GitHub Governance Plane
The GitHub governance plane is the bridge between ASF50 and the repository host. It covers PRs, branch protection, CI checks, and reviews.
CI workflows
The canonical workflows under .github/workflows/:
| Workflow | Purpose |
|---|---|
ci.yml | Canonical CI: tests, lint, schema validation. |
governance.yml | Branch protection and PR template governance. |
evidence-integrity.yml | Evidence hashing and integrity. |
goal-runner-ci.yml | Goal Runner Python and PowerShell test runs. |
goal-runner-governance.yml | Goal Runner governance policy checks. |
agent-config-security.yml | Agent adapter security scans. |
docs-*.yml | Documentation portal build, link check, deploy (added by ASF50_DOCS_PORTAL_001). |
Branch protection
main is branch-protected. Direct pushes are rejected. The only path to land on main is a governed merge of an approved PR.