mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 19:01:54 +00:00
kevinveenbirkenbachandClaude Opus 5.5
dd955a71a6
The 16.0.0 entry pkgmgr wrote on top of CHANGELOG.md uses "-" bullets while every older entry uses "*". MD004's default "consistent" style takes the marker of the first list in a file, so lint-markdown reported 400 MD004 findings in CHANGELOG.md and the pre-push gate refused the release push. MD004 is now pinned to "dash", the marker pkgmgr and the changelog skill write, and make autoformat (markdownlint-cli2 --fix) converted the lists of the 72 files that still used "*". Only list markers changed. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
76 lines
1.3 KiB
Markdown
76 lines
1.3 KiB
Markdown
# Repository Settings 🔧
|
|
|
|
See also [branch.md](branch/security.md) for branch protection rules.
|
|
|
|
## Dependency Management 📦
|
|
|
|
### Dependency Graph ❌
|
|
|
|
👉 Contributors may not have access to full dependency insights
|
|
|
|
### Dependabot Alerts ❌
|
|
|
|
👉 Vulnerabilities may go unnoticed
|
|
|
|
### Dependabot Security Updates ❌
|
|
|
|
👉 Contributors MUST update dependencies manually
|
|
|
|
### Dependabot Version Updates ❌
|
|
|
|
👉 No automatic upgrade PRs
|
|
|
|
---
|
|
|
|
## Code Scanning (Global) 🔬
|
|
|
|
### CodeQL ✅
|
|
|
|
👉 Security issues may be detected automatically
|
|
|
|
### Copilot Autofix ✅
|
|
|
|
👉 Suggested fixes may appear
|
|
|
|
---
|
|
|
|
## Secret Protection 🔐
|
|
|
|
For GHCR authentication configuration see [authentication.md](../ghcr/authentication.md).
|
|
|
|
### Secret Scanning ❌
|
|
|
|
👉 Secrets may accidentally be committed
|
|
|
|
### Push Protection ❌
|
|
|
|
👉 Commits with secrets are NOT blocked
|
|
|
|
---
|
|
|
|
## Summary for Contributors 📋
|
|
|
|
Once enabled, you MUST:
|
|
|
|
- Create a PR (no direct push)
|
|
- Get 2 approvals
|
|
- Get CODEOWNER approval (if applicable)
|
|
- Resolve all comments
|
|
- Re-approve after changes
|
|
- Keep branch up-to-date
|
|
- Use signed commits
|
|
- Pass code scanning & quality checks
|
|
|
|
You MUST NOT:
|
|
|
|
- Push directly to main
|
|
- Force push
|
|
- Merge without approvals
|
|
|
|
You MAY:
|
|
|
|
- Create branches freely
|
|
- Use merge commits
|
|
|
|
All rules above are **currently enforced** on `main`.
|