summaryrefslogtreecommitdiffhomepage
path: root/.github
diff options
context:
space:
mode:
authorLinus Färnstrand <linus@mullvad.net>2024-07-18 14:58:17 +0200
committerLinus Färnstrand <linus@mullvad.net>2024-07-23 09:35:48 +0200
commit5cd5bbcf40274093394c166dc0d624bf9357be16 (patch)
treef6b01720b25ba66abd9bd5a7aafd072c38e66a4c /.github
parentdb67d44a618412a7069da1f1acb182a3b83af966 (diff)
downloadmullvadvpn-5cd5bbcf40274093394c166dc0d624bf9357be16.tar.xz
mullvadvpn-5cd5bbcf40274093394c166dc0d624bf9357be16.zip
Add initial github CODEOWNERS file
Limits a bit who has to approve changes to what files. This is far from complete, but rather testing out the system. Some of the more important files have been added for the sake of evaluating this in this repository.
Diffstat (limited to '.github')
-rw-r--r--.github/CODEOWNERS26
1 files changed, 26 insertions, 0 deletions
diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
new file mode 100644
index 0000000000..ecd64eb8e4
--- /dev/null
+++ b/.github/CODEOWNERS
@@ -0,0 +1,26 @@
+# Defining who has to review changes to what files.
+# Try to keep the entries sorted alphabetically, so they end up in the same order as
+# they would if you listed the entire repository as a tree.
+
+# Container images used for building the app are owned by respective team leads and tech lead
+/building/android-container-image.txt @faern @albin-mullvad
+/building/linux-container-image.txt @faern @raksooo
+
+# Developer signing keys must be approved by team/tech leads
+/ci/keys/ @faern @raksooo @pinkisemils @albin-mullvad
+
+# Desktop build server files owned by desktop leads
+/ci/buildserver* @faern @raksooo
+/ci/linux-repository-builder/ @faern @raksooo
+
+# Cargo deny config must be approved by tech lead or desktop team lead
+**/deny.toml @faern @raksooo
+
+# Changes to what CVEs are ignored must be approved by leads
+**/osv-scanner.toml @faern @raksooo @pinkisemils @albin-mullvad
+/.github/workflows/osv-scanner*.yml @faern @raksooo @pinkisemils @albin-mullvad
+
+# The CODEOWNERS itself must be protected from unauthorized changes,
+# otherwise the protection becomes quite moot.
+# Keep this entry last, so it is sure to override any existing previous wildcard match
+/.github/CODEOWNERS @faern @raksooo @pinkisemils @albin-mullvad