31 lines
899 B
YAML
31 lines
899 B
YAML
{
|
|
"apiVersion": "hub.example.com/v1alpha1",
|
|
"kind": "Policy",
|
|
"metadata": {
|
|
"name": "036 Gitea Reviewed Lifecycle V1",
|
|
"slug": "036-gitea-reviewed-lifecycle-v1"
|
|
},
|
|
"spec": {
|
|
"priority": 36,
|
|
"description": "Allow SHA-fenced PR synchronization, verified exact-head merge and merged-branch cleanup only for the bound gitea-all production client; connector preconditions remain mandatory.",
|
|
"match": {
|
|
"project": "gitea-all",
|
|
"environmentClassifications": ["production"],
|
|
"connectors": ["gitea"],
|
|
"riskClasses": ["R3"],
|
|
"toolPatterns": [
|
|
"gitea.pullrequest.sync",
|
|
"gitea.pullrequest.merge",
|
|
"gitea.branch.delete"
|
|
]
|
|
},
|
|
"conditions": {
|
|
"requireEnabledClient": true,
|
|
"requireBinding": true,
|
|
"maxArgumentBytes": 65536
|
|
},
|
|
"decision": "allow_if_conditions",
|
|
"terminal": true
|
|
}
|
|
}
|