Skip to content
11 changes: 8 additions & 3 deletions .asf.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -49,17 +49,22 @@ github:
dependabot_alerts: true
dependabot_updates: false

# --- OPTIONAL self-serve branch protection (enable once the project agrees on required checks) ----
# --- Branch protection: 1 approving review + green CI required to merge to master -----------------
Comment thread
HackedRico marked this conversation as resolved.
protected_branches:
master:
required_pull_request_reviews:
Comment thread
HackedRico marked this conversation as resolved.
required_approving_review_count: 1
dismiss_stale_reviews: true
required_status_checks:
strict: true
# Contexts must be check-run (job) names as reported to GitHub, not workflow names.
contexts:
- Code Quality
- Security Checks
- "build (3.10.9, py310,style,coverage-ci)"
- "build (3.11, py311,style,coverage-ci)"
- "build (3.12, py312,style,coverage-ci)"
- "build (3.13, py313,style,coverage-ci)"
- "build (3.13, safety)"
- "build (3.13, bandit)"
required_conversation_resolution: true
# # required_signatures: true # only if all committers sign commits — can block merges otherwise
copilot_code_review:
Expand Down
Loading