Rulesets & CODEOWNERS

CODEOWNERS

CODEOWNERS file This file defines the default code reviewers for the repository More information: https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-yo

# CODEOWNERS file
# This file defines the default code reviewers for the repository
# More information: https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners

# Default reviewer for all files in the repository
* @andresmontoyat

Ruleset Ci Templates Develop

ruleset ruleset-ci-templates-develop

{
  "name": "ci-templates \u2022 Protect develop",
  "target": "branch",
  "enforcement": "active",
  "conditions": {
    "ref_name": {
      "include": [
        "refs/heads/develop"
      ],
      "exclude": []
    }
  },
  "rules": [
    {
      "type": "deletion"
    },
    {
      "type": "non_fast_forward"
    },
    {
      "type": "pull_request",
      "parameters": {
        "dismiss_stale_reviews_on_push": true,
        "require_code_owner_review": false,
        "require_last_push_approval": false,
        "required_approving_review_count": 0,
        "required_review_thread_resolution": true,
        "allowed_merge_methods": [
          "squash"
        ]
      }
    }
  ],
  "bypass_actors": [
    {
      "actor_id": 5,
      "actor_type": "RepositoryRole",
      "bypass_mode": "pull_request"
    }
  ]
}

Ruleset Ci Templates Hardening

ruleset ruleset-ci-templates-hardening

{
  "name": "ci-templates • Hardening (develop + main)",
  "target": "branch",
  "enforcement": "active",
  "conditions": {
    "ref_name": {
      "include": [
        "refs/heads/develop",
        "refs/heads/main"
      ],
      "exclude": []
    }
  },
  "rules": [
    {
      "type": "required_signatures"
    },
    {
      "type": "required_status_checks",
      "parameters": {
        "strict_required_status_checks_policy": true,
        "required_status_checks": [
          {
            "context": "Lint workflows"
          },
          {
            "context": "Parse YAML"
          },
          {
            "context": "Templates pin a release"
          },
          {
            "context": "Forwarded inputs exist"
          },
          {
            "context": "One SHA per action"
          },
          {
            "context": "Commit messages / Lint Commit Messages"
          },
          {
            "context": "Every runnable job has a timeout"
          },
          {
            "context": "Templates declare concurrency"
          },
          {
            "context": "Script self-tests"
          }
        ]
      }
    }
  ],
  "bypass_actors": [
    {
      "actor_id": 5,
      "actor_type": "RepositoryRole",
      "bypass_mode": "pull_request"
    }
  ]
}

Ruleset Ci Templates Main

ruleset ruleset-ci-templates-main

{
  "name": "ci-templates \u2022 Protect main",
  "target": "branch",
  "enforcement": "active",
  "conditions": {
    "ref_name": {
      "include": [
        "refs/heads/main"
      ],
      "exclude": []
    }
  },
  "rules": [
    {
      "type": "deletion"
    },
    {
      "type": "non_fast_forward"
    },
    {
      "type": "pull_request",
      "parameters": {
        "dismiss_stale_reviews_on_push": true,
        "require_code_owner_review": false,
        "require_last_push_approval": false,
        "required_approving_review_count": 0,
        "required_review_thread_resolution": true,
        "allowed_merge_methods": [
          "merge"
        ]
      }
    }
  ],
  "bypass_actors": [
    {
      "actor_id": 5,
      "actor_type": "RepositoryRole",
      "bypass_mode": "pull_request"
    }
  ]
}

Ruleset Ci Templates Tag Alias

ruleset ruleset-ci-templates-tag-alias

{
  "name": "ci-templates • Floating major alias cannot be deleted",
  "target": "tag",
  "enforcement": "active",
  "conditions": {
    "ref_name": {
      "include": [
        "refs/tags/v[0-9]*"
      ],
      "exclude": [
        "refs/tags/v[0-9]*.[0-9]*.[0-9]*"
      ]
    }
  },
  "rules": [
    {
      "type": "deletion"
    }
  ],
  "bypass_actors": [
    {
      "actor_id": 5,
      "actor_type": "RepositoryRole",
      "bypass_mode": "always"
    }
  ]
}

Ruleset Ci Templates Tags

ruleset ruleset-ci-templates-tags

{
  "name": "ci-templates • Release tags are immutable",
  "target": "tag",
  "enforcement": "active",
  "conditions": {
    "ref_name": {
      "include": [
        "refs/tags/v[0-9]*.[0-9]*.[0-9]*"
      ],
      "exclude": []
    }
  },
  "rules": [
    {
      "type": "deletion"
    },
    {
      "type": "update"
    },
    {
      "type": "non_fast_forward"
    }
  ],
  "bypass_actors": [
    {
      "actor_id": 5,
      "actor_type": "RepositoryRole",
      "bypass_mode": "always"
    }
  ]
}

