From 3d952ca18d804933228d8e6eeb8a58ce9b4d58de Mon Sep 17 00:00:00 2001 From: Baiju Muthukadan Date: Thu, 10 Sep 2026 10:32:27 +0530 Subject: [PATCH] Add CODEOWNERS and the DCO app config This repo is now open to issues and PRs from anyone, and branch protection on main requires one approving review plus a code-owner review. Without CODEOWNERS the code-owner half is vacuous: any collaborator with Write access could approve another contributor's PR. With it, the one approval has to be the maintainer's. The DCO check became required on main at the same time; .github/dco.yml is the org-standard DCO2 app config, seeded from kaappi/infra like the CODEOWNERS file. Co-Authored-By: Claude Fable 5.1 Signed-off-by: Baiju Muthukadan --- .github/CODEOWNERS | 11 +++++++++++ .github/dco.yml | 12 ++++++++++++ 2 files changed, 23 insertions(+) create mode 100644 .github/CODEOWNERS create mode 100644 .github/dco.yml diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS new file mode 100644 index 0000000..cb69ae0 --- /dev/null +++ b/.github/CODEOWNERS @@ -0,0 +1,11 @@ +# Every path needs a review from the maintainer before it can merge. +# +# Branch protection on the default branch requires one approving review +# *and* a code owner's review (set by infra's open-repo-access.sh). Without +# this file the code-owner rule is vacuous, and any collaborator with Write +# access could approve another contributor's PR on the maintainer's behalf. +# With it, "one approval" means the maintainer's. +# +# Maintainers are listed in kaappi/community's MAINTAINERS.md; keep this +# file in step with it. +* @baijum diff --git a/.github/dco.yml b/.github/dco.yml new file mode 100644 index 0000000..4e211af --- /dev/null +++ b/.github/dco.yml @@ -0,0 +1,12 @@ +# Config for the DCO2 GitHub App (https://github.com/cncf/dco2). +# Backwards compatible with the original dcoapp/app format. + +# Allow a contributor to retroactively sign off commits that failed the +# check, without rewriting history (adds a remediation commit instead). +allowRemediationCommits: + individual: true + thirdParty: false + +# Show the "Set DCO to pass" override button to maintainers on the check +# details page, for edge cases (e.g. a bot-authored commit). +allowOverrideAction: true \ No newline at end of file