From 945410eacd39fe407f6ae35fa4e2f03de2e94b95 Mon Sep 17 00:00:00 2001 From: sakshi-1505 Date: Fri, 19 Jan 2024 21:31:47 +0530 Subject: [PATCH 1/3] feat: add first set of allstars policies Signed-off-by: sakshi-1505 --- actions.yaml | 14 ++++++++++++++ admin.yaml | 4 ++++ allstar.yaml | 7 +++++++ binary_artifacts.yaml | 3 +++ branch_protection.yaml | 3 +++ security.yaml | 3 +++ 6 files changed, 34 insertions(+) create mode 100644 actions.yaml create mode 100644 admin.yaml create mode 100644 allstar.yaml create mode 100644 binary_artifacts.yaml create mode 100644 branch_protection.yaml create mode 100644 security.yaml diff --git a/actions.yaml b/actions.yaml new file mode 100644 index 0000000..b5945a4 --- /dev/null +++ b/actions.yaml @@ -0,0 +1,14 @@ +optConfig: + optIn: true +action: issue +groups: + - name: "enable-static-check" + repos: + - name: "opentelemetry*" + rules: + - name: "static-check-required" + method: "require" + requireAll: true + mustPass: false + actions: + - name: "static-scan*" \ No newline at end of file diff --git a/admin.yaml b/admin.yaml new file mode 100644 index 0000000..7f144b7 --- /dev/null +++ b/admin.yaml @@ -0,0 +1,4 @@ +optConfig: + optOutStrategy: true +action: issue +userAdminsAllowed: false \ No newline at end of file diff --git a/allstar.yaml b/allstar.yaml new file mode 100644 index 0000000..d86bb9d --- /dev/null +++ b/allstar.yaml @@ -0,0 +1,7 @@ +optConfig: + optOutStrategy: false + optOutPrivateRepos: false + optOutPublicRepos: false + optInRepos: + - "opentelemetry-go" + - "opentelemtry-go-contrib" \ No newline at end of file diff --git a/binary_artifacts.yaml b/binary_artifacts.yaml new file mode 100644 index 0000000..7dffe84 --- /dev/null +++ b/binary_artifacts.yaml @@ -0,0 +1,3 @@ +optConfig: + optOutStrategy: true +action: issue \ No newline at end of file diff --git a/branch_protection.yaml b/branch_protection.yaml new file mode 100644 index 0000000..7dffe84 --- /dev/null +++ b/branch_protection.yaml @@ -0,0 +1,3 @@ +optConfig: + optOutStrategy: true +action: issue \ No newline at end of file diff --git a/security.yaml b/security.yaml new file mode 100644 index 0000000..7dffe84 --- /dev/null +++ b/security.yaml @@ -0,0 +1,3 @@ +optConfig: + optOutStrategy: true +action: issue \ No newline at end of file From eac262f8927b1a41d238c60ef12945e48379cbfa Mon Sep 17 00:00:00 2001 From: sakshi-1505 Date: Wed, 24 Jan 2024 10:44:25 +0530 Subject: [PATCH 2/3] feat: add comment on policies Signed-off-by: sakshi-1505 --- actions.yaml | 1 + admin.yaml | 1 + allstar.yaml | 1 + binary_artifacts.yaml | 1 + branch_protection.yaml | 1 + security.yaml | 1 + 6 files changed, 6 insertions(+) diff --git a/actions.yaml b/actions.yaml index b5945a4..4c9551b 100644 --- a/actions.yaml +++ b/actions.yaml @@ -1,3 +1,4 @@ +# https://github.com/ossf/allstar#github-actions optConfig: optIn: true action: issue diff --git a/admin.yaml b/admin.yaml index 7f144b7..a83ce13 100644 --- a/admin.yaml +++ b/admin.yaml @@ -1,3 +1,4 @@ +# https://github.com/ossf/allstar#repository-administrators optConfig: optOutStrategy: true action: issue diff --git a/allstar.yaml b/allstar.yaml index d86bb9d..3c43e59 100644 --- a/allstar.yaml +++ b/allstar.yaml @@ -1,3 +1,4 @@ +# https://github.com/ossf/allstar#policies optConfig: optOutStrategy: false optOutPrivateRepos: false diff --git a/binary_artifacts.yaml b/binary_artifacts.yaml index 7dffe84..e02b471 100644 --- a/binary_artifacts.yaml +++ b/binary_artifacts.yaml @@ -1,3 +1,4 @@ +# https://github.com/ossf/allstar#binary-artifacts optConfig: optOutStrategy: true action: issue \ No newline at end of file diff --git a/branch_protection.yaml b/branch_protection.yaml index 7dffe84..8c50866 100644 --- a/branch_protection.yaml +++ b/branch_protection.yaml @@ -1,3 +1,4 @@ +# https://github.com/ossf/allstar#branch-protection optConfig: optOutStrategy: true action: issue \ No newline at end of file diff --git a/security.yaml b/security.yaml index 7dffe84..6bff580 100644 --- a/security.yaml +++ b/security.yaml @@ -1,3 +1,4 @@ +# https://github.com/ossf/allstar#securitymd optConfig: optOutStrategy: true action: issue \ No newline at end of file From b74cd291864c6c23c50f61ded8740f82180c1f49 Mon Sep 17 00:00:00 2001 From: sakshi-1505 Date: Mon, 5 Feb 2024 21:32:28 +0530 Subject: [PATCH 3/3] disable on go Signed-off-by: sakshi-1505 --- allstar.yaml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/allstar.yaml b/allstar.yaml index 3c43e59..6c5e81a 100644 --- a/allstar.yaml +++ b/allstar.yaml @@ -4,5 +4,4 @@ optConfig: optOutPrivateRepos: false optOutPublicRepos: false optInRepos: - - "opentelemetry-go" - - "opentelemtry-go-contrib" \ No newline at end of file + - "opentelemetry-java-instrumentation" \ No newline at end of file