Skip to content

chore: harden the open-source repo - #2

Merged
harshmathurx merged 1 commit into
mainfrom
chore/repo-hardening
Oct 7, 2026
Merged

harshmathurx merged 1 commit into
mainfrom
chore/repo-hardening

Conversation

@harshmathurx

Copy link
Copy Markdown
Owner

Repo hygiene to go with the new branch and tag rulesets:

  • CI: actions pinned to commit SHAs, permissions: contents: read, persist-credentials: false, timeout, concurrency.
  • CODEOWNERS (every change needs @harshmathurx's review).
  • Dependabot for npm (weekly) and GitHub Actions (monthly).
  • SECURITY.md with private vulnerability reporting; issue config.yml points security reports there. Blank issues stay enabled so the popup's Report a problem prefill keeps working.
  • PR template (tests, e2e for engine changes, privacy check).
  • CONTRIBUTING: how to report bugs, how PRs land.

🤖 Generated with Claude Code

…, Dependabot, SECURITY.md, PR/issue templates)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@harshmathurx
harshmathurx merged commit d7e0ac3 into main Oct 7, 2026
1 check passed
@harshmathurx
harshmathurx deleted the chore/repo-hardening branch October 7, 2026 08:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant