chore: bring the governance files up to the standard set - #5
Open
ckivisild-elnora-ai wants to merge 1 commit into
Open
ckivisild-elnora-ai wants to merge 1 commit into
ckivisild-elnora-ai wants to merge 1 commit into
Conversation
Control parity across the published repositories was audited and this one was missing part of the standard set. Adds only what was absent. Every published repository already carries the real controls: secret scanning, push protection, Dependabot alerts and a secret-scan workflow. The gaps were in governance, so this changes no behaviour and adds no CI cost. Where CONTRIBUTING.md is added it is a language-neutral version rather than a copy, because the published repositories span TypeScript, Python, shell and templates and the existing copy assumes one toolchain. It keeps what applies everywhere: branch and commit conventions, one purpose per pull request, saying what you actually ran, and never committing a credential or a customer identifier. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01WW1H1UrqnEE2Arx9i3Q2Qv
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Brings this repository to the same governance standard as the other published repositories. Adds only what was missing here.
The real controls were already in place everywhere. An audit of all 16 public repositories found secret scanning, push protection, Dependabot alerts and the gitleaks workflow enabled on every one. The gaps were governance files, so this changes no behaviour and adds no CI cost.
Where
CONTRIBUTING.mdis added it is a language-neutral version rather than a copy of the existing one, because the published repositories span TypeScript, Python, shell and templates and that copy assumes a single toolchain. It keeps what applies everywhere: branch and commit conventions, one purpose per pull request, saying what you actually ran, and never committing a credential or a customer identifier.Actions is free on public repositories, so this costs no minutes.