-
Notifications
You must be signed in to change notification settings - Fork 53
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Migrate from branch protection to rulesets? #255
Comments
I may have been too hasty! At some point in the future, GitHub should have a "click here to move your branch protection settings to rulesets" button. Unless someone wants to pick this up sooner than later, I think it'll be less work if we wait for the button. |
I like the EASY button
Cheers,
CRob
Director of Security Communications
Intel Product Assurance and Security
Book time with Robinson, Christopher ***@***.***?anonymous&ep=pcard>
From: Zach Steindler ***@***.***>
Sent: Tuesday, February 20, 2024 9:56 AM
To: ossf/tac ***@***.***>
Cc: Subscribed ***@***.***>
Subject: Re: [ossf/tac] Migrate from branch protection to rulesets? (Issue #255)
I may have been too hasty! At some point in the future, GitHub should have a "click here to move your branch protection settings to rulesets" button. Unless someone wants to pick this up sooner than later, I think it'll be less work if we wait for the button.
—
Reply to this email directly, view it on GitHub<#255 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AQRFDLGW3VLBJA7NXKZBK4LYUS2QNAVCNFSM6AAAAABC2VMQROVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSNJUGM4TGOBWGU>.
You are receiving this because you are subscribed to this thread.Message ID: ***@***.******@***.***>>
|
Is this a duplicate of 333 and can be closed out in this issue? |
One problem is that branch protection is easily verified, and Scorecard does this. Rulesets aren't. I didn't see an argument for the switch - why should we switch? |
Notes from TAC call where this was discussed:
|
We're currently using branch protection settings for PRs, but we could also consider migrating from branch protection to rulesets (https://github.com/ossf/tac/settings/rules).
Originally posted by @steiza in #252 (review)
The text was updated successfully, but these errors were encountered: