Skip to content

Conversation

@harshil-roo
Copy link

JIRA: PSC-1944


Why this PR?

We're adding a CI/CD check to automatically validate your CODEOWNERS file on every commit.


The Problem

Invalid or misconfigured CODEOWNERS files can cause:

  • Missed or incorrect code reviews
  • Security gaps (anyone with write access can approve PRs)
  • Slower workflows (missed team notifications)
  • Audit issues (large or broken codeowner groups)

The Solution

A new CI check will:

  • Warn if your CODEOWNERS file is missing or invalid
  • Check that all listed teams/users exist and have write access

For now, this is a warning only.
We’ll make it blocking soon.


What to Do

  1. Approve this PR, even if you see a warning.
  2. Review your CODEOWNERS file and fix any issues. Confirm this PR is either updating an existing codeowners file or adding a new one.
  3. Make sure your codeowners meet GitHub Security Standard.

For help, ask in #support-devsecops.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants