diff --git a/.gds/bundle.lock.yaml b/.gds/bundle.lock.yaml index 0dcce8412..d628ace4f 100644 --- a/.gds/bundle.lock.yaml +++ b/.gds/bundle.lock.yaml @@ -2,14 +2,15 @@ schema_version: 1 bundle: - version: "0.9.7-dev" - release_sequence: 0 - source_tree_digest: "sha256:6944618359758df76e230e0ba2edc12f342944d25479d445884231d4a3fc8cb1" - digest: "sha256:d94a6cd9bf1211e1c00686b981627898917f2ac709b14afb09b23310150a4ce0" + version: "0.9.24" + release_sequence: 79 + source_tree_digest: "sha256:921ee3191bc61d3ef99c7c0bd7a6b893a6df35610c65c3be10e979aef20cff73" + digest: "sha256:51edfc3ed4ecd84def6755ad921c9845e16b2ecd8cbd5a8a6868f9c454edc6b9" + attestation_identity_digest: "sha256:a0bc45ec7864d753bab99bf690fe22eb327bf1f14fd53d946779e50df3f76f9b" projection: - input_digest: "sha256:6092eed666405456a4cd9fc1f037deec4140b2379259befc24bd711abc4d023c" - output_digest: "sha256:bf4754a1ad7b997c335decfcd52d02cefa70ae4055fe6447112c9e9d73c1c4a0" + input_digest: "sha256:41efb4959876d734d1833aa7a851835e1cd2cf881be5eba9135e3f1e42034991" + output_digest: "sha256:8fe09d17608373ebf5985015755b8bd7e4e40a391895a9ff0839f02ea420650c" files: - path: ".gds/compiled-policy.json" - digest: "sha256:f78d3f518d65ea7779394966ab9c4fd99e5efc972b0c23d8d76d0d5b2031dad2" + digest: "sha256:de28a4900d90d30fe65bf069301e65d080f48f66418b4130a7221fbcfdcf30e5" diff --git a/.gds/compiled-policy.json b/.gds/compiled-policy.json index cb071e142..914d993a9 100644 --- a/.gds/compiled-policy.json +++ b/.gds/compiled-policy.json @@ -2,8 +2,8 @@ "schema_version": 1, "compiled_policy": { "repository_id": "repo_01M1FQ9VB0FGZ4YBYFNHTBT8BB", - "bundle_version": "0.9.7-dev", - "digest": "sha256:32829f6987d0f0a3303e88dc714b36eab2b5f838e5ef630ae0af7d6ee5612793" + "bundle_version": "0.9.24", + "digest": "sha256:701f528336a3cfc333ddcc77c4248eb5c2dd861b8a205e9d51b6e61fba571f20" }, "sources": [ { @@ -12,23 +12,22 @@ "priority": 100, "distribution": "public", "path": "policies/base/repository-default.yaml", - "digest": "sha256:0ea560cc2653184e07c6f744455f745a34f764a5c0dcda55f2dc76fa5296f2f0" + "digest": "sha256:538f486d49620c169cbbac77745ce2ecc21010ebd4a564017c79cefbb468ca1e" }, { - "id": "opennetwork-default", + "id": "organization-default", "tier": "owner", - "priority": 110, + "priority": 100, "distribution": "public", - "path": "policies/owners/opennetwork-default.yaml", - "digest": "sha256:096b9781b05c37fd5b440a171a6e5599cda3ef77983db72bf9c68d3d40b34ab4" + "path": "policies/owners/organization-default.yaml", + "digest": "sha256:fe271769a3e50404a5073ca6d045ad19f784069e7d6fdceab80254c06781ed55" } ], "effective": { "agent": { "generated_projection_edit": "forbidden", "profiles": [ - "core", - "drakkars" + "core" ] }, "context": { @@ -57,18 +56,20 @@ }, "merge": { "allow_auto_merge": { - "management": "observed" + "management": "managed", + "value": false }, "allow_merge_commit": { "management": "managed", - "value": true + "value": false }, "allow_rebase_merge": { - "management": "observed" + "management": "managed", + "value": false }, "allow_squash_merge": { "management": "managed", - "value": false + "value": true }, "allow_update_branch": { "management": "managed", @@ -85,10 +86,12 @@ "management": "observed" }, "squash_merge_commit_message": { - "management": "observed" + "management": "managed", + "value": "PR_BODY" }, "squash_merge_commit_title": { - "management": "observed" + "management": "managed", + "value": "PR_TITLE" } }, "releases": { @@ -114,8 +117,24 @@ } }, "package_management": { + "forbidden_executables": [ + "pip", + "pipx", + "poetry", + "npm", + "npx", + "pnpm", + "yarn", + "corepack", + "mise", + "asdf" + ], + "language_dependency_managers": [ + "uv", + "bun" + ], "mutable_version_resolution": "forbidden", - "npm_family_on_managed_path": "allowed", + "npm_family_on_managed_path": "forbidden", "remote_stream_to_shell": "forbidden" }, "rollout": { @@ -142,13 +161,6 @@ "file": "policies/base/repository-default.yaml", "operation": "append" }, - "/effective/agent/profiles/1": { - "source": "repository-default", - "tier": "base", - "priority": 100, - "file": "policies/base/repository-default.yaml", - "operation": "append" - }, "/effective/context/private_parent_persistence": { "source": "repository-default", "tier": "base", @@ -219,6 +231,13 @@ "file": "policies/base/repository-default.yaml", "operation": "set" }, + "/effective/github/merge/allow_auto_merge/value": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, "/effective/github/merge/allow_merge_commit/management": { "source": "repository-default", "tier": "base", @@ -240,6 +259,13 @@ "file": "policies/base/repository-default.yaml", "operation": "set" }, + "/effective/github/merge/allow_rebase_merge/value": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, "/effective/github/merge/allow_squash_merge/management": { "source": "repository-default", "tier": "base", @@ -303,6 +329,13 @@ "file": "policies/base/repository-default.yaml", "operation": "set" }, + "/effective/github/merge/squash_merge_commit_message/value": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, "/effective/github/merge/squash_merge_commit_title/management": { "source": "repository-default", "tier": "base", @@ -310,6 +343,13 @@ "file": "policies/base/repository-default.yaml", "operation": "set" }, + "/effective/github/merge/squash_merge_commit_title/value": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, "/effective/github/releases/immutable/management": { "source": "repository-default", "tier": "base", @@ -359,6 +399,90 @@ "file": "policies/base/repository-default.yaml", "operation": "set" }, + "/effective/package_management/forbidden_executables/0": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, + "/effective/package_management/forbidden_executables/1": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, + "/effective/package_management/forbidden_executables/2": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, + "/effective/package_management/forbidden_executables/3": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, + "/effective/package_management/forbidden_executables/4": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, + "/effective/package_management/forbidden_executables/5": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, + "/effective/package_management/forbidden_executables/6": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, + "/effective/package_management/forbidden_executables/7": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, + "/effective/package_management/forbidden_executables/8": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, + "/effective/package_management/forbidden_executables/9": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, + "/effective/package_management/language_dependency_managers/0": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, + "/effective/package_management/language_dependency_managers/1": { + "source": "repository-default", + "tier": "base", + "priority": 100, + "file": "policies/base/repository-default.yaml", + "operation": "set" + }, "/effective/package_management/mutable_version_resolution": { "source": "repository-default", "tier": "base", @@ -381,10 +505,10 @@ "operation": "set" }, "/effective/rollout/mode": { - "source": "opennetwork-default", + "source": "organization-default", "tier": "owner", - "priority": 110, - "file": "policies/owners/opennetwork-default.yaml", + "priority": 100, + "file": "policies/owners/organization-default.yaml", "operation": "set" }, "/effective/security/external_write_requires_approval": { diff --git a/.gds/repository.yaml b/.gds/repository.yaml index ba287b60e..882546d27 100644 --- a/.gds/repository.yaml +++ b/.gds/repository.yaml @@ -45,7 +45,7 @@ product: policy: profiles: - "repository-default" - - "opennetwork-default" + - "organization-default" rollout_ring: "standard" git: