From e8f25a88ec7dd0a7623a26613269bff859f748b1 Mon Sep 17 00:00:00 2001 From: Min Zhang Date: Fri, 4 Sep 2026 13:56:00 -0400 Subject: [PATCH 1/2] NO-ISSUE: Require EP review-gate and pre-commit checks Add ci-status-checks ruleset for enhancement-proposals with check-human-reviews and pre-commit. wg-infra can bypass the ruleset. Assisted-by: Cursor Signed-off-by: Min Zhang --- repositories.tf | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/repositories.tf b/repositories.tf index 5939ae7..091aabb 100644 --- a/repositories.tf +++ b/repositories.tf @@ -313,6 +313,13 @@ module "repo_enhancement_proposals" { description = "A repository for proposing enhancements to the osac project" all_members_permission = "push" required_approvals = 2 + required_status_checks = [ + # Job id in enhancement-proposals/.github/workflows/review-gate.yml. + { context = "check-human-reviews", integration_id = 15368 }, + # Job id in enhancement-proposals/.github/workflows/pre-commit.yaml. + { context = "pre-commit", integration_id = 15368 }, + ] + ruleset_bypass_team_ids = [github_team.all["wg-infra"].id] } module "repo_osac_test_infra" { From b881187789c45008df5cfa372da526ff1204da7c Mon Sep 17 00:00:00 2001 From: Min Zhang Date: Fri, 4 Sep 2026 14:03:54 -0400 Subject: [PATCH 2/2] NO-ISSUE: Add do-not-merge/hold label Manage hold label via terraform for repos without Prow /hold. Assisted-by: Cursor Signed-off-by: Min Zhang --- modules/common_repository/labels.csv | 1 + 1 file changed, 1 insertion(+) diff --git a/modules/common_repository/labels.csv b/modules/common_repository/labels.csv index 17d08b6..c3dc685 100644 --- a/modules/common_repository/labels.csv +++ b/modules/common_repository/labels.csv @@ -20,3 +20,4 @@ p0,e94f24,Highest priority p1,ffc600,Medium priority p2,cfd8dc,Low priority security,ff0000,This is a security issue +do-not-merge/hold,ededed,Block merge until the label is removed