Skip to content

docs: add ADR-0017 for OSS governance & supply-chain hardening - #35

Merged
SHcommit merged 1 commit into
developfrom
docs/adr-oss-governance-hardening
Sep 5, 2026
Merged

docs: add ADR-0017 for OSS governance & supply-chain hardening#35
SHcommit merged 1 commit into
developfrom
docs/adr-oss-governance-hardening

Conversation

@SHcommit

@SHcommit SHcommit commented Sep 5, 2026

Copy link
Copy Markdown
Owner

Part of epic #21.

Record the governance & supply-chain hardening decision as ADR-0017 (status accepted), documenting:

  • source-controlled label taxonomy + path-based labeler + Dependabot + Issue Forms
  • ruff lint + pip-audit CI gates and Python floor 3.9 -> 3.10
  • supply-chain hardening (SHA-512 artifact, SHA-pinned release Actions, PR-title injection fix)
  • branch ruleset required-check sync

Generated with the adr-toolkit CLI (create -> validate -> index -> graph); README index and relationship graph regenerated.

@SHcommit
SHcommit merged commit 1f4b4a0 into develop Sep 5, 2026
13 checks passed
@SHcommit
SHcommit deleted the docs/adr-oss-governance-hardening branch September 5, 2026 17:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant