.5 (12):
  - chef-360-platform (1.0.7)
  - ...

Repos with .github/workflows/ci-main-pull-request-stub.yml at STUB_VERSION < 1.0.5 (3):
  - mixlib-cli (1.0.3)
  - ...

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.