branches-disallow-advisory.json
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Show hidden characters
{
"name": "no-push-advisory-branches",
"target": "branch",
"enforcement": "active",
"conditions": {
"repository_name": {
"include": [
"ruff",
"ty",
"uv"
],
"exclude": []
},
"ref_name": {
"exclude": [],
"include": [
"refs/heads/advisory-*",
"refs/heads/ghsa-*",
"refs/heads/cve-*"
]
}
},
"rules": [
{
"type": "non_fast_forward"
},
{
"type": "creation"
},
{
"type": "update"
}
],
"bypass_actors": []
}
branches-disallow-internal.json
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Show hidden characters
{
"name": "no-push-internal-branches",
"target": "branch",
"enforcement": "active",
"conditions": {
"repository_name": {
"include": [
"ruff",
"ty",
"uv"
],
"exclude": []
},
"ref_name": {
"exclude": [],
"include": [
"refs/heads/internal/**/*"
]
}
},
"rules": [
{
"type": "non_fast_forward"
},
{
"type": "creation"
},
{
"type": "update"
}
],
"bypass_actors": []
}
branches-main.json
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Show hidden characters
{
"name": "branches-main",
"target": "branch",
"enforcement": "active",
"conditions": {
"repository_name": {
"include": [
"ruff",
"ty",
"uv"
],
"exclude": []
},
"ref_name": {
"exclude": [],
"include": [
"~DEFAULT_BRANCH"
]
}
},
"rules": [
{
"type": "deletion"
},
{
"type": "non_fast_forward"
},
{
"type": "required_linear_history"
},
{
"type": "pull_request",
"parameters": {
"required_approving_review_count": 0,
"dismiss_stale_reviews_on_push": false,
"required_reviewers": [],
"require_code_owner_review": false,
"require_last_push_approval": false,
"required_review_thread_resolution": false,
"allowed_merge_methods": [
"squash",
"rebase"
]
}
}
],
"bypass_actors": []
}
tags-are-immutable.json
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Show hidden characters
{
"name": "tags-are-immutable",
"target": "tag",
"enforcement": "active",
"conditions": {
"repository_name": {
"include": [
"ruff",
"ty",
"uv"
],
"exclude": []
},
"ref_name": {
"exclude": [],
"include": [
"~ALL"
]
}
},
"rules": [
{
"type": "deletion"
},
{
"type": "non_fast_forward"
},
{
"type": "update"
}
],
"bypass_actors": []
}
tags-require-release.json
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Show hidden characters
{
"name": "tag-requires-release",
"target": "tag",
"enforcement": "active",
"conditions": {
"repository_name": {
"include": [
"uv"
],
"exclude": []
},
"ref_name": {
"exclude": [],
"include": [
"~ALL"
]
}
},
"rules": [
{
"type": "non_fast_forward"
},
{
"type": "required_deployments",
"parameters": {
"required_deployment_environments": [
"release"
]
}
}
],
"bypass_actors": []
}
source & further reading
gist.github.com — original article
OpenCode AI config to deny read access to .env, node_modules, build artifacts, cache dirs and ask before bash execution
Download CapCut Pro 2026 for Mac
For Agentic Coding