DocSync AI - actions and workflow

[akash-deriv]

DocSync AI - Automated Documentation Updates

Adds a GitHub Action that automatically keeps documentation in sync with code changes using Claude AI.

What it does:

• Monitors merged PRs and analyzes code changes
• Uses Claude 3.7 Sonnet to intelligently update README.md and CLAUDE.md files
• Creates documentation PRs automatically with the updates.

Usage:
Trigger on PR merge events to keep docs current without manual updates.

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 2 package(s) with unknown licenses.

See the Details below.

License Issues

.github/workflows/docsync-ai.yml

Package	Version	License	Issue Type
deriv-com/shared-actions/.github/actions/docsync_ai	master	Null	Unknown License
deriv-com/shared-actions/.github/actions/docsync_ai_comment	master	Null	Unknown License

OpenSSF Scorecard

Package	Version	Score	Details
actions/actions/checkout	4.*.*	🟢 6.4	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Maintained 🟢 5 7 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Binary-Artifacts 🟢 10 no binaries found in the repo CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Packaging ⚠️ -1 packaging workflow not detected Pinned-Dependencies 🟢 3 dependency not pinned by hash detected -- score normalized to 3 Signed-Releases ⚠️ -1 no releases found Security-Policy 🟢 9 security policy file detected Branch-Protection 🟢 6 branch protection is not maximal on development and all release branches Vulnerabilities 🟢 7 3 existing vulnerabilities detected SAST 🟢 8 SAST tool detected but not run on all commits
actions/deriv-com/shared-actions/.github/actions/docsync_ai	master	Unknown	Unknown
actions/deriv-com/shared-actions/.github/actions/docsync_ai_comment	master	Unknown	Unknown

Scanned Manifest Files

.github/workflows/docsync-ai.yml

• actions/checkout@4.*.*
• deriv-com/shared-actions/.github/actions/docsync_ai@master
• deriv-com/shared-actions/.github/actions/docsync_ai_comment@master