custom codeql in lifecycle by AlexanderLanin · Pull Request #232 · eclipse-score/.eclipsefdn

AlexanderLanin · 2026-10-02T08:31:15Z

Change some lifecycle settings as discussed with lifecycle maintainers
Move code_scanning_default_setup_enabled to be very explicitit and repo specific (no-op)
Show projects tab in all infrastructure repo

This superseeds #229

…onfig conflict

eclipse-otterdog · 2026-10-02T08:31:19Z

Thank you for raising a pull request to update the configuration of your GitHub organization.
You can manually add reviewers to this PR to eventually enable auto-merging.

The following conditions need to be fulfilled for auto-merging to be available:

valid configuration
approved by a member of team 'automotive-score-project-leads'
does not require any secrets
does not update settings only accessible via the GitHub Web UI
does not remove any resource

Otterdog commands and options

You can trigger otterdog actions by commenting on this PR:

/otterdog team-info checks the team / org membership for the PR author
/otterdog validate validates the configuration change
/otterdog validate info validates the configuration change, printing also validation infos
/otterdog check-sync checks if the base ref is in sync with live settings
/otterdog merge merges and applies the changes if the PR is eligible for auto-merging (only accessible for the author)
/otterdog done notifies the self-service bot that a required manual apply operation has been performed (only accessible for members of the admin team(s) eclipse-score/eclipsefdn-security, eclipse-score/eclipsefdn-releng)
/otterdog apply re-apply a previously failed attempt (only accessible for members of the admin team(s) eclipse-score/eclipsefdn-security, eclipse-score/eclipsefdn-releng)

eclipse-otterdog · 2026-10-02T08:31:21Z

The author (AlexanderLanin) of this PR is associated with this organization in the role of MEMBER.

Additionally, AlexanderLanin is a member of the following teams:

eclipse-otterdog · 2026-10-02T08:34:09Z

Warning

The current configuration is out-of-sync with the live settings:

Diff to live settings

Project automotive.score[github_id=eclipse-score]
  there have been 43 validation infos, enable verbose output to display them.

-  remove environment[name="copilot", repository=score] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=persistency] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

  
!   repository[name=".github"] {
!     code_scanning_default_languages = [
-      "javascript"
+      "javascript-typescript"
-      "typescript"
!     ]
!   }

-  remove environment[name="copilot", repository=.github] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=process_description] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=itf] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=baselibs] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=communication] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove repo_ruleset[name="Code Quality Copilot review for default branch", repository=communication] {
-    allows_creations           = true
-    allows_deletions           = true
-    allows_force_pushes        = true
-    allows_updates             = true
-    bypass_actors              = []
-    enforcement                = "disabled"
-    exclude_refs               = []
-    include_refs               = [
-      "~DEFAULT_BRANCH"
-    ],
-    name                       = "Code Quality Copilot review for default branch"
-    required_merge_queue       = null
-    required_pull_request      = null
-    required_status_checks     = null
-    requires_commit_signatures = false
-    requires_deployments       = false
-    requires_linear_history    = false
-    target                     = "branch"
-  }

  
!   repo_ruleset[name="main", repository=communication] {
!     required_status_checks     = {
!       status_checks              = [
+        "any:review-checklists"
-        "review-checklists"
!       ]
!     }
!   }

-  remove environment[name="copilot", repository=module_template] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=cicd-workflows] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=toolchains_gcc_packages] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=orchestrator] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=apt-install] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=devcontainer] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=feo] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=bazel_platforms] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=os_autosd] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=lifecycle] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=logging] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=score-crates] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=inc_someip_gateway] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=dash-license-scan] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=time] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=bazel_cpp_toolchains] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=score_rust_policies] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

  
!   repository[name="more-disk-space"] {
!     code_scanning_default_languages = [
-      "javascript"
-      "typescript"
+      "javascript-typescript"
!     ]
!   }

-  remove environment[name="copilot", repository=more-disk-space] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=inc_security_crypto] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=rules_imagefs] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=infrastructure] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=score_cpp_policies] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

  
!   repository[name="cicd-actions"] {
!     code_scanning_default_languages = [
-      "javascript"
-      "typescript"
+      "javascript-typescript"
!     ]
!   }

-  remove environment[name="copilot", repository=cicd-actions] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=qnx_unit_tests] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=mcp-servers] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }
  
  Plan: 0 to add, 4 to change, 33 to delete.

eclipse-otterdog · 2026-10-02T08:52:48Z

Please find below the validation of the requested configuration changes:

Diff for 7433945

Project automotive.score[github_id=eclipse-score]
  there have been 43 validation infos, enable verbose output to display them.

