diff --git a/safe-settings/repos/complytime.yml b/safe-settings/repos/complytime.yml new file mode 100644 index 0000000..a0ce1e2 --- /dev/null +++ b/safe-settings/repos/complytime.yml @@ -0,0 +1,35 @@ +# Repo-level override for complytime. +# complytime is the main project repo and requires stricter review +# rules than the non-code-repos baseline. +# +# This override is applied on top of the non-code-repos suborg +# settings, which inherit from org-wide settings.yml. + +# Supplement the org-level "safe-settings: non-code repos" ruleset +# to require 2 approvers and dismiss stale reviews (non-code repos +# baseline is 1 approver, no stale review dismissal). This matches +# the current "main" ruleset on complytime (id=17986337). +# +# NOTE: safe-settings rulesets defined here are repo-level rulesets, +# separate from the org-level rulesets in settings.yml. The org-level +# ruleset still applies; GitHub evaluates both and the most restrictive +# rule wins. +rulesets: + - name: "safe-settings: complytime stricter review" + target: branch + enforcement: active + + conditions: + ref_name: + include: + - "~DEFAULT_BRANCH" + exclude: [] + + rules: + - type: pull_request + parameters: + required_approving_review_count: 2 + dismiss_stale_reviews_on_push: true + require_code_owner_review: true + require_last_push_approval: false + required_review_thread_resolution: false