Kenearos
52171f4824
Adopt the org engineering standard (its-consulting/standards @ v1.0.0).
Adds baseline governance/CI/policy files rendered from the standard's
templates and pins .standards-version=1.0.0. Vendored OPA/Rego policies
under .standards/policies/ so CI runs the gate locally (no cross-repo dep).
Placeholders ({{ORG}}/{{REPO}}/{{OWNER_HANDLE}}/{{MAINTAINER_EMAIL}}) filled in.
Existing files that differ were left untouched by the adopter.
Automated rollout. Files created: 15.
1.9 KiB
1.9 KiB
What & why
Closes #
Type of change
feat— new functionalityfix— bug fixdocs— documentation onlyci/refactor/test/chore- Breaking change (consumers must act —
!/BREAKING CHANGE:in the commit) - Decision — an ADR is included or updated (
docs/adr/NNNN-*.md)
SOP-001 (branch & merge) checklist
- Branched from
developwith a short-livedfeature/<topic>(no direct commits tomain/develop). - Commits follow Conventional Commits.
- Up to date with the base branch (rebased/merged); no merge conflicts.
- At least one CODEOWNERS reviewer is requested.
CHANGELOG.mdupdated under[Unreleased](if user-facing).
Policy & security gates (must be green)
pre-commit run -apasses locally (whitespace/EOF/YAML, shellcheck, gitleaks, sops-encrypted-check).- CI
static-checks,test,build,policy_checkandsecurity-scanstages pass. - No plaintext secrets added — secrets are SOPS+age encrypted (
*.enc.*/*.sops.*only). SeeSECURITY.md. - Data traffic-light respected: nothing 🔴 RED (sensitive personal data / plaintext keys) committed.
- If this asserts a rule: an ADR records why, an SOP records how, and a Policy (+
*_test.rego) enforces it.