refaktor/rye

Set up branch protection

stefanb opened this issue · 3 comments

stefanb commented

https://securityscorecards.dev/viewer/?uri=github.com/refaktor/rye
doesn't find any branch protection rules:
image

Linking to https://github.com/ossf/scorecard/blob/7ce8609469289d5f3b1bf5ee3122f42b4e3054fb/docs/checks.md#branch-protection

A quick recipe to fix this:

  1. Visit https://github.com/refaktor/rye/settings/rules
  2. Add new branch ruleset
  3. Give it a name, eg. "default branch protection"
  4. Set enforcement to active
    image
  5. apply it to default branch
    image
  6. Tick checkboxes at
    • Restrict deletions (so that the master branch cannot be deleted)
    • Block force puhes (to avoid rewriting history)
  7. Consider other options (eg requiring pull requests, approval...)

More info about the repository rulesets: https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/about-rulesets

refaktor commented

Thank you for issue and instructions. I've set it up, I hope it's OK now.

stefanb commented

Thanks! We'll see if it is ok after https://securityscorecards.dev/viewer/?uri=github.com/refaktor/rye is updated next (on a commit to master or on a weekly schedule).

stefanb commented

It is better now, but still not ideal:
image