From 665a478223d7ba68e38c1faffcfdfc060f78ab5f Mon Sep 17 00:00:00 2001 From: Alexey Zhokhov Date: Mon, 12 Oct 2026 18:37:40 +0700 Subject: [PATCH 1/2] docs: make mandatory-list update unconditional in runbook Signed-off-by: Alexey Zhokhov --- README.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index dc84a6e..2a7ff47 100644 --- a/README.md +++ b/README.md @@ -32,9 +32,9 @@ settings, Actions policies, and runner group in `organization.tf`. `dco_only` = `["DCO"]`, `policy` = `["Policy"]`); bespoke checks inline with a comment citing the producing workflow. Repos with no CI use `required_checks = []` plus a non-empty `no_ci_reason`, extend the - allowlist check in `checks.tf`, and add the name to the mandatory list in - `mandatory_target_repositories_present` in `checks.tf` (updating its count - and message). + allowlist check in `checks.tf`, and always add the name to the mandatory + list in `mandatory_target_repositories_present` in `checks.tf` (updating + its count and message). 2. Add one import triple (settings + `protect_main` + `protect_tags`) to `imports.tf` using the live numeric ruleset IDs. From 4a5f2abc87411d1c2546df3a0e901b3b5202cf38 Mon Sep 17 00:00:00 2001 From: Alexey Zhokhov Date: Mon, 12 Oct 2026 18:40:32 +0700 Subject: [PATCH 2/2] docs: split mandatory-list update into its own sentence Codex follow-up: 'always add' inside the no-CI sentence was still ambiguous; make it a separate unconditional sentence, matching the ChainArgos and jackin-project wording. Signed-off-by: Alexey Zhokhov --- README.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index 2a7ff47..9bc6cc9 100644 --- a/README.md +++ b/README.md @@ -31,10 +31,10 @@ settings, Actions policies, and runner group in `organization.tf`. `control` = `["Control / Required"]`, `required_only` = `["Required"]`, `dco_only` = `["DCO"]`, `policy` = `["Policy"]`); bespoke checks inline with a comment citing the producing workflow. Repos with no CI use - `required_checks = []` plus a non-empty `no_ci_reason`, extend the - allowlist check in `checks.tf`, and always add the name to the mandatory - list in `mandatory_target_repositories_present` in `checks.tf` (updating - its count and message). + `required_checks = []` plus a non-empty `no_ci_reason` and extend the + allowlist check in `checks.tf`. Always add the name to the mandatory list + in `mandatory_target_repositories_present` in `checks.tf` (updating its + count and message). 2. Add one import triple (settings + `protect_main` + `protect_tags`) to `imports.tf` using the live numeric ruleset IDs.