GitHub serves the files in this repository as defaults for every repository in the organization that does not define its own. One file here replaces the same file copied into 26 repos and drifting.
| Path | Serves as the default for | Overridden by |
|---|---|---|
SECURITY.md |
Vulnerability disclosure path and response commitments | A repo's own SECURITY.md |
CONTRIBUTING.md |
How to propose a change | A repo's own CONTRIBUTING.md |
.github/PULL_REQUEST_TEMPLATE.md |
The PR body scaffold | A repo's own template |
.github/ISSUE_TEMPLATE/ |
Bug and feature forms | A repo's own ISSUE_TEMPLATE/ |
profile/README.md |
The organization profile page | — |
CODEOWNERS is not served from this repo. It must exist in each repository
individually — which is why it was added to all 26 separately rather than once
here. If you are looking for why one file was centralised and the other was
not, that is the reason.
Repository settings — branch protection, required checks, secret scanning — are also per-repo and are not affected by anything in here.
Open a repository with no SECURITY.md of its own and visit its Security
tab; the text from this repo appears there. A repo that shows nothing is a repo
GitHub is not serving these to — check that this repository is public and named
exactly .github.
MIT, deliberately, where most repos in this org are AGPL-3.0. These files are boilerplate meant to be copied; a copyleft licence on a pull-request template is friction with no benefit to anyone.
repository-baseline-policy.md in the private ops repo defines what every
repository must carry. This repo is how the parts GitHub can centralise get
centralised.