mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-09 12:17:13 +00:00
Environment TestandClaude Sonnet 4.6
5c1a963d30
- Move flow/security/ghcr.md to tools/ghcr/authentication.md - Move flow/security/mirror-cleanup.md to tools/ghcr/cleanup.md - Move flow/security/branch.md to tools/github/branch.md - Move flow/security/repository.md to tools/github/repository.md - Move code/frameworks/ansible.md to tools/ansible.md - Merge code/frameworks/Makefile.md into tools/make.md and extract file rules to artefact/files/makefile.md - Rename tools/makefile.md to tools/make.md - Add .github/workflows/images-mirror-cleanup.yml for manual GHCR cleanup - Apply documentation.md standards: emojis on headlines, no em dashes, filename link text - Fix all cross-references broken by directory restructuring Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
76 lines
1.3 KiB
Markdown
76 lines
1.3 KiB
Markdown
# Repository Settings 🔧
|
|
|
|
See also [branch.md](branch.md) for branch protection rules.
|
|
|
|
## Dependency Management 📦
|
|
|
|
### Dependency Graph ❌
|
|
|
|
👉 Contributors may not have access to full dependency insights
|
|
|
|
### Dependabot Alerts ❌
|
|
|
|
👉 Vulnerabilities may go unnoticed
|
|
|
|
### Dependabot Security Updates ❌
|
|
|
|
👉 Contributors MUST update dependencies manually
|
|
|
|
### Dependabot Version Updates ❌
|
|
|
|
👉 No automatic upgrade PRs
|
|
|
|
---
|
|
|
|
## Code Scanning (Global) 🔬
|
|
|
|
### CodeQL ✅
|
|
|
|
👉 Security issues may be detected automatically
|
|
|
|
### Copilot Autofix ✅
|
|
|
|
👉 Suggested fixes may appear
|
|
|
|
---
|
|
|
|
## Secret Protection 🔐
|
|
|
|
For GHCR authentication configuration see [authentication.md](../ghcr/authentication.md).
|
|
|
|
### Secret Scanning ❌
|
|
|
|
👉 Secrets may accidentally be committed
|
|
|
|
### Push Protection ❌
|
|
|
|
👉 Commits with secrets are NOT blocked
|
|
|
|
---
|
|
|
|
# Summary for Contributors 📋
|
|
|
|
Once enabled, you MUST:
|
|
|
|
* Create a PR (no direct push)
|
|
* Get 2 approvals
|
|
* Get CODEOWNER approval (if applicable)
|
|
* Resolve all comments
|
|
* Re-approve after changes
|
|
* Keep branch up-to-date
|
|
* Use signed commits
|
|
* Pass code scanning & quality checks
|
|
|
|
You MUST NOT:
|
|
|
|
* Push directly to main
|
|
* Force push
|
|
* Merge without approvals
|
|
|
|
You MAY:
|
|
|
|
* Create branches freely
|
|
* Use merge commits
|
|
|
|
All rules above are **currently enforced** on `main`.
|