Organization-wide GitHub configuration: default community health files, engineering standards, shared reusable workflows.
Two rules that are easy to get wrong:
- This repository must stay public. GitHub serves default community health files only from a public
.github. Nothing confidential belongs here. - A default is inherited only by repositories that do not define their own. Adding a file here does not override a repository that already has one.
Changes here reach every repository on merge.
| Path | What it is |
|---|---|
| CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, SUPPORT.md | Defaults inherited org-wide |
| standards/ | The engineering standard, one concern per file |
| templates/ | AGENTS.md and CLAUDE.md for other repositories |
| .github/workflows/ | Reusable workflows other repositories call |
| workflow-templates/ | Starter workflows in the Actions picker |
| profile/README.md | The organization profile page |
A license cannot be inherited. See standards/repository-setup.md.
The engineering standard lives in standards/, one concern per file. AGENTS.md indexes it and says when to read each one.
cla-reusable.yml requires the CLA from external contributors and exempts org members and bots.
Call it with workflow-templates/cla.yml, which is also offered in the Actions picker. Signatures are written to blacklanternsecurity/CLA.
How to validate a change here: AGENTS.md.