oauth2-proxy/docs/docs/repository-settings.md

3.2 KiB

Repository settings

All these settings are applied to this repository.

Setting Value Info
Allow merge commits enabled Default to pull request title and description
Allow squash merging disabled
Allow rebase merging disabled
Always suggest updating pull request branches enabled
Allow auto-merge enabled
Automatically delete head branches enabled
Projects disabled
Issues disabled
Allow forking enabled

Add collaborators

Default GitHub teams will be added as collaborator in the repositories granting access to all project members to contribute to the onboarded repositories.

Team Role
oauth-proxy-contributors Maintain

Create protection rules

These are the protection rules for the master and edi-foundation-integration branches in order to secury and standarize the way of working.

Rules master edi-foundation-integration Info
Require a pull request before merging Enabled Enabled N/A
Require approvals 1 1 N/A
Dismiss stale pull request approvals when new commits are pushed Enabled Enabled N/A
Require review from Code Owners Enabled Enabled N/A
Restrict who can dismiss pull request reviews Disabled Disabled N/A
Allow specified actors to bypass required pull requests Disabled Disabled N/A
Require approval of the most recent reviewable push Enabled Disabled N/A
Require status checks to pass before merging Enabled Enabled N/A
Require branches to be up to date before merging Disabled Enabled N/A
Require conversation resolution before merging Enabled Enabled N/A
Require signed commits Enabled Enabled N/A
Require linear history Disabled Disabled N/A
Require merge queue Disabled Disabled N/A
Require deployments to succeed before merging Disabled Disabled N/A
Lock branch Enabled Disabled N/A
Do not allow bypassing the above settings Enabled Enabled Enforce rules for admin users.
Restrict who can push to matching branches Disabled Disabled N/A
Allow force pushes Disabled Disabled N/A
Allow deletions Disabled Disabled N/A

Locked master branch

The option to lock the master branch is enabled since no changes should be pushed to this branch except changes from the original repository oauth2-proxy, from which this one is forked. Pull request with changes should be pushed to the edi-foundation-integration branch. To pull changes from the oauth2-proxy, a user with admin permissions should disable the lock of the master branch, pull the changes from the original repository, and re-enable the lock on the master branch afterwards.

Signed commits

It was added protection for all branches (pattern: *, */* and edi-foundation-integration) in order to enforce signed commits. This configuration will help avoiding pull request completion issues because it'll enforce everyone to sign the commits in every branch not only in the main branch.