diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..6e06abe --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,8 @@ +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + schedule: { interval: "weekly" } + - package-ecosystem: "npm" + directory: "/" + schedule: { interval: "weekly" } diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml new file mode 100644 index 0000000..b0c796f --- /dev/null +++ b/.github/workflows/cla.yml @@ -0,0 +1,20 @@ +# Org-wide CLA gate — see traverse-framework/.github (governance v1.0.1). +name: cla + +on: + issue_comment: + types: [created] + pull_request_target: + types: [opened, closed, synchronize] + +permissions: + actions: write + contents: read + pull-requests: write + statuses: write + +jobs: + cla: + uses: traverse-framework/.github/.github/workflows/reusable-cla.yml@bootstrap-governance + secrets: + cla-assistant-pat: ${{ secrets.CLA_ASSISTANT_PAT }} diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml new file mode 100644 index 0000000..e0c2093 --- /dev/null +++ b/.github/workflows/governance.yml @@ -0,0 +1,12 @@ +# Org-wide governance baseline gate — see traverse-framework/.github (governance v1.0.1). +name: governance + +on: + pull_request: {} + +permissions: + contents: read + +jobs: + baseline: + uses: traverse-framework/.github/.github/workflows/reusable-governance.yml@bootstrap-governance diff --git a/.governance-version b/.governance-version new file mode 100644 index 0000000..b18d465 --- /dev/null +++ b/.governance-version @@ -0,0 +1 @@ +v1.0.1