Skip to content
sarj/github/repository-governance

Configure repository safeguards

Repositories provide baseline ownership, maintenance, and review safeguards.

warning beta

Examples

FlaggedFails
protected branches; Dependabot; no CODEOWNERS; read-only Actions
PassesClean
protected branches; Dependabot; CODEOWNERS; read-only Actions

Why it matters

Protected long-lived branches, ownership metadata, dependency-update automation, and read-only Actions defaults provide a reviewable governance baseline.

How detection works

CODEOWNERS, dependency updates, long-lived branch protection, or read-only default Actions permissions are missing.

What is inspected

  • live branch-protection and Actions-default settings
  • tracked CODEOWNERS and dependency-updater file presence

Limits

  • changing GitHub settings
  • opening dependency update pull requests

How to fix it

Add the missing ownership, maintenance, and GitHub repository controls.

  1. Add each missing file or repository setting named by the diagnostic.

Verify

  • Run repo-lint again and confirm the rule passes.