repository-manifest

Repository Manifest Reference

Use this skill when editing repository-side manifests. Keep the body small and load references only as needed.

Core Rules

• All spec fields are optional. Omitted fields are left unchanged on GitHub.
• Repository manages one repository.
• RepositorySet manages many repositories with shared defaults.
• For new setups, prefer rulesets over classic branch_protection.
• Secret values must use ${ENV_*} indirection, never literal secrets.

Repository

apiVersion: gh-infra/v1
kind: Repository
metadata:
  owner: my-org
  name: my-repo
reconcile:           # optional; controls collection reconciliation
  rulesets: additive # additive (default) | authoritative
  labels: additive
spec:
  # declare only managed fields

Read these references as needed:

• General settings and lifecycle: references/general.md
• Labels and reconcile mode: references/labels.md
• Actions settings and validation traps: references/actions.md
• Rulesets and branch protection: references/protection.md
• Secrets and variables: references/secrets-variables.md
• Deployment environments: references/environments.md
• Security (Dependabot, vulnerability alerts): references/security.md
• GitHub Pages (build type, source, domain, HTTPS): references/pages.md

RepositorySet

Use RepositorySet when many repositories share defaults.

apiVersion: gh-infra/v1
kind: RepositorySet
metadata:
  owner: my-org

defaults:
  reconcile:
    rulesets: authoritative
    labels: additive
  spec:
    visibility: public
    features:
      wiki: false
    merge_strategy:
      allow_squash_merge: true
      allow_rebase_merge: false
      auto_delete_head_branches: true
    rulesets:
      - name: protect-main
        target: branch
        enforcement: active
        conditions:
          ref_name:
            include: ["refs/heads/main"]
        rules:
          pull_request:
            required_approving_review_count: 1
          non_fast_forward: true

repositories:
  - name: repo-a
    spec:
      description: "Service A"
      topics: [go, api]

  - name: repo-b
    spec:
      description: "Service B"
      topics: [python, cli]
      features:
        wiki: true