Add secrets repo

[gdams]

Migrating https://github.com/AdoptOpenJDK/secrets to Adoptium, the end goal is to archive this repo and move everything to Bitwarden but for now it makes sense to keep it

[eclipse-otterdog]

This is your friendly self-service bot.

Thank you for raising a pull request to update the configuration of your GitHub organization.
You can manually add reviewers to this PR to eventually enable auto-merging.

The following conditions need to fulfilled for auto-merging to be available:

• valid configuration
• approved by a project lead
• does not require any secrets
• does not update settings only accessible via the GitHub Web UI
• does not remove any resource

Otterdog commands and options

You can trigger otterdog actions by commenting on this PR:

• /otterdog team-info checks the team / org membership for the PR author
• /otterdog validate validates the configuration change
• /otterdog validate info validates the configuration change, printing also validation infos
• /otterdog check-sync checks if the base ref is in sync with live settings
• /otterdog merge merges and applies the changes if the PR is eligible for auto-merging (only accessible for the author)
• /otterdog done notifies the self-service bot that a required manual apply operation has been performed (only accessible for members of the admin team)
• /otterdog apply re-apply a previously failed attempt (only accessible for members of the admin team)

[eclipse-otterdog]

This is your friendly self-service bot.

The author (gdams) of this PR is associated with this organization in the role of MEMBER.

Additionally, gdams is a member of the following teams:

• adoptium.net

• adoptium.net-collaborators

• adoptium-committers

• adoptium-aqavit-committers

• adoptium-aqavit-project-leads

• adoptium-temurin-committers

• adoptium-temurin-project-leads

• adoptium-incubator-committers

• adoptium-mc-committers

• adoptium-mc-project-leads

• adoptium-aqavit-security

• adoptium-mc-security

• adoptium-temurin-security

[eclipse-otterdog]

This is your friendly self-service bot. The current configuration is in-sync with the live settings. 🚀

[eclipse-otterdog]

This is your friendly self-service bot.
Please find below the validation of the requested configuration changes:

Diff for 24190f9

Organization adoptium[id=adoptium]
  there have been 4 validation infos, enable verbose output with '-v' to to display them.

+  add repository[name="secrets"] {
+    allow_auto_merge                  = false
+    allow_forking                     = false
+    allow_merge_commit                = false
+    allow_rebase_merge                = true
+    allow_squash_merge                = true
+    allow_update_branch               = true
+    archived                          = false
+    auto_init                         = true
+    code_scanning_default_setup_enabled = false
+    custom_properties                 = {}
+    default_branch                    = "main"
+    delete_branch_on_merge            = true
+    dependabot_alerts_enabled         = true
+    description                       = "The Secrets Repo for Eclipse Adoptium"
+    gh_pages_build_type               = "disabled"
+    has_discussions                   = false
+    has_issues                        = true
+    has_projects                      = true
+    has_wiki                          = true
+    is_template                       = false
+    merge_commit_message              = "PR_TITLE"
+    merge_commit_title                = "MERGE_MESSAGE"
+    name                              = "secrets"
+    private                           = true
+    squash_merge_commit_message       = "COMMIT_MESSAGES"
+    squash_merge_commit_title         = "COMMIT_OR_PR_TITLE"
+    topics                            = []
+    web_commit_signoff_required       = false
+  }

+  add repo_workflow_settings[repository="secrets"] {
+    actions_can_approve_pull_request_reviews = true
+    enabled                           = true
+  }
  
  Plan: 2 to add, 0 to change, 0 to delete.

[eclipse-otterdog]

This is your friendly self-service bot.
This Pull Request is eligible for auto-merging as it passed the following checks:

• valid configuration
• approved by a project lead
• does not require any secrets
• does not update settings only accessible via the GitHub Web UI
• does not remove any resource

In order to automatically merge and apply the changes, add a comment /otterdog merge. 🚀

[gdams]

/otterdog merge

[eclipse-otterdog]

This is your friendly self-service bot.

The changes could not be applied successfully, please check the output:

Organization adoptium[id=adoptium]
  there have been 4 validation infos, enable verbose output with '-v' to to display them.

+  add repository[name="secrets"] {
+    allow_auto_merge                  = false
+    allow_forking                     = false
+    allow_merge_commit                = false
+    allow_rebase_merge                = true
+    allow_squash_merge                = true
+    allow_update_branch               = true
+    archived                          = false
+    auto_init                         = true
+    code_scanning_default_setup_enabled = false
+    custom_properties                 = {}
+    default_branch                    = "main"
+    delete_branch_on_merge            = true
+    dependabot_alerts_enabled         = true
+    description                       = "The Secrets Repo for Eclipse Adoptium"
+    gh_pages_build_type               = "disabled"
+    has_discussions                   = false
+    has_issues                        = true
+    has_projects                      = true
+    has_wiki                          = true
+    is_template                       = false
+    merge_commit_message              = "PR_TITLE"
+    merge_commit_title                = "MERGE_MESSAGE"
+    name                              = "secrets"
+    private                           = true
+    squash_merge_commit_message       = "COMMIT_MESSAGES"
+    squash_merge_commit_title         = "COMMIT_OR_PR_TITLE"
+    topics                            = []
+    web_commit_signoff_required       = false
+  }
╷
│ Warning: Adding repository 'secrets' while the project 'adoptium' has no GitHub organization configured in the PMI.
│
│    Don't forget to add an entry for this repo to the list of GitHub repositories: 
│      https://github.com/adoptium/secrets
╵

+  add repo_workflow_settings[repository="secrets"] {
+    actions_can_approve_pull_request_reviews = true
+    enabled                           = true
+  }

  
  Applying changes:



╷
│ Error: failed to apply patch: ADD- repository[name="secrets"]
│
│    failed to update code scanning config for repo 'adoptium/secrets':
│    Exception while accessing http://api.github.com/repos/adoptium/secrets/code-scanning/default-setup: (status=403, body={"message":"Advanced Security must be enabled for this repository to use code scanning.","documentation_url":"https://docs.github.com/rest/code-scanning/code-scanning#update-a-code-scanning-default-setup-configuration","status":"403"})
╵
  Done.
  
  Executed plan: 2 added, 0 changed, 0 deleted.

cc @adoptium/eclipsefdn-security

cc @adoptium/eclipsefdn-releng

[netomi]

is this repo associated with the adoptium or temurin project?

[netomi]

I added it now to the adoptium project, let me know if this is wrong, this is also how the eclipse_project property is setup atm.

[netomi]

/otterdog done

[eclipse-otterdog]

This is your friendly self-service bot. The PR has been marked as being completed.