add repo protection and metadata configuration#5
Merged
Conversation
added 2 commits
April 10, 2026 10:54
Add the full suite of repository governance files inspired by skeptic: - LICENSE: GPLv3 (replacing Apache 2.0 reference in README) - CODEOWNERS: root and .github/ copies assigning @TGPSKI - OWNERS: structured maintainer metadata - CONTRIBUTING.md: contribution guidelines, workflow conventions, quality gates - .github/workflows/ci.yml: validates SKILL.md entry points, references/ directories, phase file naming, and internal link integrity - .github/workflows/auto-label.yml: applies ok-to-test label for trusted PR authors derived from CODEOWNERS and OWNERS - .github/ruleset-main.json: required status checks, signed commits, non-fast-forward protection on main - .github/ruleset-main-reviews.json: required PR reviews with code owner approval and thread resolution on main - .github/ruleset-fork-only.json: restricts branch creation/update on non-main branches to repo admins Made-with: Cursor
Pin the Agent Skills specification at agentskills/agentskills@1eeb1aab and enforce it in two places: - CONTRIBUTING.md: add Agent Skills Specification section with required and optional frontmatter fields, SHA-pinned link to the spec, and add spec conformance as quality gate item #3 - CI workflow: add frontmatter validation step that checks every SKILL.md for YAML frontmatter with required name (lowercase alphanumeric + hyphens, 1-64 chars, no consecutive hyphens, matches parent directory) and description (1-1024 chars) fields per the spec Made-with: Cursor
Add merge_queue rule with merge_method: squash to the main branch ruleset, ensuring all PRs targeting main use squash merges for a clean linear history. Made-with: Cursor
TGPSKI
force-pushed
the
add-repo-protection-metadata
branch
from
512abf3 to
30bedcb
Compare
Remove merge_queue and required_signatures rules that are not valid ruleset rule types in the GitHub API. Squash-merge-only is enforced via repo settings (allow_squash_merge=true, others disabled). Commit signing can be re-enabled once GPG/SSH signing is configured. Add admin bypass (RepositoryRole 5) so repo admins can merge. Made-with: Cursor
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Add the full suite of repository governance, licensing, and CI protection files inspired by the skeptic repo:
.github/copies assigning@TGPSKIas default reviewer.github/workflows/ci.yml): validates SKILL.md entry points,references/directories, phase file naming, internal link integrity, and Agent Skills spec frontmatter (requirednameanddescriptionfields with full constraint checking).github/workflows/auto-label.yml): appliesok-to-testlabel for trusted PR authors derived from CODEOWNERS and OWNERS, gating CI on external PRsruleset-main.json: required status checks (validate job), signed commits, non-fast-forward protectionruleset-main-reviews.json: required PR reviews with code owner approval and thread resolutionruleset-fork-only.json: restricts branch creation/update on non-main branches to repo adminsAgent Skills spec enforcement
The CI workflow validates every
SKILL.mdagainst the Agent Skills specification (SHA-pinned at1eeb1aab):---delimiters)name: required, 1-64 chars, lowercase alphanumeric + hyphens, no consecutive hyphens, must match parent directorydescription: required, 1-1024 charsTest plan