feat: cli cmd + action to copy repo rulesets

[kelly-sovacool]

Changes

• New CLI commands: list-rulesets and copy-ruleset
• New action: copy-ruleset and example workflow
• Expanded examples/copy-ruleset.yml with additional plausible triggers:
  • push (including first push scenarios such as repos created from templates)
  • repository_dispatch
  • schedule
• Updated the copy-ruleset docs/example to support non-manual runs using repository variables (RULESET_SOURCE_REPO, RULESET_NAME, optional RULESET_TARGET_REPO) and guarded execution when required values are missing

Useful for ensuring repos adhere to standard rulesets

Issues

NA

PR Checklist

(Strikethrough any points that are not applicable.)

• This comment contains a description of changes with justifications, with any relevant issues linked.
• Write unit tests for any new features, bug fixes, or other code changes.
• Update docs if there are any API changes.
• Update CHANGELOG.md with a short description of any user-facing changes and reference the PR number. Guidelines: https://keepachangelog.com/en/1.1.0/

[Copilot]

Pull request overview

Adds new GitHub ruleset tooling to this repo’s ccbr_actions CLI and composite action catalog, enabling teams to list and copy repository rulesets via the GitHub API to standardize governance across repositories.

Changes:

• Add GitHub API helpers list_rulesets() and copy_ruleset() plus unit tests.
• Expose new CLI commands list-rulesets and copy-ruleset with Click-based tests.
• Introduce a new composite action copy-ruleset with docs and an example workflow; update CHANGELOG and ignore rules for Quarto outputs.

Reviewed changes

Copilot reviewed 9 out of 10 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
src/ccbr_actions/github.py	Implements list_rulesets/copy_ruleset GitHub API helpers.
src/ccbr_actions/__main__.py	Adds Click CLI commands wiring for listing/copying rulesets.
tests/test_github.py	Adds unit tests for the new GitHub API helper functions.
tests/test_cli.py	Adds CLI tests for list-rulesets and copy-ruleset.
copy-ruleset/action.yml	New composite action that runs copy_ruleset() in a workflow step.
copy-ruleset/README.qmd	New action documentation and usage examples.
examples/copy-ruleset.yml	Example workflow to invoke the new action.
CHANGELOG.md	Adds a development-version entry for the new feature(s).
.gitignore	Ignores Quarto and Posit artifacts.
SECURITY.md	Minor formatting cleanup.

[codecov]

Codecov Report

❌ Patch coverage is 97.50000% with 1 line in your changes missing coverage. Please review.
✅ Project coverage is 97.81%. Comparing base (24a3587) to head (a5344f5).

Files with missing lines	Patch %	Lines
src/ccbr_actions/__main__.py	95.23%	1 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #183      +/-   ##
==========================================
+ Coverage   94.43%   97.81%   +3.38%     
==========================================
  Files          11       11              
  Lines         557      595      +38     
==========================================
+ Hits          526      582      +56     
+ Misses         31       13      -18     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[kelly-sovacool]

@copilot add other triggers, e.g. could this workflow run when a repo is created from a template for the first time? what other plausible triggers could be useful?

[Copilot]

Implemented in a565009.

The example now includes additional triggers:

• push on main/master (covers the initial push when a repo is created from a template)
• repository_dispatch (for org-level automation)
• schedule (for periodic ruleset sync)

I also added fallback repository variables (RULESET_SOURCE_REPO, RULESET_TARGET_REPO, RULESET_NAME) so non-manual triggers can run without workflow_dispatch inputs.