Governance Status

Repository governance controls, required checks, and enforcement expectations.

Required CI Checks

Validate SQL index

Ensures docs/data/sql-index.json is regenerated and committed whenever SQL metadata changes.

Workflow

Repository quality

Runs markdown lint, workflow lint, and link checks for README/docs reliability.

Workflow

Secret scan

Scans commits and pull requests for credential and token leakage.

Workflow

CodeQL

Performs static security analysis to detect high-risk patterns in repository automation/code.

Workflow

PR size/risk label gate

Fails pull requests missing required size and risk labels; add as required check after first successful run appears in GitHub checks list.

Workflow

Branch Protection Baseline (main)

  1. Require pull request before merging.
  2. Require at least 1 approval.
  3. Dismiss stale approvals when new commits are pushed.
  4. Require conversation resolution before merge.
  5. Require branches to be up to date before merging.
  6. Require status checks: Validate SQL index, Repository quality, Secret scan, CodeQL, PR size/risk label gate.
  7. Block force-push and deletion on main.