mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-08 11:46:35 +00:00
- Move flow/security/ghcr.md to tools/ghcr/authentication.md - Move flow/security/mirror-cleanup.md to tools/ghcr/cleanup.md - Move flow/security/branch.md to tools/github/branch.md - Move flow/security/repository.md to tools/github/repository.md - Move code/frameworks/ansible.md to tools/ansible.md - Merge code/frameworks/Makefile.md into tools/make.md and extract file rules to artefact/files/makefile.md - Rename tools/makefile.md to tools/make.md - Add .github/workflows/images-mirror-cleanup.yml for manual GHCR cleanup - Apply documentation.md standards: emojis on headlines, no em dashes, filename link text - Fix all cross-references broken by directory restructuring Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
1.3 KiB
1.3 KiB
Repository Settings 🔧
See also branch.md for branch protection rules.
Dependency Management 📦
Dependency Graph ❌
👉 Contributors may not have access to full dependency insights
Dependabot Alerts ❌
👉 Vulnerabilities may go unnoticed
Dependabot Security Updates ❌
👉 Contributors MUST update dependencies manually
Dependabot Version Updates ❌
👉 No automatic upgrade PRs
Code Scanning (Global) 🔬
CodeQL ✅
👉 Security issues may be detected automatically
Copilot Autofix ✅
👉 Suggested fixes may appear
Secret Protection 🔐
For GHCR authentication configuration see authentication.md.
Secret Scanning ❌
👉 Secrets may accidentally be committed
Push Protection ❌
👉 Commits with secrets are NOT blocked
Summary for Contributors 📋
Once enabled, you MUST:
- Create a PR (no direct push)
- Get 2 approvals
- Get CODEOWNER approval (if applicable)
- Resolve all comments
- Re-approve after changes
- Keep branch up-to-date
- Use signed commits
- Pass code scanning & quality checks
You MUST NOT:
- Push directly to main
- Force push
- Merge without approvals
You MAY:
- Create branches freely
- Use merge commits
All rules above are currently enforced on main.