From 0862cf20575e3639adf51a96a4a368387560322f Mon Sep 17 00:00:00 2001 From: David McKay Date: Sun, 16 Aug 2026 20:12:33 -0700 Subject: [PATCH] Let only the maintainers approve and merge This repository is about to be public, and its collaborator list is inherited from the organisation, so roughly a dozen accounts could otherwise approve a change and land it. Ownership of the whole tree, plus a merge restriction on main, narrows both to the two people who maintain it. The previous file also named a team that GitHub rejected. A code-owner team must be publicly visible, and that one is secret, so the line was ignored and the ownership it described did not exist. --- .github/CODEOWNERS | 20 +++++++++----------- 1 file changed, 9 insertions(+), 11 deletions(-) diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS index 480e2efd..883e7182 100644 --- a/.github/CODEOWNERS +++ b/.github/CODEOWNERS @@ -1,15 +1,13 @@ -# Who has to approve a change before it can reach main. +# Who can approve a change, and who can land it. # -# This repository is public and its collaborator list is inherited from the -# organisation, so a great many people can open and push branches. Merging is -# deliberately narrower: `main` requires an approving review from an owner -# listed here. +# Both powers belong to the people named here and to nobody else. GitHub does +# not count an approving review from anyone without write access, the branch +# rule on `main` requires the approval to come from an owner in this file, and +# it restricts merging to the same accounts. A passer-by can open a pull +# request and comment on one, which is the point of a public repository, and +# can neither approve nor land it. # -# Widening this list widens who can approve. Add people who know the codebase -# well enough to say no. +# Adding a name here grants both powers. Add people who know this codebase well +# enough to say no. * @davidmckayv @guidovizoso - -# Workflows are the supply chain. A change here runs with the repository's -# credentials, so engineering reviews it alongside the owners above. -/.github/workflows/ @CopilotKit/engineering @davidmckayv @guidovizoso