forked from arnica-ext/GitGoat
-
Notifications
You must be signed in to change notification settings - Fork 0
/
config.yaml
232 lines (226 loc) · 6.33 KB
/
config.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
## Github Search Base URL.
base_url:
https://api.github.com
## GitHub headers without the Authorization Header
base_headers:
Accept:
application/vnd.github.v3+json
User-Agent:
arnica-github-mocker
## Organization names to run GitGoat on.
org_names:
- GitGoat-Org
## Repo names to generate
repo_names:
- Echinacea
- Lavender
- Chamomile
- Calendula
- Tarragon
## Specific configurations per repo (optional).
### "branch_protection" means the policy is enabled in the main branch
### "branch_protection_restirctions" define who can push to the protected branch. A team name is specified by the prefix, e.g. the team "Lavender-push" should be included as "push".
### "codeowners" configure the codeowners file definitions. The possible paths are '' (root), './github'. or '/docs'. The patterns and users/teams associations are in the codeowners documentations on GitHub, but the name of the teams should include only the postfixes (as explained above).
### "actions_enabled" means that the repo has GitHub Action enabled
### "allowed_actions" defines the scope of the allowed actions. The options are "all", "selected" or "local_only". It is applicable only if "actions_enabled" is true.
### "verified_allowed_actions" defined if verified actions (not neccesarily owned by GitHub) are allowed. It is applicable only if "actions_enabled" is true.
repo_configs:
Echinacea:
branch_protection: False
actions_enabled: True
allowed_actions: all
codeowners:
path: ''
owners:
- pattern: '*'
users:
- miker-gg
teams:
- push
Lavender:
branch_protection: True
branch_protection_restirctions:
users: []
teams:
- push
enforce_admins: False
require_code_owner_reviews: True
codeowners:
path: docs/
owners:
- pattern: '*'
users:
- archiet-gg
teams:
- push
actions_enabled: True
allowed_actions: selected
verified_allowed_actions: False
Chamomile:
branch_protection: False
actions_enabled: True
allowed_actions: selected
verified_allowed_actions: True
Calendula:
branch_protection: True
branch_protection_restirctions:
users: []
teams:
- push
enforce_admins: True
require_code_owner_reviews: False
actions_enabled: False
Tarragon:
branch_protection: False
actions_enabled: False
## Teams are constructed in the code as [repo]-[group_postfix]
teams:
- repo: Echinacea
group_postfixes:
- admin
- push
- pull
- repo: Lavender
group_postfixes:
- triage
- maintain
- push
- repo: Chamomile
group_postfixes:
- admin
- triage
- pull
- push
- repo: Calendula
group_postfixes:
- triage
- pull
- push
- repo: Tarragon
group_postfixes:
- pull
- push
## Members detailed information.
### The member_id can be retrieved by queriying https://api.github.com/users/[login]. It is required as a parameter to invite and accept the invitations to the organization.
### The login is the username on GitHub.
### Please DO NOT rant about the token here - it has limited scopes and it's here to simplify your "time to hello world".
### To control group membership, add the list of groups under 'member_of_groups'
### More granular details are in the 'days_since_last_commit' section, which represent how commits and pull requests will be executed.
members:
- member_id: 90474231
login: miker-gg
email: miker@@gitgoat.tools
token: xA6DOQRPkmo6wuP5GUfSJCl6u7H3si2a6AFc
gitgoat_repo_permission: push
member_of_groups:
- Lavender-push
- Calendula-triage
- Chamomile-push
- Echinacea-pull
- Calendula-push
days_since_last_commit: []
- member_id: 90470369
login: archiet-gg
email: [email protected]
token: EbcLokhBwUKnN5WmJz6eOwiXN0sFC04UxDIs
gitgoat_repo_permission: admin
member_of_groups:
- Echinacea-admin
- Echinacea-push
- Lavender-maintain
- Lavender-push
- Chamomile-admin
- Chamomile-triage
- Chamomile-pull
- Chamomile-push
- Tarragon-push
days_since_last_commit:
- repo: Echinacea
days: 91
branch: main
create_pr: False
- repo: Lavender
days: 14
branch: feature_L01
create_pr: False
- repo: Chamomile
days: 0
branch: feature_C01
create_pr: False
- repo: Tarragon
days: 102
branch: main
create_pr: False
- member_id: 90471042
login: billdp-gg
email: [email protected]
token: Nk6u8zQjI5o1CX9QWNuY4VOpmGIo452GEq2T
gitgoat_repo_permission: maintain
member_of_groups:
- Echinacea-push
- Echinacea-pull
- Lavender-triage
- Lavender-push
- Lavender-pull
- Chamomile-triage
- Chamomile-pull
- Calendula-pull
- Tarragon-pull
days_since_last_commit:
- repo: Echinacea
days: 120
branch: main
create_pr: False
- repo: Lavender
days: 5
branch: feature_L02a
create_pr: True
- repo: Lavender
days: 20
branch: feature_L02b
create_pr: True
- member_id: 90473779
login: codeyf-gg
email: [email protected]
token: B81U7smn2ScvPp7nfDXj7RNpTBZvk90tYwiN
gitgoat_repo_permission: push
member_of_groups:
- Echinacea-pull
- Lavender-push
- Chamomile-admin
- Chamomile-triage
- Chamomile-push
- Calendula-push
- Tarragon-push
days_since_last_commit:
- repo: Lavender
days: 101
branch: feature_L03
create_pr: True
- repo: Chamomile
days: 0
branch: feature_C03a
create_pr: True
- repo: Chamomile
days: 14
branch: feature_C03b
create_pr: True
- repo: Calendula
days: 95
branch: feature_C03
create_pr: True
- repo: Tarragon
days: 93
branch: main
create_pr: False
- member_id: 90473997
login: debu-gg
email: [email protected]
token: NSWR5qmC4g9Cx8Y8yXzQE4kzUmBYWf16ZTsF
gitgoat_repo_permission: triage
member_of_groups:
- Echinacea-pull
- Chamomile-pull
- Calendula-triage
- Tarragon-pull
days_since_last_commit: []