Skip to content

Commit 7770d78

Browse files
MIchaelMainerMIchaelMainer
authored
chore: capture initial branch policy settings (#920)
Capture current policy state so that we can make versioned changes to branch protection policies. This will enable policy history, auditing, review, standardization, and templatization. We will update policy in later PR. We can ignore the rule that states: `At least one value under RequiredStatusChecks must be specified when RequiresStrictStatusChecks is true.` or `RequiresStrictStatusChecks must be true when specifying RequiredStatusChecks.` This is getting removed. This is getting removed. * https://github.com/microsoft/GitOps.Branches/pull/73 * https://github.com/microsoft/GitOps.Branches/issues/72 This branch protection policy will not take effect until https://github.com/microsoftgraph/.github/blob/main/policies/branch-protection-sdks.yml has been removed.
1 parent ca7e91a commit 7770d78

File tree

1 file changed

+125
-0
lines changed

1 file changed

+125
-0
lines changed

‎.github/policies/msgraph-sdk-java-core-branch-protection.yml‎

Lines changed: 125 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,125 @@
1+
# Copyright (c) Microsoft Corporation.
2+
# Licensed under the MIT License.
3+
4+
# File initially created using https://github.com/MIchaelMainer/policyservicetoolkit/blob/main/branch_protection_export.ps1.
5+
6+
name: msgraph-sdk-java-core-branch-protection
7+
description: Branch protection policy for the msgraph-sdk-java-core repository
8+
resource: repository
9+
configuration:
10+
branchProtectionRules:
11+
12+
- branchNamePattern: dev
13+
# This branch pattern applies to the following branches as of 06/12/2023 10:31:16:
14+
# dev
15+
16+
# Specifies whether this branch can be deleted. boolean
17+
allowsDeletions: false
18+
# Specifies whether forced pushes are allowed on this branch. boolean
19+
allowsForcePushes: false
20+
# Specifies whether new commits pushed to the matching branches dismiss pull request review approvals. boolean
21+
dismissStaleReviews: true
22+
# Specifies whether admins can overwrite branch protection. boolean
23+
isAdminEnforced: false
24+
# Indicates whether "Require a pull request before merging" is enabled. boolean
25+
requiresPullRequestBeforeMerging: true
26+
# Specifies the number of pull request reviews before merging. int (0-6). Should be null/empty if PRs are not required
27+
requiredApprovingReviewsCount: 1
28+
# Require review from Code Owners. Requires requiredApprovingReviewsCount. boolean
29+
requireCodeOwnersReview: false
30+
# Are commits required to be signed. boolean. TODO: all contributors must have commit signing on local machines.
31+
requiresCommitSignatures: false
32+
# Are conversations required to be resolved before merging? boolean
33+
requiresConversationResolution: true
34+
# Are merge commits prohibited from being pushed to this branch. boolean
35+
requiresLinearHistory: false
36+
# Required status checks to pass before merging. Values can be any string, but if the value does not correspond to any existing status check, the status check will be stuck on pending for status since nothing exists to push an actual status
37+
requiredStatusChecks:
38+
- license/cla
39+
- Build
40+
- lint-api-level
41+
- Analyze
42+
- build
43+
# Require branches to be up to date before merging. Requires requiredStatusChecks. boolean
44+
requiresStrictStatusChecks: false
45+
# Indicates whether there are restrictions on who can push. boolean. Should be set with whoCanPush.
46+
restrictsPushes: false
47+
# Restrict who can dismiss pull request reviews. boolean
48+
restrictsReviewDismissals: false
49+
50+
- branchNamePattern: master
51+
# This branch pattern applies to the following branches as of 06/12/2023 10:31:16:
52+
# master
53+
54+
# Specifies whether this branch can be deleted. boolean
55+
allowsDeletions: false
56+
# Specifies whether forced pushes are allowed on this branch. boolean
57+
allowsForcePushes: false
58+
# Specifies whether new commits pushed to the matching branches dismiss pull request review approvals. boolean
59+
dismissStaleReviews: true
60+
# Specifies whether admins can overwrite branch protection. boolean
61+
isAdminEnforced: false
62+
# Indicates whether "Require a pull request before merging" is enabled. boolean
63+
requiresPullRequestBeforeMerging: true
64+
# Specifies the number of pull request reviews before merging. int (0-6). Should be null/empty if PRs are not required
65+
requiredApprovingReviewsCount: 1
66+
# Require review from Code Owners. Requires requiredApprovingReviewsCount. boolean
67+
requireCodeOwnersReview: false
68+
# Are commits required to be signed. boolean. TODO: all contributors must have commit signing on local machines.
69+
requiresCommitSignatures: false
70+
# Are conversations required to be resolved before merging? boolean
71+
requiresConversationResolution: true
72+
# Are merge commits prohibited from being pushed to this branch. boolean
73+
requiresLinearHistory: false
74+
# Required status checks to pass before merging. Values can be any string, but if the value does not correspond to any existing status check, the status check will be stuck on pending for status since nothing exists to push an actual status
75+
requiredStatusChecks:
76+
- license/cla
77+
- Build
78+
- lint-api-level
79+
- Analyze
80+
- build
81+
# Require branches to be up to date before merging. Requires requiredStatusChecks. boolean
82+
requiresStrictStatusChecks: false
83+
# Indicates whether there are restrictions on who can push. boolean. Should be set with whoCanPush.
84+
restrictsPushes: false
85+
# Restrict who can dismiss pull request reviews. boolean
86+
restrictsReviewDismissals: false
87+
88+
- branchNamePattern: v3/longTermBranch
89+
# This branch pattern applies to the following branches as of 06/12/2023 10:31:16:
90+
# v3/longTermBranch
91+
92+
# Specifies whether this branch can be deleted. boolean
93+
allowsDeletions: false
94+
# Specifies whether forced pushes are allowed on this branch. boolean
95+
allowsForcePushes: false
96+
# Specifies whether new commits pushed to the matching branches dismiss pull request review approvals. boolean
97+
dismissStaleReviews: true
98+
# Specifies whether admins can overwrite branch protection. boolean
99+
isAdminEnforced: false
100+
# Indicates whether "Require a pull request before merging" is enabled. boolean
101+
requiresPullRequestBeforeMerging: true
102+
# Specifies the number of pull request reviews before merging. int (0-6). Should be null/empty if PRs are not required
103+
requiredApprovingReviewsCount: 1
104+
# Require review from Code Owners. Requires requiredApprovingReviewsCount. boolean
105+
requireCodeOwnersReview: true
106+
# Are commits required to be signed. boolean. TODO: all contributors must have commit signing on local machines.
107+
requiresCommitSignatures: false
108+
# Are conversations required to be resolved before merging? boolean
109+
requiresConversationResolution: false
110+
# Are merge commits prohibited from being pushed to this branch. boolean
111+
requiresLinearHistory: false
112+
# Required status checks to pass before merging. Values can be any string, but if the value does not correspond to any existing status check, the status check will be stuck on pending for status since nothing exists to push an actual status
113+
requiredStatusChecks:
114+
- Analyze
115+
- Build
116+
- build
117+
- license/cla
118+
- lint-api-level
119+
# Require branches to be up to date before merging. Requires requiredStatusChecks. boolean
120+
requiresStrictStatusChecks: false
121+
# Indicates whether there are restrictions on who can push. boolean. Should be set with whoCanPush.
122+
restrictsPushes: false
123+
# Restrict who can dismiss pull request reviews. boolean
124+
restrictsReviewDismissals: false
125+

0 commit comments

Comments
 (0)