Allstar configuration for GoogleContainerTools

July 26, 2021 ยท View on GitHub

Allstar is a security-policy GitHubApp. It is installed on this org, and this repo contains the configuration for that app. It is configured to create issues on repos that do not comply with the configured policy.

Enabled Repos

Allstar is configured in opt-in. See here for the list of enabled repos. Feel free to submit a PR to enable/disable repos.

Policy Configuration

These are the expected settings to be in compliance

Branch Protection

Branches enforceddefault
Require approvalyes
Approvals required1
Dismiss stale reviewsnot required
Block force pushyes

Binary Artifacts

  • Binary artifacts not allowed.

Outside Collaborators

  • Push access allowed.
  • Admin access not allowed.

SECURITY.md

  • SECURITY.md required.