Ruleset Develop

ruleset ruleset-develop

{
  "name": "Java • Protect develop (PR-only, 2 approvals, linear, squash)",
  "target": "branch",
  "enforcement": "active",
  "conditions": {
    "ref_name": {
      "include": ["refs/heads/develop"],
      "exclude": []
    },
    "repository_name": {
      "include": ["codehunters-ms-*", "codehunters-sdk-*"],
      "exclude": ["codehunters-ms-managment"],
      "protected": false
    }
  },
  "rules": [
    { "type": "deletion" },
    { "type": "non_fast_forward" },
    { "type": "required_linear_history" },
    {
      "type": "pull_request",
      "parameters": {
        "dismiss_stale_reviews_on_push": true,
        "require_code_owner_review": false,
        "require_last_push_approval": true,
        "required_approving_review_count": 2,
        "required_review_thread_resolution": true,
        "allowed_merge_methods": ["squash"]
      }
    },
    {
      "type": "required_status_checks",
      "parameters": {
        "strict_required_status_checks_policy": true,
        "required_status_checks": [
          { "context": "validate / PR Quality Gates" }
        ]
      }
    }
  ],
  "bypass_actors": []
}

Ruleset Krakend Develop

ruleset ruleset-krakend-develop

{
  "name": "KrakenD • Protect develop (PR-only, 2 approvals, linear, squash)",
  "target": "branch",
  "enforcement": "evaluate",
  "conditions": {
    "ref_name": {
      "include": ["refs/heads/develop"],
      "exclude": []
    },
    "repository_name": {
      "include": ["codehunters-gw-*"],
      "exclude": [],
      "protected": false
    }
  },
  "rules": [
    { "type": "deletion" },
    { "type": "non_fast_forward" },
    { "type": "required_linear_history" },
    {
      "type": "pull_request",
      "parameters": {
        "dismiss_stale_reviews_on_push": true,
        "require_code_owner_review": false,
        "require_last_push_approval": true,
        "required_approving_review_count": 2,
        "required_review_thread_resolution": true,
        "allowed_merge_methods": ["squash"]
      }
    },
    {
      "type": "required_status_checks",
      "parameters": {
        "strict_required_status_checks_policy": true,
        "required_status_checks": [
          { "context": "validate / Test & Audit" }
        ]
      }
    }
  ],
  "bypass_actors": []
}

Ruleset Krakend Main

ruleset ruleset-krakend-main

{
  "name": "KrakenD • Protect main (PR-only, 2 approvals, merge commit)",
  "target": "branch",
  "enforcement": "evaluate",
  "conditions": {
    "ref_name": {
      "include": ["refs/heads/main"],
      "exclude": []
    },
    "repository_name": {
      "include": ["codehunters-gw-*"],
      "exclude": [],
      "protected": false
    }
  },
  "rules": [
    { "type": "deletion" },
    { "type": "non_fast_forward" },
    {
      "type": "pull_request",
      "parameters": {
        "dismiss_stale_reviews_on_push": true,
        "require_code_owner_review": false,
        "require_last_push_approval": true,
        "required_approving_review_count": 2,
        "required_review_thread_resolution": true,
        "allowed_merge_methods": ["merge"]
      }
    },
    {
      "type": "required_status_checks",
      "parameters": {
        "strict_required_status_checks_policy": true,
        "required_status_checks": [
          { "context": "validate / Test & Audit" }
        ]
      }
    }
  ],
  "bypass_actors": []
}

Ruleset Main

ruleset ruleset-main

{
  "name": "Java • Protect main (PR-only, 2 approvals, merge commit)",
  "target": "branch",
  "enforcement": "evaluate",
  "conditions": {
    "ref_name": {
      "include": ["refs/heads/main"],
      "exclude": []
    },
    "repository_name": {
      "include": ["codehunters-ms-*", "codehunters-sdk-*"],
      "exclude": ["codehunters-ms-managment"],
      "protected": false
    }
  },
  "rules": [
    { "type": "deletion" },
    { "type": "non_fast_forward" },
    {
      "type": "pull_request",
      "parameters": {
        "dismiss_stale_reviews_on_push": true,
        "require_code_owner_review": false,
        "require_last_push_approval": true,
        "required_approving_review_count": 2,
        "required_review_thread_resolution": true,
        "allowed_merge_methods": ["merge"]
      }
    },
    {
      "type": "required_status_checks",
      "parameters": {
        "strict_required_status_checks_policy": true,
        "required_status_checks": [
          { "context": "validate / PR Quality Gates" }
        ]
      }
    }
  ],
  "bypass_actors": []
}

Ruleset Tags

ruleset ruleset-tags

{
  "name": "Java • Protect release tags (vX.Y.Z immutable, restricted creation)",
  "target": "tag",
  "enforcement": "evaluate",
  "conditions": {
    "ref_name": {
      "include": ["refs/tags/v[0-9]*.[0-9]*.[0-9]*"],
      "exclude": []
    },
    "repository_name": {
      "include": ["codehunters-ms-*", "codehunters-sdk-*", "codehunters-gw-*"],
      "exclude": [],
      "protected": false
    }
  },
  "rules": [
    { "type": "creation" },
    { "type": "deletion" },
    { "type": "non_fast_forward" },
    { "type": "update" }
  ],
  "bypass_actors": [
    { "actor_id": 5, "actor_type": "RepositoryRole", "bypass_mode": "always" },
    { "actor_id": 15368, "actor_type": "Integration", "bypass_mode": "always" }
  ]
}