This is an automated email from the ASF dual-hosted git repository.

casionone pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/linkis.git


The following commit(s) were added to refs/heads/master by this push:
     new 9a474898cc #AI COMMIT# Enable allow_force_pushes on master for 
security cleanup (#5444)
9a474898cc is described below

commit 9a474898cce65db460c6955e2f79d3cb571102ec
Author: aiceflower <[email protected]>
AuthorDate: Wed Jun 17 13:05:07 2026 +0800

    #AI COMMIT# Enable allow_force_pushes on master for security cleanup (#5444)
    
    Keep all existing branch protection rules intact (required_status_checks,
    required_pull_request_reviews) but add allow_force_pushes: true so that
    historical commits containing leaked corporate sensitive information can be
    rewritten via git-filter-repo + force-push.
    
    This line will be removed in a follow-up PR once the cleanup is complete.
---
 .asf.yaml | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/.asf.yaml b/.asf.yaml
index 28dda241c2..f5d022f569 100644
--- a/.asf.yaml
+++ b/.asf.yaml
@@ -58,17 +58,17 @@ github:
     merge:  true
     squash: true
     rebase: true
-  # Temporarily disable master branch protection to allow force-push
-  # for cleaning sensitive information (passwords, internal IPs, domains)
-  # from historical commits per security ticket.
-  # Will be restored in a follow-up PR after the cleanup is complete.
-  # protected_branches:
-  #   master:
-  #     required_status_checks:
-  #       strict: true
-  #     required_pull_request_reviews:
-  #       dismiss_stale_reviews: true
-  #       required_approving_review_count: 1
+  protected_branches:
+    master:
+      required_status_checks:
+        strict: true
+      required_pull_request_reviews:
+        dismiss_stale_reviews: true
+        required_approving_review_count: 1
+      # Temporarily allow force-push on master to rewrite historical commits
+      # for cleaning leaked corporate sensitive information per security 
ticket.
+      # This line will be removed in a follow-up PR once cleanup is complete.
+      allow_force_pushes: true
 notifications:
   commits: [email protected]
   issues: [email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to