settings

to prepare for configuring https://github.com/probot/settings for this org, i thought i'd start by capturing thoughts here. i'll work to survey existing patterns, but feel free to comment if i've missed things that we want to make sure to capture or if there are specific defaults that we should target.

Settings

Org defaults

• repo details
  • allowed merge strategies
  • wikis/projects/downloads
• branch protection
• team permissions
• labels? (this gets a little clunky once certain repos need additional labels beyond the defaults)

Per repo details

• name
• description
• homepage
• visibility
• team permissions when different than defaults
• additional collaborators? (i'd prefer to define teams if the need for this exists)

Security

since having access to modify the settings file effectively elevates someone to admin, it may be worth requiring owner review through CODEOWNERS. currently the maintainers team is essentially the same as owners. do we want that to stay that way. especially since the bot currently does not push updates to all repos after updating the org level file, would it be worth creating an owners team for this now, even if it has the same members?

Start by surveying existing organization and repository settings patterns, then review how probot/settings and CODEOWNERS would apply to the proposed defaults. Done means the required org defaults, per-repository settings, team permissions, labels, and owner-review policy are agreed and documented.