Files
computer-playbook/docs/contributing/tools/github/repository.md
T
kevinveenbirkenbachandClaude Opus 5.5 dd955a71a6 style(markdown): pin list markers to dash and convert every list
The 16.0.0 entry pkgmgr wrote on top of CHANGELOG.md uses "-" bullets
while every older entry uses "*". MD004's default "consistent" style takes
the marker of the first list in a file, so lint-markdown reported 400
MD004 findings in CHANGELOG.md and the pre-push gate refused the release
push.

MD004 is now pinned to "dash", the marker pkgmgr and the changelog skill
write, and make autoformat (markdownlint-cli2 --fix) converted the lists
of the 72 files that still used "*". Only list markers changed.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
2026-10-18 23:04:02 +02:00

1.3 KiB

Repository Settings 🔧

See also branch.md for branch protection rules.

Dependency Management 📦

Dependency Graph ❌

👉 Contributors may not have access to full dependency insights

Dependabot Alerts ❌

👉 Vulnerabilities may go unnoticed

Dependabot Security Updates ❌

👉 Contributors MUST update dependencies manually

Dependabot Version Updates ❌

👉 No automatic upgrade PRs


Code Scanning (Global) 🔬

CodeQL ✅

👉 Security issues may be detected automatically

Copilot Autofix ✅

👉 Suggested fixes may appear


Secret Protection 🔐

For GHCR authentication configuration see authentication.md.

Secret Scanning ❌

👉 Secrets may accidentally be committed

Push Protection ❌

👉 Commits with secrets are NOT blocked


Summary for Contributors 📋

Once enabled, you MUST:

  • Create a PR (no direct push)
  • Get 2 approvals
  • Get CODEOWNER approval (if applicable)
  • Resolve all comments
  • Re-approve after changes
  • Keep branch up-to-date
  • Use signed commits
  • Pass code scanning & quality checks

You MUST NOT:

  • Push directly to main
  • Force push
  • Merge without approvals

You MAY:

  • Create branches freely
  • Use merge commits

All rules above are currently enforced on main.