Controls: CICD-10–16, CQ-37–43, SEC-15.
The active protect-main ruleset blocks deletion/force-push and requires checks, but strict status checks are disabled and pull-request/review/CODEOWNER/signed-commit/linear-history requirements are absent. Dependabot security updates are also disabled.
Choose a solo-maintainer-safe review model, then export the final ruleset evidence into the repo. Done when the effective server-side settings satisfy the portfolio standard without making the repository unmergeable.
Controls: CICD-10–16, CQ-37–43, SEC-15.
The active
protect-mainruleset blocks deletion/force-push and requires checks, but strict status checks are disabled and pull-request/review/CODEOWNER/signed-commit/linear-history requirements are absent. Dependabot security updates are also disabled.Choose a solo-maintainer-safe review model, then export the final ruleset evidence into the repo. Done when the effective server-side settings satisfy the portfolio standard without making the repository unmergeable.