chore: align with common settings and add branch protection (#68)

* chore: align new ssi repos with common settings and add branch protection * chore: add branch protection to policy-hub * chore: align policy-hub with common settings * chore: remove default workflow permissions
eclipse-tractusx · Mar 14, 2024 · d7c26ed · d7c26ed
1 parent 5e79789
commit d7c26ed
Showing 1 changed file with 51 additions and 6 deletions.
diff --git a/otterdog/eclipse-tractusx.jsonnet b/otterdog/eclipse-tractusx.jsonnet
@@ -500,14 +500,9 @@ orgs.newOrg('eclipse-tractusx') {
     orgs.newRepo('policy-hub') {
       allow_merge_commit: true,
       allow_update_branch: false,
-      delete_branch_on_merge: false,
-      description: "Policy hub",
+      description: "Policy Hub",
       private_vulnerability_reporting_enabled: true,
-      secret_scanning_push_protection: "disabled",
       web_commit_signoff_required: false,
-      workflows+: {
-        default_workflow_permissions: "write",
-      },
       secrets: [
         orgs.newRepoSecret('SONAR_TOKEN') {
           value: "pass:bots/automotive.tractusx/sonarcloud.io/token-policy-hub",
@@ -521,6 +516,20 @@ orgs.newOrg('eclipse-tractusx') {
           value: "eclipse-tractusx_policy-hub",
         },
       ],
+      branch_protection_rules: [
+        orgs.newBranchProtectionRule('dev') {
+          dismisses_stale_reviews: true,
+          required_approving_review_count: 1,
+          requires_status_checks: false,
+          requires_strict_status_checks: true,
+        },
+        orgs.newBranchProtectionRule('main') {
+          dismisses_stale_reviews: true,
+          required_approving_review_count: 1,
+          requires_status_checks: false,
+          requires_strict_status_checks: true,
+        },
+      ],
     },
     orgs.newRepo('portal') {
       allow_merge_commit: true,
@@ -998,10 +1007,32 @@ orgs.newOrg('eclipse-tractusx') {
       ],
     },
     orgs.newRepo('ssi-authority-schema-registry') {
+      allow_merge_commit: true,
+      allow_update_branch: false,
+      description: "SSI Authority & Schema Registry",
       private_vulnerability_reporting_enabled: true,
+      web_commit_signoff_required: false,
+      branch_protection_rules: [
+        orgs.newBranchProtectionRule('dev') {
+          dismisses_stale_reviews: true,
+          required_approving_review_count: 1,
+          requires_status_checks: false,
+          requires_strict_status_checks: true,
+        },
+        orgs.newBranchProtectionRule('main') {
+          dismisses_stale_reviews: true,
+          required_approving_review_count: 1,
+          requires_status_checks: false,
+          requires_strict_status_checks: true,
+        },
+      ],
     },
     orgs.newRepo('ssi-credential-issuer') {
+      allow_merge_commit: true,
+      allow_update_branch: false,
+      description: "SSI Credential Issuer",
       private_vulnerability_reporting_enabled: true,
+      web_commit_signoff_required: false,
       secrets: [
         orgs.newRepoSecret('SONAR_TOKEN') {
           value: "pass:bots/automotive.tractusx/sonarcloud.io/token-ssi-credential-issuer",
@@ -1015,6 +1046,20 @@ orgs.newOrg('eclipse-tractusx') {
           value: "eclipse-tractusx_ssi-credential-issuer",
         },
       ],
+      branch_protection_rules: [
+        orgs.newBranchProtectionRule('dev') {
+          dismisses_stale_reviews: true,
+          required_approving_review_count: 1,
+          requires_status_checks: false,
+          requires_strict_status_checks: true,
+        },
+        orgs.newBranchProtectionRule('main') {
+          dismisses_stale_reviews: true,
+          required_approving_review_count: 1,
+          requires_status_checks: false,
+          requires_strict_status_checks: true,
+        },
+      ],
     },
     orgs.newRepo('ssi-docu') {
       archived: true,