From 652721bf29e548abec5d29c75a08556e004ae0a0 Mon Sep 17 00:00:00 2001 From: Marcus Burghardt Date: Thu, 3 Sep 2026 17:06:10 +0200 Subject: [PATCH] chore: add stricter review rules for complytime repo Add repo-level safe-settings override for complytime requiring 2 approvers and stale review dismissal, matching the existing manual "main" ruleset (id=17986337). Differences from the non-code-repos baseline: - required_approving_review_count: 1 -> 2 - dismiss_stale_reviews_on_push: false -> true Assisted-by: OpenCode (claude-opus-4-6) Signed-off-by: Marcus Burghardt --- safe-settings/repos/complytime.yml | 35 ++++++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) create mode 100644 safe-settings/repos/complytime.yml diff --git a/safe-settings/repos/complytime.yml b/safe-settings/repos/complytime.yml new file mode 100644 index 0000000..a0ce1e2 --- /dev/null +++ b/safe-settings/repos/complytime.yml @@ -0,0 +1,35 @@ +# Repo-level override for complytime. +# complytime is the main project repo and requires stricter review +# rules than the non-code-repos baseline. +# +# This override is applied on top of the non-code-repos suborg +# settings, which inherit from org-wide settings.yml. + +# Supplement the org-level "safe-settings: non-code repos" ruleset +# to require 2 approvers and dismiss stale reviews (non-code repos +# baseline is 1 approver, no stale review dismissal). This matches +# the current "main" ruleset on complytime (id=17986337). +# +# NOTE: safe-settings rulesets defined here are repo-level rulesets, +# separate from the org-level rulesets in settings.yml. The org-level +# ruleset still applies; GitHub evaluates both and the most restrictive +# rule wins. +rulesets: + - name: "safe-settings: complytime stricter review" + target: branch + enforcement: active + + conditions: + ref_name: + include: + - "~DEFAULT_BRANCH" + exclude: [] + + rules: + - type: pull_request + parameters: + required_approving_review_count: 2 + dismiss_stale_reviews_on_push: true + require_code_owner_review: true + require_last_push_approval: false + required_review_thread_resolution: false