Skip to content
Closed
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
36 changes: 36 additions & 0 deletions .github/workflows/governance.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,36 @@
# ChittyOS PR Governance - Caller Workflow
#
# Copy this file to your repository at: .github/workflows/governance.yml
#
# IMPORTANT: Replace <SHA> with the current commit SHA of chittycanon.
# This ensures the governance workflow cannot be modified without your knowledge.
#
# To get the current SHA:
# git ls-remote https://github.com/CHITTYFOUNDATION/chittycanon refs/heads/main
#
# Or run the deploy script which will update this automatically.

name: Governance

on:
pull_request:
branches:
- main
- master
- production
- 'release/**'

jobs:
governance:
name: PR Governance Check
# Pin to exact SHA - NEVER use branch or tag reference
# This ensures governance rules cannot be modified without updating all repos
uses: CHITTYFOUNDATION/chittycanon/.github/workflows/pr-governance.yml@83a7d1da1cfa5041f18450a6d43ff336068285de

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Add CODEOWNERS before enabling enforced governance gate

This workflow immediately wires in pr-governance.yml, and the commit message states that it enforces CODEOWNERS, but this repository currently has no CODEOWNERS file (repo-wide check: rg --files | rg 'CODEOWNERS$' returns nothing). In that state, every PR to the listed protected branches can fail the new governance check and block merges once the check is required, so the prerequisite file should be added in the same change (or enforcement delayed).

Useful? React with 👍 / 👎.

with:
governance_version: main

hardening:
name: Portfolio Hardening Check
uses: CHITTYFOUNDATION/chittycanon/.github/workflows/portfolio-hardening.yml@83a7d1da1cfa5041f18450a6d43ff336068285de
with:
tier: "2"