Update repo with cookiecutter template

.cruft.json

@@ -0,0 +1,37 @@
+{
+  "template": "https://github.com/mobilecoinfoundation/cookiecutters",
+  "commit": "6fc71b377387fc5353883a9bb6ca21a4cb79b820",
+  "checkout": null,
+  "context": {
+    "cookiecutter": {
+      "_copy_without_render": [
+        ".github/workflows/ci.yaml",
+        ".github/workflows/issues.yaml",
+        ".github/workflows/pr-assign.yaml",
+        ".github/workflows/pr.yaml"
+      ],
+      "repo_name": "sgx-std",
+      "repo_homepage": "https://mobilecoin.foundation/",
+      "github_org": "mobilecoinfoundation",
+      "github_teams": "coredev",
+      "github_username": "@nick-mobilecoin",
+      "default_branch": "main",
+      "owners": "@nick-mobilecoin @jcape @samdealy",
+      "type": "workspace",
+      "license": "Apache-2.0",
+      "arch": "sgx",
+      "workspace_description": "Rust libstd functionality for SGX enclaves",
+      "workspace_readme_title": "MobileCoin: Rust libstd functionality for SGX enclaves",
+      "crate_name": "mc-sgx-alloc",
+      "crate_namespace_prefix": "mc-sgx-",
+      "crate_description": "Allocator for SGX enclave",
+      "crate_readme_title": "MobileCoin: Allocator for SGX enclave",
+      "crate_sub_dir": "alloc",
+      "version": "0.1.0",
+      "crate_keywords": "sgx no-std alloc",
+      "crate_categories": "hardware-support no-std",
+      "_template": "https://github.com/mobilecoinfoundation/cookiecutters"
+    }
+  },
+  "directory": "rust/repo"
+}

.github/CODEOWNERS

@@ -1,7 +1,22 @@
+# These lines impact repository security
+/.github/CODEOWNERS        @nick-mobilecoin @jcape @samdealy
+/.github/settings.yml      @nick-mobilecoin @jcape @samdealy
+
+# These lines prevent reviews of trivial changes blocking on particular users
+/.gitattributes
+/.gitconfig
+/.gitignore
+/.markdownlint-cli2.jsonrc
+/CHANGELOG.md
+/Cargo.toml
+/Cargo.lock
+/LICENSE
+/README.md
+/deny.toml
+/rust-toolchain.toml
+/rustfmt.toml
+
 /alloc/         @nick-mobilecoin @jcape @samdealy
-/.github/       @jcape @nick-mobilecoin @samdealy
 /io/            @nick-mobilecoin @jcape @samdealy
 /panic/         @nick-mobilecoin @jcape @samdealy
 /sync/          @nick-mobilecoin @jcape @samdealy
-/test_enclave/  @nick-mobilecoin @jcape @samdealy
-/LICENSE        @jcape @nick-mobilecoin @samdealy

.github/auto_assign.yml

@@ -1,11 +1,3 @@
-addReviewers: true
+---
 addAssignees: author
-reviewers:
-  - jcape
-  - nick-mobilecoin
-  - awygle
-  - NotGyro
-  - samdealy
-  - varsha888
-
-numberOfReviewers: 2
+runOnDraft: true

.github/dependabot.yaml

@@ -7,13 +7,17 @@ updates:
       interval: daily
     commit-message:
       prefix: "chore(deps)"
+    reviewers:
+      - "mobilecoinfoundation/coredev"
 
   - package-ecosystem: github-actions
     directory: "/"
     schedule:
       interval: daily
     commit-message:
       prefix: "chore(deps)"
+    reviewers:
+      - "mobilecoinfoundation/coredev"
     ignore:
       # See https://github.com/dtolnay/rust-toolchain/issues/45 tags aren't used
       # by rust-toolchain. Using a branch name will cause dependabot to suggest

.github/labeler.yml

@@ -1,12 +1,20 @@
+---
 rust:
   - '**.rs'
   - '**/Cargo.lock'
   - '**/Cargo.toml'
 
