access/.github
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Paul Carleton 65b5a43451
Manage GitHub org settings and org-role assignments via Pulumi (#107)
* Manage GitHub org settings and org-role assignments via Pulumi

Brings two click-ops org-level configs under IaC and tightens defaults:

- OrganizationSettings: default_repository_permission read -> none so
  private repos are not implicitly readable by every member; repo
  creation restricted to admins; billingEmail from Pulumi secret;
  security new-repo defaults pinned so the provider does not reset them.
- Org-role assignments: codify lead/core-maintainers -> all_repo_admin.
  moderators -> all_repo_triage and anthropic -> all_repo_write are
  intentionally omitted (being removed).

* Fix config namespace: use project namespace for githubBillingEmail

The github: namespace is reserved for the @pulumi/github provider's own
config keys, so github:billingEmail was rejected as an unknown provider
option. Use the project default namespace instead. preview.yml uses the
same --config flag pattern as the existing Discord secrets.
2026-04-30 13:30:54 +00:00
..
workflows Manage GitHub org settings and org-role assignments via Pulumi (#107) 2026-04-30 13:30:54 +00:00
CODEOWNERS Add CODEOWNERS: require core-maintainers for all changes (#47) 2026-01-28 15:45:18 +00:00