Skip to content

feat(policy): onboard 6 listed repos - #48

Merged
donbeave merged 1 commit into
mainfrom
feat/policy-onboard-6-listed-repos
Oct 11, 2026
Merged

donbeave merged 1 commit into
mainfrom
feat/policy-onboard-6-listed-repos

Conversation

@donbeave

Copy link
Copy Markdown
Contributor

Onboards 6 listed repos missing from management: repo-scan, tailrocks-asd-ste100-skills (private, matches live), tailrocks-contribution-skills, tailrocks-repository-skills, tuiscotti (bespoke DCO+Required per live ruleset 23746094), rust-repository-policy (no-CI exception; tag-push release checks only).

  • Inventory guard 41 -> 47; no-CI allowlist gains rust-repository-policy only.
  • Ruleset imports for contribution-skills (23746090/23746068) and tuiscotti (23746094/23746052); settings-only for repo-scan, repository-skills, asd-ste100-skills (API 403 on private repo), rust-repository-policy. Module creates both rulesets on apply; repo-scan tag ruleset protect-repo-scan-release-tags (24734396) is adopted into protect-tags management (name change intended).
  • velnor_runner_group_repositories unchanged.
  • Verified: tofu fmt -check -recursive, init -backend=false -lockfile=readonly, validate all pass; 135 import blocks.

@chatgpt-codex-connector

Copy link
Copy Markdown

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

Add repo-scan, tailrocks-asd-ste100-skills (private), tailrocks-contribution-skills,
tailrocks-repository-skills, tuiscotti (bespoke DCO+Required per live ruleset 23746094),
and rust-repository-policy as no-CI exception (tag-push release checks only).

Ruleset imports for contribution-skills (23746090/23746068) and tuiscotti
(23746094/23746052); settings-only for the rest — module creates both rulesets
on apply, adopting repo-scan's release-tag ruleset into protect-tags management.

Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>
@donbeave
donbeave force-pushed the feat/policy-onboard-6-listed-repos branch from a054644 to eb6ea0d Compare October 11, 2026 10:33
@donbeave
donbeave merged commit 8131e17 into main Oct 11, 2026
6 checks passed
@donbeave
donbeave deleted the feat/policy-onboard-6-listed-repos branch October 11, 2026 10:35
donbeave added a commit that referenced this pull request Oct 11, 2026
Follow-up to #48, found by security review.

tui-snap and tailrocks-open-source-skills carry import blocks pointing
at ruleset IDs owned by other repos (source/source_type verified live):
tui-snap -> tuiscotti's 23746094/23746052, open-source-skills ->
contribution-skills' 23746090/23746068. Neither repo has its own
rulesets — the API resolves the foreign IDs to the owning repo's
objects.

Removes the 4 stale blocks; the module's for_each creates both rulesets
for these repos on next apply. New repos' entries (contribution-skills,
tuiscotti) are the correct owners and stay.

Signed-off-by: Alexey Zhokhov <alexey@zhokhov.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant