From 67e344d5daa9bd44f27eeb9a7842abf6b163064b Mon Sep 17 00:00:00 2001 From: rldyourmnd Date: Tue, 6 Oct 2026 06:28:49 +0500 Subject: [PATCH 1/2] chore(gds): select a portable public policy profile --- .gds/repository.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.gds/repository.yaml b/.gds/repository.yaml index 570a3de..c06129f 100644 --- a/.gds/repository.yaml +++ b/.gds/repository.yaml @@ -44,7 +44,7 @@ product: policy: profiles: - "repository-default" - - "opennetwork-default" + - "organization-default" rollout_ring: "standard" git: From ecc69c5e2b79038d01440db690078eedf3da59cf Mon Sep 17 00:00:00 2001 From: rldyourmnd Date: Tue, 6 Oct 2026 06:28:58 +0500 Subject: [PATCH 2/2] chore(gds): refresh the canonical repository policy --- .gds/bundle.lock.yaml | 15 ++-- .gds/compiled-policy.json | 176 ++++++++++++++++++++++++++++++++------ 2 files changed, 158 insertions(+), 33 deletions(-) diff --git a/.gds/bundle.lock.yaml b/.gds/bundle.lock.yaml index 808fa82..be42bbb 100644 --- a/.gds/bundle.lock.yaml +++ b/.gds/bundle.lock.yaml @@ -2,14 +2,15 @@ schema_version: 1 bundle: - version: "0.9.7-dev" - release_sequence: 0 - source_tree_digest: "sha256:6944618359758df76e230e0ba2edc12f342944d25479d445884231d4a3fc8cb1" - digest: "sha256:d94a6cd9bf1211e1c00686b981627898917f2ac709b14afb09b23310150a4ce0" + version: "0.9.24" + release_sequence: 79 + source_tree_digest: "sha256:921ee3191bc61d3ef99c7c0bd7a6b893a6df35610c65c3be10e979aef20cff73" + digest: "sha256:51edfc3ed4ecd84def6755ad921c9845e16b2ecd8cbd5a8a6868f9c454edc6b9" + attestation_identity_digest: "sha256:a0bc45ec7864d753bab99bf690fe22eb327bf1f14fd53d946779e50df3f76f9b" projection: - input_digest: "sha256:380eb7bd9eb47c0bbbe0d42c8132297e7147a2f23dac2b7d4970155b4f2006f3" - output_digest: "sha256:3cbcfccdaded1104a9e6d86f7c201b249b550a841850ae6db875856d8b84ec82" + input_digest: "sha256:71abdc83c64c04e2723c0f7ee58fbf6afce930bc3296cc4c3b2cef0b42de2c2a" + output_digest: "sha256:1ef9dcd7777f859d4f88842f8d39ffc2fe76b32054f9d3151e2684df6a31dcce" files: - path: ".gds/compiled-policy.json" - digest: "sha256:52a39e0e558b8523ddfa06c294fe5cb9276576f3d2bd1a36de9301382c4624ee" + digest: "sha256:36bd0fc444dde2c8234ca4bac93ebae4d75ca7ac5c7eec2a7c2c098618a4b0d5" diff --git a/.gds/compiled-policy.json b/.gds/compiled-policy.json index b312c7c..3d9c8b7 100644 --- a/.gds/compiled-policy.json +++ b/.gds/compiled-policy.json @@ -2,8 +2,8 @@ "schema_version": 1, "compiled_policy": { "repository_id": "repo_01M1F9D1NQMGAEY1STJSBE909H", - "bundle_version": "0.9.7-dev", - "digest": "sha256:0737e4b5ca780db0777ed8a4d3d42a4050dd4a5d598f018fc563341efe037866" + "bundle_version": "0.9.24", + "digest": "sha256:8e5998f2fc7616dba9ba4a7b6b482f32a40dc0f013eddc8ed745d9af9a0c6d9c" }, "sources": [ { @@ -12,23 +12,22 @@ "priority": 100, "distribution": "public", "path": "policies/base/repository-default.yaml", - "digest": "sha256:0ea560cc2653184e07c6f744455f745a34f764a5c0dcda55f2dc76fa5296f2f0" + "digest": "sha256:538f486d49620c169cbbac77745ce2ecc21010ebd4a564017c79cefbb468ca1e" }, { - "id": "opennetwork-default", + "id": "organization-default", "tier": "owner", - "priority": 110, + "priority": 100, "distribution": "public", - "path": "policies/owners/opennetwork-default.yaml", - "digest": "sha256:096b9781b05c37fd5b440a171a6e5599cda3ef77983db72bf9c68d3d40b34ab4" + "path": "policies/owners/organization-default.yaml", + "digest": "sha256:fe271769a3e50404a5073ca6d045ad19f784069e7d6fdceab80254c06781ed55" } ], "effective": { "agent": { "generated_projection_edit": "forbidden", "profiles": [ - "core", - "drakkars" + "core" ] }, "context": { @@ -57,18 +56,20 @@ }, "merge": { "allow_auto_merge": { - "management": "observed" + "management": "managed", + "value": false }, "allow_merge_commit": { "management": "managed", - "value": true + "value": false }, "allow_rebase_merge": { - "management": "observed" + "management": "managed", + "value": false }, "allow_squash_merge": { "management": "managed", - "value": false + "value": true }, "allow_update_branch": { "management": "managed", @@ -85,10 +86,12 @@ "management": "observed" }, "squash_merge_commit_message": { - "management": "observed" + "management": "managed", + "value": "PR_BODY" }, "squash_merge_commit_title": { - "management": "observed" + "management": "managed", + "value": "PR_TITLE" } }, "releases": { @@ -114,8 +117,24 @@ } }, "package_management": { + "forbidden_executables": [ + "pip", + "pipx", + "poetry", + "npm", + "npx", + "pnpm", + "yarn", + "corepack", + "mise", + "asdf" + ], + "language_dependency_managers": [ + "uv", + "bun" + ], "mutable_version_resolution": "forbidden", - "npm_family_on_managed_path": "allowed", + "npm_family_on_managed_path": "forbidden", "remote_stream_to_shell": "forbidden" }, "rollout": { @@ -142,13 +161,6 @@ "file": "policies/base/repository-default.yaml", "operation": "append" }, - "/effective/agent/profiles/1": { - "source": "repository-default", - "tier": "base", - "priority": 100, - "file": "policies/base/repository-default.yaml", - "operation": "append" - }, "/effective/context/private_parent_persistence": { "source": "repository-default", "tier": "base", @@ -219,6 +231,13 @@ "file": "policies/base/repository-default.yaml", "operation": "set" }, + "/effective/github/merge/allow_auto_merge/value": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, "/effective/github/merge/allow_merge_commit/management": { "source": "repository-default", "tier": "base", @@ -240,6 +259,13 @@ "file": "policies/base/repository-default.yaml", "operation": "set" }, + "/effective/github/merge/allow_rebase_merge/value": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, "/effective/github/merge/allow_squash_merge/management": { "source": "repository-default", "tier": "base", @@ -303,6 +329,13 @@ "file": "policies/base/repository-default.yaml", "operation": "set" }, + "/effective/github/merge/squash_merge_commit_message/value": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, "/effective/github/merge/squash_merge_commit_title/management": { "source": "repository-default", "tier": "base", @@ -310,6 +343,13 @@ "file": "policies/base/repository-default.yaml", "operation": "set" }, + "/effective/github/merge/squash_merge_commit_title/value": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, "/effective/github/releases/immutable/management": { "source": "repository-default", "tier": "base", @@ -359,6 +399,90 @@ "file": "policies/base/repository-default.yaml", "operation": "set" }, + "/effective/package_management/forbidden_executables/0": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, + "/effective/package_management/forbidden_executables/1": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, + "/effective/package_management/forbidden_executables/2": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, + "/effective/package_management/forbidden_executables/3": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, + "/effective/package_management/forbidden_executables/4": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, + "/effective/package_management/forbidden_executables/5": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, + "/effective/package_management/forbidden_executables/6": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, + "/effective/package_management/forbidden_executables/7": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, + "/effective/package_management/forbidden_executables/8": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, + "/effective/package_management/forbidden_executables/9": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, + "/effective/package_management/language_dependency_managers/0": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, + "/effective/package_management/language_dependency_managers/1": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, "/effective/package_management/mutable_version_resolution": { "source": "repository-default", "tier": "base", @@ -381,10 +505,10 @@ "operation": "set" }, "/effective/rollout/mode": { - "source": "opennetwork-default", + "source": "organization-default", "tier": "owner", - "priority": 110, - "file": "policies/owners/opennetwork-default.yaml", + "priority": 100, + "file": "policies/owners/organization-default.yaml", "operation": "set" }, "/effective/security/external_write_requires_approval": {