chore: Synced file(s) with googleworkspace/.github

.github/CODEOWNERS

@@ -0,0 +1,17 @@
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# https://help.github.com/en/github/creating-cloning-and-archiving-repositories/about-code-owners
+
+.github/ @googleworkspace/workspace-devrel-dpe

.github/sync-repo-settings.yaml

@@ -0,0 +1,54 @@
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# .github/sync-repo-settings.yaml
+# See https://github.com/googleapis/repo-automation-bots/tree/main/packages/sync-repo-settings for app options.
+rebaseMergeAllowed: true
+squashMergeAllowed: true
+mergeCommitAllowed: false
+deleteBranchOnMerge: true
+branchProtectionRules:
+  - pattern: main
+    isAdminEnforced: false
+    requiresStrictStatusChecks: false
+    requiredStatusCheckContexts:
+      # .github/workflows/test.yml with a job called "test"
+      - "test"
+      # .github/workflows/lint.yml with a job called "lint"
+      - "lint"
+      # Google bots below
+      - "cla/google"
+      - "snippet-bot check"
+      - "header-check"
+      - "conventionalcommits.org"
+    requiredApprovingReviewCount: 1
+    requiresCodeOwnerReviews: true
+  - pattern: master
+    isAdminEnforced: false
+    requiresStrictStatusChecks: false
+    requiredStatusCheckContexts:
+      # .github/workflows/test.yml with a job called "test"
+      - "test"
+      # .github/workflows/lint.yml with a job called "lint"
+      - "lint"
+      # Google bots below
+      - "cla/google"
+      - "snippet-bot check"
+      - "header-check"
+      - "conventionalcommits.org"
+    requiredApprovingReviewCount: 1
+    requiresCodeOwnerReviews: true
+permissionRules:
+  - team: workspace-devrel-dpe
+    permission: admin

.github/workflows/automation.yml

@@ -0,0 +1,69 @@
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+name: Automation
+on: [push, pull_request, workflow_dispatch]
+jobs:
+  dependabot:
+    runs-on: ubuntu-latest
+    if: ${{ github.actor == 'dependabot[bot]' &&  github.event_name == 'pull_request' }}
+    env:
+      PR_URL: ${{github.event.pull_request.html_url}}
+      GITHUB_TOKEN: ${{secrets.GOOGLEWORKSPACE_BOT_TOKEN}}
+    steps:
+      - name: approve
+        run: gh pr review --approve "$PR_URL"
+      - name: merge
+        run: gh pr merge --auto --squash --delete-branch "$PR_URL"
+  default-branch-migration:
+    # this job helps with migrating the default branch to main
+    # it pushes main to master if master exists and main is the default branch
+    # it pushes master to main if master is the default branch
+    runs-on: ubuntu-latest
+    if: ${{ github.ref == 'refs/heads/main' || github.ref == 'refs/heads/master' }}
+    steps:
+      - uses: actions/checkout@v2
+        with:
+          fetch-depth: 0
+          # required otherwise GitHub blocks infinite loops in pushes originating in an action
+          token: ${{ secrets.GOOGLEWORKSPACE_BOT_TOKEN }}
+      - name: Set env
+        run: |
+          # set DEFAULT BRANCH
+          echo "DEFAULT_BRANCH=$(gh repo view --json defaultBranchRef --jq '.defaultBranchRef.name')" >> $GITHUB_ENV;
+
+          # set HAS_MASTER_BRANCH
+          if [ ! -z "$(git ls-remote --heads origin master)" ]; then
+            echo "HAS_MASTER_BRANCH=true" >> $GITHUB_ENV
+          else
+            echo "HAS_MASTER_BRANCH=false" >> $GITHUB_ENV
+          fi
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: configure git
+        run: |
+          git config --global user.name 'googleworkspace-bot'
+          git config --global user.email 'googleworkspace-bot@google.com'
+      - if: ${{ env.DEFAULT_BRANCH == 'main' && env.HAS_MASTER_BRANCH == 'true' }}
+        name: Update master branch from main
+        run: |
+          git checkout -b master
+          git reset --hard origin/main
+          git push origin master
+      - if: ${{ env.DEFAULT_BRANCH == 'master'}}
+        name: Update main branch from master
+        run: |
+          git checkout -b main
+          git reset --hard origin/master
+          git push origin main

.github/workflows/lint.yml

@@ -0,0 +1,24 @@
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+name: Lint
+on: [push, pull_request, workflow_dispatch]
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - run: |
+          echo "No lint checks";
+          exit 1;

.github/workflows/test.yml

@@ -0,0 +1,24 @@
+# Copyright 2022 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+---
+name: Test
+on: [push, pull_request, workflow_dispatch]
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - run: |
+          echo "No tests";
+          exit 1;

SECURITY.md

@@ -0,0 +1,6 @@
+# Report a security issue
+
+To report a security issue, please use https://g.co/vulnz. We use
+https://g.co/vulnz for our intake, and do coordination and disclosure here on
+GitHub (including using GitHub Security Advisory). The Google Security Team will
+respond within 5 working days of your report on g.co/vulnz.