Organization defaults and how to change them

[bniladridas]

Everything in .github/ at the repository root applies to every public repository in coccinella-labs. Repositories inherit it automatically; there is nothing to copy and nothing to enable.

What is shared

Workflows

Workflow	Trigger	What it does
ci.yml	push and pull request, all branches	Test matrix on Ubuntu, Windows and macOS with Python 3.13. Installs .[test], then ruff check, ruff format --check and run_tests.py. Uploads coverage to Codecov with fail_ci_if_error: false.
ci.yml (codeql job)	push and pull request	CodeQL analysis for Python on Ubuntu.
ci.yml (gui-smoke job)	push and pull request	Installs python3-tk and xvfb, then runs scripts/gui-e2e.py under a virtual display.
cla.yml	pull request opened, synchronized, reopened	CLA verification, gated on repository_owner == 'coccinella-labs'. Sparse-checks out signed.json and uses the private bniladridas/cla-bot.
auto-close-prs.yml	pull request opened, reopened	Closes stale pull requests, skipping organization members.
lock-merged-prs.yml	pull request closed	On merge, runs gh pr lock and deletes the branch.
update-org-activity.yml	schedule, */30 * * * *, plus push and manual dispatch	Refreshes the activity feed in profile/README.md. Uses a concurrency group with cancel-in-progress so overlapping runs do not collide.

Community health files

• .github/CODEOWNERS - * @bniladridas
• .github/ISSUE_TEMPLATE/bug_report.md
• .github/ISSUE_TEMPLATE/feature_request.md
• .github/PULL_REQUEST_TEMPLATE.md
• .github/dependabot.yml

Repository settings

.github/settings.yml defines branch protection for main: required status checks test and codeql, one approving review, admins included, force pushes and deletions disallowed.

Changing a default

Warning

A change here lands on every public repository in the organization on its
next workflow run. Adding or tightening a required status check can block
merges across the org until every repository reports it.

1. Branch from main in this repository.
2. Make the change.
3. Run python check_all.py locally. It runs ruff check ., ruff format --check ., bandit -r main.py and run_tests.py.
4. Open a pull request describing which default you are changing and why. The shared pull request template asks for concrete reviewer-facing changes and the exact validation you ran.
5. After merge, the change applies automatically.

Tip

Test a default against a scratch repository before merging. Create a
throwaway public repo and verify the inherited workflow behaves as intended.

Where this fits

The same repository also carries the git-gui package. That part is a normal Python project and is versioned separately. See what lives in this repository.

[ghost]

Update. This release link pointed at the harpertoken organization, which no longer exists, so it does not resolve.

Current release: v0.1.2, published 2026-03-24, at coccinella-labs/.github.

Release history:

Version	Date
v0.1.0	2025-09-26
v0.1.1	2026-02-13
v0.1.2	2026-03-24