mirror of
https://github.com/coder/registry.git
synced 2026-06-02 20:48:14 +00:00
Jakub Domeracki
836536eb97
## Summary Adds a `CODEOWNERS` file to enforce code review requirements for GitHub Actions workflow changes. - Creates `CODEOWNERS` file designating `@jdomeracki-coder` as owner of `.github/` directory - All changes to GitHub Actions workflows (`.github/` directory) now require approval from the designated code owner - Improves security posture by preventing unauthorized modifications to CI/CD pipelines ## Why this change? GitHub Actions workflows have elevated privileges and can access repository secrets. Requiring explicit approval for workflow changes helps prevent: - Accidental or malicious modifications to CI/CD pipelines - Unauthorized access to secrets - Supply chain security vulnerabilities ## Test plan - [x] Verify CODEOWNERS file is properly formatted - [ ] Test that PRs modifying `.github/` directory require approval from `@jdomeracki-coder` - [ ] Confirm existing PRs not touching `.github/` continue to work normally
3 lines
60 B
Plaintext
3 lines
60 B
Plaintext
# GitHub Actions Workflow Owners
|
|
.github/ @jdomeracki-coder
|