-dependencies:
-  - '**/Cargo.lock'
-
 github_actions:
   - '.github/workflows/**'
   - '.github/labeler.yml'
-  - '.github/triage-labeler.yml'
+  - '.github/triage-labeler.yaml'
+  - '.github/auto_assign.yml'
+
+python:
+  - '**.py'
+  - '**/poetry.lock'
+  - '**/pyproject.toml'
+  - '**/requirements.txt'
+
+javascript:
+  - '**.js'

.github/pull_request_template.md

@@ -3,10 +3,3 @@
 ### Motivation
 
 <!-- Describe why these changes should happen, e.g. "Currently we...", or "This is needed because..." -->
-
-### Future Work
-<!--
-* Out of scope non-goals for this PR
-* These should be links to tickets. If the tickets do not exist, make them.
--->
-

.github/settings.yml

@@ -0,0 +1,115 @@
+---
+repository:
+  name: "sgx-std"
+  description: "Rust libstd functionality for SGX enclaves"
+  homepage: https://mobilecoin.foundation/
+  topics: "hardware-support, no-std"
+  private: false
+  has_issues: true
+  has_projects: false
+  has_wiki: true
+  has_downloads: false
+  default_branch: main
+  allow_squash_merge: true
+  allow_merge_commit: false
+  allow_rebase_merge: false
+  allow_auto_merge: true
+  delete_branch_on_merge: true
+  use_squash_pr_title_as_default: true
+  enable_automated_security_fixes: true
+  enable_vulnerability_alerts: true
+
+labels:
+  - name: dependencies
+    color: '#0366d6'
+    description: Pull requests that update a dependency file
+
+  - name: github_actions
+    color: '#000000'
+    description: Pull requests that update github actions
+  - name: go
+    color: '#29beb0'
+    description: Pull requests that update golang code
+  - name: javascript
+    color: '#f0db4f'
+    description: Pull requests that update javascript code
+  - name: python
+    color: '#4584b6'
+    description: Pull requests that update python code
+  - name: rust
+    color: '#f74c00'
+    description: Pull requests that update rust code
+
+  - name: size/XS
+    color: '#00ed01'
+    description: Extra-Small PRs
+  - name: size/S
+    color: '#3af901'
+    description: Small PRs
+  - name: size/M
+    color: '#cefb02'
+    description: Medium-sized PRs
+  - name: size/L
+    color: '#ffde40'
+    description: Large PRs
+  - name: size/XL
+    color: '#ff9100'
+    description: Extra-Large PRs
+  - name: size/XXL
+    color: '#f24d11'
+    description: Double-wide PRs
+  - name: size/OHLAWDHECOMIN
+    color: '#ed1717'
+    description: PRs that should get broken down
+
+collaborators:
+  - username: meowblecoinbot
+    permission: triage
+  - username: nick-mobilecoin
+    permission: admin
+  - username: jcape
+    permission: admin
+
+teams:
+  - name: coredev
+    permission: push
+
+branches:
+  - name: main
+    # https://docs.github.com/en/rest/branches/branch-protection?apiVersion=2022-11-28
+    protection:
+      required_pull_request_reviews:
+        require_code_owner_reviews: true
+        required_approving_review_count: 1
+      required_conversation_resolution: true
+      required_status_checks:
+        strict: false
+        # These names need to match the matrix job name.
+        # For example if one had a job like:
+        #
+        #   build:
+        #     runs-on: ubuntu-22.04
+        #     needs:
+        #       - lint
+        #     strategy:
+        #       matrix:
+        #         rust:
+        #           - stable
+        #           - beta
+        #           - nightly-2023-01-04
+        #
+        # Then the matrix names would be:
+        #   - "build (stable)"
+        #   - "build (beta)"
+        #   - "build (nightly-2023-01-04)"
+        contexts:
+          - lint
+          - "deny (bans licenses sources)"
+          - sort
+          - "clippy (stable)"
+          - "build (nightly-2023-01-04)"
+          - "test (nightly-2023-01-04)"
+          - "coverage (nightly-2023-01-04)"
+      enforce_admins: true
+      required_linear_history: true
+      restrictions: null

.github/triage-labeler.yml → .github/triage-labeler.yaml

@@ -1,2 +1,3 @@
+---
 needs-triage:
   - '.*'

.github/workflows/cargo-audit.yaml

@@ -1,5 +1,6 @@
+---
 name: cargo-audit
-on:
+"on":
   pull_request:
     paths: Cargo.lock
   push: