# Repository settings

All these settings are applied to this repository.

| Setting | Value | Info |
|-|-|-|
| Allow merge commits | `enabled` | Default to pull request title and description |
| Allow squash merging | `disabled` | |
| Allow rebase merging | `disabled` | |
| Always suggest updating pull request branches | `enabled` | |
| Allow auto-merge | `enabled` | |
| Automatically delete head branches | `enabled` | |
| Projects | `disabled` | |
| Issues | `disabled` | |
| Allow forking | `enabled` | |

## Add collaborators

Default GitHub teams will be added as collaborator in the repositories granting access to all project members to contribute to the onboarded repositories.

| Team | Role |
|-|-|
| [oauth-proxy-contributors](https://github.com/orgs/philips-forks/teams/oauth-proxy-contributors) | Maintain |

## Create protection rules

These are the protection rules for the `master` and `edi-foundation-integration` branches in order to secury and standarize the way of working.

| Rules | master | edi-foundation-integration | Info |
|-|-|-|-|
| Require a pull request before merging | `Enabled` | `Enabled` | N/A |
| Require approvals | `1` | `1` | N/A |
| Dismiss stale pull request approvals when new commits are pushed | `Enabled` | `Enabled` | N/A |
| Require review from Code Owners | `Enabled` | `Enabled`| N/A |
|Restrict who can dismiss pull request reviews | `Disabled` | `Disabled` | N/A |
| Allow specified actors to bypass required pull requests | `Disabled` | `Disabled` | N/A |
| Require approval of the most recent reviewable push | `Enabled` | `Disabled`| N/A |
| Require status checks to pass before merging | `Enabled` | `Enabled`| N/A |
| Require branches to be up to date before merging | `Disabled` | `Enabled`| N/A |
| Require conversation resolution before merging | `Enabled` | `Enabled`| N/A |
| Require signed commits | `Enabled` | `Enabled`| N/A |
| Require linear history | `Disabled` | `Disabled` | N/A |
| Require merge queue | `Disabled` | `Disabled` | N/A |
| Require deployments to succeed before merging | `Disabled` | `Disabled` | N/A |
| Lock branch | `Enabled` | `Disabled` | N/A |
| Do not allow bypassing the above settings | `Enabled` | `Enabled`| Enforce rules for admin users. |
| Restrict who can push to matching branches | `Disabled` | `Disabled` | N/A |
| Allow force pushes | `Disabled` | `Disabled` | N/A |
| Allow deletions | `Disabled` | `Disabled` | N/A |

## Locked master branch

The option to lock the `master` branch is enabled since no changes should be pushed to this branch except changes from the original repository `oauth2-proxy`, from which this one is forked. Pull request with changes should be pushed to the `edi-foundation-integration` branch. To pull changes from the `oauth2-proxy`, a user with admin permissions should disable the lock of the `master` branch, pull the changes from the original repository, and re-enable the lock on the master branch afterwards.

## Signed commits

It was added protection for all branches (pattern: `*`, `*/*` and `edi-foundation-integration`) in order to enforce signed commits. This configuration will help avoiding pull request completion issues because it'll enforce everyone to sign the commits in every branch not only in the main branch.
