# governance.yml — Repository governance configuration
# Place this file in each Template-* repo to define branch protections,
# labels, secrets, variables, and repository settings for governed repos.
#
# Copyright (C) 2026 Moko Consulting <hello@mokoconsulting.tech>
# SPDX-License-Identifier: GPL-3.0-or-later
# Schema Version: 1.0

schema_version: "1.0"

branch_protections:
  - pattern: main
    require_pull_request: true
    required_approvals: 0
    dismiss_stale_reviews: true
    block_on_rejected_reviews: true
    restrict_pushes: true
    push_whitelist: [jmiller]
    enable_force_push: true
    force_push_whitelist: [jmiller]
    enforce_admins: false
  - pattern: dev
    require_pull_request: false
    restrict_pushes: false
    enable_force_push: true
    force_push_whitelist: [jmiller]
  - pattern: "rc/*"
    require_pull_request: false
    restrict_pushes: false
    enable_force_push: true
    force_push_whitelist: [jmiller]
  - pattern: "beta/*"
    require_pull_request: false
    restrict_pushes: false
    enable_force_push: true
    force_push_whitelist: [jmiller]
  - pattern: "alpha/*"
    require_pull_request: false
    restrict_pushes: false
    enable_force_push: true
    force_push_whitelist: [jmiller]

labels:
  - name: bug
    color: d73a4a
    description: "Something isn't working"
  - name: enhancement
    color: a2eeef
    description: "New feature or request"
  - name: documentation
    color: "0075ca"
    description: "Improvements or additions to documentation"
  - name: security
    color: ee0701
    description: "Security vulnerability or concern"

secrets:
  - name: GA_TOKEN
    description: "Gitea API token for automation"
    required: true
    scope: org
  - name: GH_TOKEN
    description: "GitHub PAT for mirror operations"
    required: false
    scope: org

variables:
  - name: GITEA_URL
    description: "Gitea instance URL"
    default: "https://git.mokoconsulting.tech"
    scope: org
  - name: GITEA_ORG
    description: "Gitea organization name"
    default: "MokoConsulting"
    scope: org

repo_settings:
  has_issues: true
  has_projects: true
  has_wiki: false
  has_discussions: false
  allow_merge_commit: true
  allow_squash_merge: true
  allow_rebase_merge: false
  delete_branch_on_merge: true
  allow_auto_merge: false