tailscale/CODEOWNERS at 5ebc7497ea25f71ffc87f06c19df28297c654e3b - tailscale - Gitea: Git with a cup of tea

mirror/tailscale

mirror of https://github.com/tailscale/tailscale.git synced 2026-07-15 01:53:08 -04:00

Files

Brad Fitzpatrick a95119a973 CODEOWNERS,.policy.yml: replace CODEOWNERS with a policy-bot policy

GitHub's built-in CODEOWNERS only supports a hard "block until a team
member reviews" rule, with no way to leave an audit trail when the
requirement is intentionally bypassed. Move review enforcement to
palantir/policy-bot (https://github.com/palantir/policy-bot) running
at https://policybot.corp.ts.net, which lets us express the same
tailcfg/ -> control-protocol-owners rule plus an explicit override:
any other @tailscale/dev member can post

    policybot-override: <reason>

as a PR comment and that comment counts as their approval, with the
reason recorded in the PR conversation as a permanent audit trail.

CODEOWNERS is kept as a one-screen comment so anyone landing on it
expecting the old behavior is directed to .policy.yml.

Updates tailscale/corp#13972

Change-Id: I2dc3619c498d4c4a6decae29aa123f6d67905eed
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>

2026-06-26 10:30:59 -07:00

8 lines

332 B

Plaintext

Raw Blame History

 # This repository does NOT use GitHub's CODEOWNERS for review enforcement.
 # Approval policies live in .policy.yml at the repository root and are
 # enforced by policy-bot (https://github.com/palantir/policy-bot).
 #
 # To change required reviewers for a path, edit .policy.yml.
 #
 # See https://github.com/tailscale/corp/issues/13972.