  
!   repository[name=".github"] {
!     has_projects = false -> true
!   }

  
!   repository[name="apt-install"] {
!     has_projects = false -> true
!   }

  
!   repository[name="bazel-tools-cc"] {
!     has_projects = false -> true
!   }

  
!   repository[name="bazel_cpp_toolchains"] {
!     has_projects = false -> true
!   }

  
!   repository[name="bazel_platforms"] {
!     has_projects = false -> true
!   }

  
!   repository[name="bazel_registry"] {
!     has_projects = false -> true
!   }

  
!   repository[name="bazel_registry_ui"] {
!     has_projects = false -> true
!   }

  
!   repository[name="cicd-actions"] {
!     has_projects = false -> true
!   }

  
!   repository[name="cicd-workflows"] {
!     has_projects = false -> true
!   }

  
!   repository[name="coverage_tool"] {
!     code_scanning_default_setup_enabled = false -> true
!     has_projects                        = false -> true
!   }

  
!   repository[name="dash-license-scan"] {
!     has_projects = false -> true
!   }

  
!   repository[name="devcontainer"] {
!     has_projects = false -> true
!   }

  
!   repository[name="docs-as-code"] {
!     has_projects = false -> true
!   }

  
!   repository[name="ferrocene_toolchain_builder"] {
!     has_projects = false -> true
!   }

  
!   repository[name="infrastructure"] {
!     has_projects = false -> true
!   }

  
!   repository[name="itf"] {
!     has_projects = false -> true
!   }

  
!   repository[name="lifecycle"] {
!     allow_rebase_merge                  = true -> false
!     code_scanning_default_setup_enabled = true -> false
!     dependabot_security_updates_enabled = false -> true
!     has_wiki                            = true -> false
!   }

  
!   repository[name="module_template"] {
!     has_projects = false -> true
!   }

  
!   repository[name="more-disk-space"] {
!     has_projects = false -> true
!   }

  
!   repository[name="os_autosd"] {
!     has_projects = false -> true
!   }

  
!   repository[name="os_images"] {
!     has_projects = false -> true
!   }

  
!   repository[name="qnx_sdp"] {
!     has_projects = false -> true
!   }

  
!   repository[name="qnx_sdp_pkg"] {
!     has_projects = false -> true
!   }

  
!   repository[name="qnx_unit_tests"] {
!     has_projects = false -> true
!   }

  
!   repository[name="reference_integration"] {
!     has_projects = false -> true
!   }

  
!   repository[name="rules_imagefs"] {
!     has_projects = false -> true
!   }

  
!   repository[name="rules_rust"] {
!     has_projects = false -> true
!   }

  
!   repository[name="sbom-tool"] {
!     has_projects = false -> true
!   }

  
!   repository[name="score_cpp_policies"] {
!     has_projects = false -> true
!   }

  
!   repository[name="score_rust_policies"] {
!     has_projects = false -> true
!   }

  
!   repository[name="testing_tools"] {
!     has_projects = false -> true
!   }

  
!   repository[name="toolchains_gcc_packages"] {
!     has_projects = false -> true
!   }

  
!   repository[name="toolchains_rust"] {
!     has_projects = false -> true
!   }

  
!   repository[name="tooling"] {
!     has_projects = false -> true
!   }

  
!   repository[name="tools"] {
!     has_projects = false -> true
!   }
  
  Plan: 0 to add, 39 to change, 0 to delete.

eclipse-otterdog · 2026-10-02T08:56:28Z

This Pull Request is eligible for auto-merging as it passed the following checks:

valid configuration
approved by a member of team 'automotive-score-project-leads'
does not require any secrets
does not update settings only accessible via the GitHub Web UI
does not remove any resource

Tip

In order to automatically merge and apply the changes, add a comment /otterdog merge. 🚀

AlexanderLanin · 2026-10-02T09:09:28Z

/otterdog merge

eclipse-otterdog · 2026-10-02T09:10:18Z

Note

The following changes have been applied successfully:

Project automotive.score[github_id=eclipse-score]
  there have been 43 validation infos, enable verbose output to display them.

  
!   repository[name=".github"] {
!     has_projects = false -> true
!   }

  
!   repository[name="apt-install"] {
!     has_projects = false -> true
!   }

  
!   repository[name="bazel-tools-cc"] {
!     has_projects = false -> true
!   }

  
!   repository[name="bazel_cpp_toolchains"] {
!     has_projects = false -> true
!   }

  
!   repository[name="bazel_platforms"] {
!     has_projects = false -> true
!   }

  
!   repository[name="bazel_registry"] {
!     has_projects = false -> true
!   }

  
!   repository[name="bazel_registry_ui"] {
!     has_projects = false -> true
!   }

  
!   repository[name="cicd-actions"] {
!     has_projects = false -> true
!   }

  
!   repository[name="cicd-workflows"] {
!     has_projects = false -> true
!   }

  
!   repository[name="coverage_tool"] {
!     code_scanning_default_setup_enabled = false -> true
!     has_projects                        = false -> true
!   }

  
!   repository[name="dash-license-scan"] {
!     has_projects = false -> true
!   }

  
!   repository[name="devcontainer"] {
!     has_projects = false -> true
!   }

  
!   repository[name="docs-as-code"] {
!     has_projects = false -> true
!   }

  
!   repository[name="ferrocene_toolchain_builder"] {
!     has_projects = false -> true
!   }

  
!   repository[name="infrastructure"] {
!     has_projects = false -> true
!   }

  
!   repository[name="itf"] {
!     has_projects = false -> true
!   }

  
!   repository[name="lifecycle"] {
!     allow_rebase_merge                  = true -> false
!     code_scanning_default_setup_enabled = true -> false
!     dependabot_security_updates_enabled = false -> true
!     has_wiki                            = true -> false
!   }

  
!   repository[name="module_template"] {
!     has_projects = false -> true
!   }

  
!   repository[name="more-disk-space"] {
!     has_projects = false -> true
!   }

  
!   repository[name="os_autosd"] {
!     has_projects = false -> true
!   }

  
!   repository[name="os_images"] {
!     has_projects = false -> true
!   }

  
!   repository[name="qnx_sdp"] {
!     has_projects = false -> true
!   }

  
!   repository[name="qnx_sdp_pkg"] {
!     has_projects = false -> true
!   }

  
!   repository[name="qnx_unit_tests"] {
!     has_projects = false -> true
!   }

  
!   repository[name="reference_integration"] {
!     has_projects = false -> true
!   }

  
!   repository[name="rules_imagefs"] {
!     has_projects = false -> true
!   }

  
!   repository[name="rules_rust"] {
!     has_projects = false -> true
!   }

  
!   repository[name="sbom-tool"] {
!     has_projects = false -> true
!   }

  
!   repository[name="score_cpp_policies"] {
!     has_projects = false -> true
!   }

  
!   repository[name="score_rust_policies"] {
!     has_projects = false -> true
!   }

  
!   repository[name="testing_tools"] {
!     has_projects = false -> true
!   }

  
!   repository[name="toolchains_gcc_packages"] {
!     has_projects = false -> true
!   }

  
!   repository[name="toolchains_rust"] {
!     has_projects = false -> true
!   }

  
!   repository[name="tooling"] {
!     has_projects = false -> true
!   }

  
!   repository[name="tools"] {
!     has_projects = false -> true
!   }

  
  Applying changes:
   ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 100% 0:00:00
  
  Done.
  
  Executed plan: 0 added, 39 changed, 0 deleted.

Subramanian-K812 and others added 2 commits October 2, 2026 10:13

reference_integration: disable default CodeQL setup to fix advanced-c…

2013744

…onfig conflict

custom codeql in lifecycle

cccf5dc

AlexanderLanin requested a review from a team as a code owner October 2, 2026 08:31

This comment has been minimized.

Sign in to view

AlexanderLanin changed the title ~~Lifecodeql~~ custom codeql in lifecycle Oct 2, 2026

add projects

7433945

MaciejKaszynski approved these changes Oct 2, 2026

View reviewed changes

AlexanderLanin mentioned this pull request Oct 2, 2026

reference_integration: disable default CodeQL setup #229

Closed

anmittag approved these changes Oct 2, 2026

View reviewed changes

eclipse-otterdog Bot merged commit 34bf4e0 into eclipse-score:main Oct 2, 2026
3 checks passed

Navigation Menu

Repository navigation

custom codeql in lifecycle - #232

custom codeql in lifecycle#232
eclipse-otterdog[bot] merged 3 commits into
eclipse-score:mainfrom
etas-contrib:lifecodeql

AlexanderLanin commented Oct 2, 2026 •

edited

Loading

Uh oh!

eclipse-otterdog Bot commented Oct 2, 2026

Uh oh!

eclipse-otterdog Bot commented Oct 2, 2026

Uh oh!

This comment has been minimized.

eclipse-otterdog Bot commented Oct 2, 2026

Uh oh!

eclipse-otterdog Bot commented Oct 2, 2026

Uh oh!

eclipse-otterdog Bot commented Oct 2, 2026

Uh oh!

AlexanderLanin commented Oct 2, 2026

Uh oh!

Uh oh!

eclipse-otterdog Bot commented Oct 2, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Conversation

AlexanderLanin commented Oct 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

eclipse-otterdog Bot commented Oct 2, 2026

Uh oh!

eclipse-otterdog Bot commented Oct 2, 2026

Uh oh!

This comment has been minimized.

eclipse-otterdog Bot commented Oct 2, 2026

Uh oh!

eclipse-otterdog Bot commented Oct 2, 2026

Uh oh!

eclipse-otterdog Bot commented Oct 2, 2026

Uh oh!

AlexanderLanin commented Oct 2, 2026

Uh oh!

Uh oh!

eclipse-otterdog Bot commented Oct 2, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

AlexanderLanin commented Oct 2, 2026 •

edited

Loading