Skip to content

Add public metadata guard#114

Merged
Will-thom merged 1 commit into
mainfrom
security/tool-name-guard
May 31, 2026
Merged

Add public metadata guard#114
Will-thom merged 1 commit into
mainfrom
security/tool-name-guard

Conversation

@Will-thom
Copy link
Copy Markdown
Collaborator

Summary

  • Add a required CI guard for public PR metadata
  • Block branch names, PR titles, and commit messages that mention blocked coding tools
  • Include the guard in All CI checks
  • Document the policy in contributor, CI, guardrail, permission, and PR checklist docs

Validation

  • git diff --check
  • ./.github/scripts/check-public-metadata.sh with clean metadata through Git Bash
  • negative local check with a blocked PR title

Notes

After this PR merges, the repository ruleset layer should be added on main for commit-message enforcement.

@Will-thom Will-thom added area: ci area: docs maintenance security stage: 2.1 MVP hardening and validation work before Stage 3 status: ready Ready for contributors to pick up labels May 31, 2026
@github-actions
Copy link
Copy Markdown

Hi @Will-thom, thank you for contributing to PR Maven CLI.

I appreciate the time you spent opening this pull request. This project is intentionally shaped for focused, reviewable open source contributions, so your input helps the tool become more useful for Java and Maven teams.

A maintainer will review the context, labels, and next steps as soon as possible. If this is your first contribution here, welcome aboard.

Useful links:

  • Contributing guide: CONTRIBUTING.md
  • Testing guide: docs/testing.md
  • CI/CD guide: docs/ci.md

Thank you for helping build a deterministic, local-first Maven failure triage tool.

@Will-thom Will-thom merged commit 186de3b into main May 31, 2026
22 checks passed
@Will-thom Will-thom deleted the security/tool-name-guard branch May 31, 2026 06:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area: ci area: docs maintenance security stage: 2.1 MVP hardening and validation work before Stage 3 status: ready Ready for contributors to pick up

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant