0 Fork 0

mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2026-11-09 12:17:13 +00:00

Files

T

kevinveenbirkenbachandClaude Sonnet 4.6 c48ee9ddbf docs(security): add GHCR authentication setup guide and cross-links

Document PAT creation, secret configuration, fork PR restrictions,
and troubleshooting. Link from ci.md and repository.md.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-08 22:39:23 +02:00

1.3 KiB

Raw Blame History

Repository Settings 🔧

See also branch.md for branch protection rules.

Dependency Management

Dependency Graph ❌

👉 Contributors may not have access to full dependency insights

Dependabot Alerts ❌

👉 Vulnerabilities may go unnoticed

Dependabot Security Updates ❌

👉 Contributors MUST update dependencies manually

Dependabot Version Updates ❌

👉 No automatic upgrade PRs

Code Scanning (Global)

CodeQL ✅

👉 Security issues may be detected automatically

Copilot Autofix ✅

👉 Suggested fixes may appear

Secret Protection

For GHCR authentication secrets (GHCR_PAT, GHCR_USERNAME) see ghcr.md.

Secret Scanning ❌

👉 Secrets may accidentally be committed

Push Protection ❌

👉 Commits with secrets are NOT blocked

Summary for Contributors

Once enabled, you MUST:

Create a PR (no direct push)
Get 2 approvals
Get CODEOWNER approval (if applicable)
Resolve all comments
Re-approve after changes
Keep branch up-to-date
Use signed commits
Pass code scanning & quality checks

You MUST NOT:

Push directly to main
Force push
Merge without approvals

You MAY:

Create branches freely
Use merge commits

All rules above are currently enforced on main.

1.3 KiB Raw Blame History