blob: 2a07e1c7a7d4eae595c91912cc2d62c9ad77361c [file]
[project]
description = Access inherited by all other projects.
[receive]
requireContributorAgreement = false
requireSignedOffBy = false
requireChangeId = true
enableSignedPush = false
createNewChangeForAllNotInTarget = false
[submit]
mergeContent = false
action = fast forward only
[access "refs/*"]
read = group Anonymous Users
read = group ldap/manganese-gob-admins
revert = group Registered Users
[access "refs/for/refs/*"]
push = group Registered Users
pushMerge = group Registered Users
[access "refs/heads/*"]
create = group Project Owners
create = group ldap/manganese-gob-admins
forgeAuthor = group Registered Users
forgeCommitter = group Project Owners
forgeCommitter = group ldap/manganese-gob-admins
push = group Project Owners
push = group autoupdate-service-accounts
push = group autoupdate-vigil-service-accounts
push = group ldap/manganese-gob-admins
label-Code-Review = -2..+2 group Project Owners
label-Code-Review = -2..+2 group ldap/manganese-gob
label-Code-Review = -2..+2 group ldap/manganese-gob-admins
label-Code-Review = -1..+1 group Registered Users
submit = group Project Owners
submit = group autoupdate-service-accounts
submit = group autoupdate-vigil-service-accounts
submit = group ldap/manganese-gob
submit = group ldap/manganese-gob-admins
editTopicName = +force group Project Owners
editTopicName = +force group ldap/manganese-gob-admins
label-SLSA-Policy-Verified = -1..+1 group SLSA Policy Verification Service Accounts
Read = group SLSA Policy Verification Service Accounts
Read = group autoupdate-onboarding-service-accounts
Read = group autoupdate-service-accounts
Read = group autoupdate-vigil-service-accounts
[access "refs/meta/config"]
exclusiveGroupPermissions = read
read = group Project Owners
read = group ldap/manganese-gob-admins
push = group Project Owners
push = group ldap/manganese-gob-admins
label-Code-Review = -2..+2 group Project Owners
label-Code-Review = -2..+2 group ldap/manganese-gob-admins
submit = group Project Owners
submit = group ldap/manganese-gob-admins
create = group Project Owners
create = group ldap/manganese-gob-admins
[access "refs/tags/*"]
createTag = group Project Owners
createTag = group ldap/manganese-gob-admins
createSignedTag = group Project Owners
createSignedTag = group ldap/manganese-gob-admins
[label "Code-Review"]
function = NoBlock
defaultValue = 0
value = -2 This shall not be merged
value = -1 I would prefer this is not merged as is
value = 0 No score
value = +1 Looks good to me, but someone else must approve
value = +2 Looks good to me, approved
copyCondition = changekind:NO_CHANGE OR changekind:TRIVIAL_REBASE OR is:MAX
[access "refs/for/*"]
addPatchSet = group Registered Users
[capability]
administrateServer = group ldap/manganese-gob-admins
viewAllAccounts = group autoupdate-onboarding-service-accounts
viewAllAccounts = group autoupdate-service-accounts
viewAllAccounts = group autoupdate-vigil-service-accounts
[submit-requirement "Code-Review"]
submittableIf = label:Code-Review=MAX AND -label:Code-Review=MIN
canOverrideInChildProjects = true