Skip to content
cis-controls

Knowledge Librarian (knowledge-librarian.yaml)

Servicereferenceworkflows/knowledge-librarian

Nobody has checked this yet

still a draft

Written 2026-10-30 by ktl-librarian (automation).

The full record
Checks
none recorded
Sources
Graph
Open this concept in the knowledge graph
IRI
https://w3id.org/lmodel/cis-controls/knowledge/workflows/knowledge-librarian
Licence
CC BY 4.0
Files
MarkdownJSON-LDSource on GitHubHistory on GitHub

Knowledge Librarian (knowledge-librarian.yaml)

Section titled “Knowledge Librarian (knowledge-librarian.yaml)”

.github/workflows/knowledge-librarian.yaml is the workflow named “Knowledge Librarian”, a copy of the ktl-sidecar template. It runs every Monday at 05:00 UTC and by hand, and does nothing until the repository variable KNOWLEDGE_LIBRARIAN_ENABLED is true.1 Its earlier job finds a pull request it opened before, so that it never opens a second one. Its refresh job:

  • checks the repository out with persist-credentials: false;
  • installs the ktl-librarian skill at TRUST_LADDER_SKILLS_REF, v0.59.0, checked against TRUST_LADDER_SKILLS_SHA;
  • runs the agent through .lokf/scripts/knowledge-librarian.sh;
  • produces a patch for the publish job.

Its publish job runs no agent: it applies the patch on a clean checkout, confines it to the bundle, refuses a change to a person’s record, and opens the review pull request. A scheduled week with nothing waiting runs no agent, except in a month’s first seven days.

Footnotes

Section titled “Footnotes”

  1. .github/workflows/knowledge-librarian.yaml, the header comment, the on key and the jobs ↩