fix: run project structure check on every PR

Author: Cuica20

.github/workflows/project-structure.yml

@@ -2,8 +2,8 @@ name: Project structure
 
 on:
   pull_request:
-    paths:
-      - 'projects/**'
+  push:
+    branches: [main]
 
 permissions:
   contents: read

scripts/github/configure-repository.sh

@@ -2,12 +2,19 @@
 set -euo pipefail
 
 dry_run=false
-[[ "${1:-}" == "--dry-run" ]] && dry_run=true
+apply_protection=false
+for argument in "$@"; do
+  [[ "$argument" == "--dry-run" ]] && dry_run=true
+  [[ "$argument" == "--apply-branch-protection" ]] && apply_protection=true
+done
 command -v gh >/dev/null || { echo 'GitHub CLI is required.'; exit 1; }
 gh auth status
 org="${GITHUB_ORG:?Set GITHUB_ORG}"
 repo="${GITHUB_REPO:-ai-community}"
-echo "Proposed settings for $org/$repo: public repository, description/topics, Discussions enabled, and main branch rules: PRs, one approval, resolved conversations, required checks, no force pushes."
-echo 'Review current GitHub plan and existing rules before applying. This script intentionally does not change branch protection or existing security settings.'
+visibility="$(gh repo view "$org/$repo" --json visibility --jq .visibility)"
+[[ "$visibility" == "PUBLIC" ]] || { echo 'Branch protection requires a public repository on this organization plan.'; exit 1; }
+echo "Proposed protection for $org/$repo main: PRs, one approval, resolved conversations, required checks, no force pushes, and administrator enforcement."
 $dry_run && exit 0
-echo 'No changes made: branch protection requires an explicit reviewed configuration for the detected GitHub plan.'
+$apply_protection || { echo 'No changes made. Use --apply-branch-protection after reviewing scripts/github/main-branch-protection.json.'; exit 0; }
+gh api --method PUT "repos/$org/$repo/branches/main/protection" --input scripts/github/main-branch-protection.json >/dev/null
+echo 'Applied main branch protection.'

scripts/github/main-branch-protection.json

@@ -0,0 +1,25 @@
+{
+  "required_status_checks": {
+    "strict": true,
+    "contexts": [
+      "Validate pull request / validate",
+      "Markdown check / markdown",
+      "Project structure / project-readme"
+    ]
+  },
+  "enforce_admins": true,
+  "required_pull_request_reviews": {
+    "dismiss_stale_reviews": true,
+    "require_code_owner_reviews": false,
+    "required_approving_review_count": 1,
+    "require_last_push_approval": false
+  },
+  "restrictions": null,
+  "required_linear_history": false,
+  "allow_force_pushes": false,
+  "allow_deletions": false,
+  "block_creations": false,
+  "required_conversation_resolution": true,
+  "lock_branch": false,
+  "allow_fork_syncing": true
+}