Skip to content

Commit bba340a

Browse files
etoyamaclaude
etoyama
and
claude
committed
chore: add GitHub best practice configs
- Add dependabot.yml for pip, npm, and github-actions weekly updates - Add SECURITY.md with vulnerability reporting policy - Add issue templates (bug report, feature request) as YAML forms - Add pull request template with checklist - Add CODEOWNERS with default owner Repo settings updated via API: squash-merge only, delete-branch-on-merge, branch protection on main (CI required), wiki disabled. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
1 parent c066db7 commit bba340a

6 files changed

Lines changed: 194 additions & 0 deletions

File tree

‎.github/CODEOWNERS‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
# Default owner for everything in the repo
2+
* @etoyama

‎.github/ISSUE_TEMPLATE/bug_report.yml‎

Lines changed: 73 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,73 @@
1+
name: Bug Report
2+
description: Report a bug or unexpected behavior
3+
labels: ["bug"]
4+
body:
5+
- type: markdown
6+
attributes:
7+
value: |
8+
Thanks for taking the time to report a bug.
9+
10+
- type: textarea
11+
id: description
12+
attributes:
13+
label: Description
14+
description: A clear and concise description of the bug.
15+
validations:
16+
required: true
17+
18+
- type: textarea
19+
id: steps
20+
attributes:
21+
label: Steps to Reproduce
22+
description: Steps to reproduce the behavior.
23+
placeholder: |
24+
1. Run `insight-blueprint --project ...`
25+
2. Call MCP tool `create_analysis_design` with ...
26+
3. See error
27+
validations:
28+
required: true
29+
30+
- type: textarea
31+
id: expected
32+
attributes:
33+
label: Expected Behavior
34+
description: What you expected to happen.
35+
validations:
36+
required: true
37+
38+
- type: textarea
39+
id: actual
40+
attributes:
41+
label: Actual Behavior
42+
description: What actually happened. Include error messages or logs if available.
43+
validations:
44+
required: true
45+
46+
- type: input
47+
id: version
48+
attributes:
49+
label: Version
50+
description: "Output of `insight-blueprint --version` or commit hash."
51+
placeholder: "0.1.0 / abc1234"
52+
validations:
53+
required: false
54+
55+
- type: dropdown
56+
id: os
57+
attributes:
58+
label: Operating System
59+
options:
60+
- macOS
61+
- Linux
62+
- Windows
63+
- Other
64+
validations:
65+
required: false
66+
67+
- type: textarea
68+
id: context
69+
attributes:
70+
label: Additional Context
71+
description: Any other context, screenshots, or log output.
72+
validations:
73+
required: false

‎.github/ISSUE_TEMPLATE/feature_request.yml‎

Lines changed: 41 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,41 @@
1+
name: Feature Request
2+
description: Suggest a new feature or improvement
3+
labels: ["enhancement"]
4+
body:
5+
- type: markdown
6+
attributes:
7+
value: |
8+
Thanks for suggesting a feature.
9+
10+
- type: textarea
11+
id: problem
12+
attributes:
13+
label: Problem
14+
description: What problem does this feature solve? Is it related to a frustration?
15+
placeholder: "I'm always frustrated when ..."
16+
validations:
17+
required: true
18+
19+
- type: textarea
20+
id: solution
21+
attributes:
22+
label: Proposed Solution
23+
description: Describe the solution you'd like.
24+
validations:
25+
required: true
26+
27+
- type: textarea
28+
id: alternatives
29+
attributes:
30+
label: Alternatives Considered
31+
description: Any alternative solutions or features you've considered.
32+
validations:
33+
required: false
34+
35+
- type: textarea
36+
id: context
37+
attributes:
38+
label: Additional Context
39+
description: Any other context, mockups, or references.
40+
validations:
41+
required: false

‎.github/PULL_REQUEST_TEMPLATE.md‎

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
## Summary
2+
3+
<!-- What does this PR do? Keep it to 1-3 sentences. -->
4+
5+
## Changes
6+
7+
<!-- Bulleted list of key changes. -->
8+
9+
-
10+
11+
## Related Issues
12+
13+
<!-- Link related issues: Fixes #123, Closes #456 -->
14+
15+
## Checklist
16+
17+
- [ ] `poe all` passes (lint + typecheck + test)
18+
- [ ] Tests added/updated for new functionality
19+
- [ ] No hardcoded secrets or sensitive data

‎.github/dependabot.yml‎

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
version: 2
2+
updates:
3+
- package-ecosystem: "pip"
4+
directory: "/"
5+
schedule:
6+
interval: "weekly"
7+
day: "monday"
8+
open-pull-requests-limit: 10
9+
labels:
10+
- "dependencies"
11+
- "python"
12+
13+
- package-ecosystem: "npm"
14+
directory: "/frontend"
15+
schedule:
16+
interval: "weekly"
17+
day: "monday"
18+
open-pull-requests-limit: 10
19+
labels:
20+
- "dependencies"
21+
- "javascript"
22+
23+
- package-ecosystem: "github-actions"
24+
directory: "/"
25+
schedule:
26+
interval: "weekly"
27+
day: "monday"
28+
open-pull-requests-limit: 5
29+
labels:
30+
- "dependencies"
31+
- "ci"

‎SECURITY.md‎

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,28 @@
1+
# Security Policy
2+
3+
## Supported Versions
4+
5+
| Version | Supported |
6+
|---------|--------------------|
7+
| 0.1.x | Yes |
8+
9+
## Reporting a Vulnerability
10+
11+
If you discover a security vulnerability in this project, please report it responsibly.
12+
13+
**Do not open a public issue.**
14+
15+
Instead, please send an email to the repository owner or use [GitHub's private vulnerability reporting](https://github.com/etoyama/insight-blueprint/security/advisories/new).
16+
17+
### What to include
18+
19+
- Description of the vulnerability
20+
- Steps to reproduce
21+
- Potential impact
22+
- Suggested fix (if any)
23+
24+
### Response timeline
25+
26+
- **Acknowledgment**: within 48 hours
27+
- **Initial assessment**: within 1 week
28+
- **Fix or mitigation**: best effort, depending on severity

0 commit comments

Comments
 (0)