mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 02:54:26 +00:00
The 16.0.0 entry pkgmgr wrote on top of CHANGELOG.md uses "-" bullets while every older entry uses "*". MD004's default "consistent" style takes the marker of the first list in a file, so lint-markdown reported 400 MD004 findings in CHANGELOG.md and the pre-push gate refused the release push. MD004 is now pinned to "dash", the marker pkgmgr and the changelog skill write, and make autoformat (markdownlint-cli2 --fix) converted the lists of the 72 files that still used "*". Only list markers changed. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
1.3 KiB
1.3 KiB
Repository Settings 🔧
See also branch.md for branch protection rules.
Dependency Management 📦
Dependency Graph ❌
👉 Contributors may not have access to full dependency insights
Dependabot Alerts ❌
👉 Vulnerabilities may go unnoticed
Dependabot Security Updates ❌
👉 Contributors MUST update dependencies manually
Dependabot Version Updates ❌
👉 No automatic upgrade PRs
Code Scanning (Global) 🔬
CodeQL ✅
👉 Security issues may be detected automatically
Copilot Autofix ✅
👉 Suggested fixes may appear
Secret Protection 🔐
For GHCR authentication configuration see authentication.md.
Secret Scanning ❌
👉 Secrets may accidentally be committed
Push Protection ❌
👉 Commits with secrets are NOT blocked
Summary for Contributors 📋
Once enabled, you MUST:
- Create a PR (no direct push)
- Get 2 approvals
- Get CODEOWNER approval (if applicable)
- Resolve all comments
- Re-approve after changes
- Keep branch up-to-date
- Use signed commits
- Pass code scanning & quality checks
You MUST NOT:
- Push directly to main
- Force push
- Merge without approvals
You MAY:
- Create branches freely
- Use merge commits
All rules above are currently enforced on main.