Skip to content

Harden open-source access and branch protection docs - #44

Merged
barfle merged 1 commit into
mainfrom
chore/oss-security-hardening
Aug 7, 2026
Merged

Harden open-source access and branch protection docs#44
barfle merged 1 commit into
mainfrom
chore/oss-security-hardening

Conversation

@barfle

@barfle barfle commented Aug 7, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Add SECURITY.md and .github/CODEOWNERS (internal @wildfoundry/dataplicity-web-developers only)
  • Document staff-only write access, required CODEOWNER review, and v* tag protection
  • Sync committed ruleset JSON with the live hardened rulesets

Access posture

  • Org default permission remains none
  • No outside collaborators
  • Public contributions via fork PRs only

Test plan

  • Confirm rulesets still require PR + 1 CODEOWNER approval on main
  • Confirm v* tags cannot be force-updated/deleted
  • Confirm Actions still run with selected/verified + allowlisted patterns

Add SECURITY.md and CODEOWNERS, and document rulesets that require staff CODEOWNER review with no public write path.
@barfle
barfle merged commit 4ed1ba0 into main Aug 7, 2026
9 checks passed
@barfle
barfle deleted the chore/oss-security-hardening branch August 7, 2026 08:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant