HyperGit/rig.yaml at main · hyperide/HyperGit · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
# yaml-language-server: $schema=schema/rig.schema.json
# rig.yaml — declarative setup for this repo, applied by `rig apply`.
# COMMITTED BY DEFAULT: this file is the reproducible source of truth.
# Global defaults live at ~/.config/rig/config.yaml; this file overrides them.
# See: rig status (drift), rig apply (converge). Schema: docs/config-schema.md

version: 1
defaults:
  skills_target: ~/.agents/skills
  hooks_target: ~/.claude/hooks
  ci_target: .github/workflows
  mcp_target: ~/.claude/mcp
  on_conflict: backup
skills:
  enabled: true
  target: ~/.agents/skills
  universal:
    all: true
    disable: []
  by_type:
    enable: []
agent_hooks:
  enabled: true
  target: ~/.claude/hooks
  target_kind: claude-code
  all: true
git_hooks:
  dispatcher:
    enabled: true
    dir: ~/.config/git/global-hooks.d
    runner: ~/.config/git/run-global-hooks
    set_global_hooks_path: true
    install_local_retrofit_script: true
    fragments:
      secret-scan:
        enabled: true
ci:
  enabled: true
  target: .github/workflows
  all: false
  items:
    secret-scan:
      enabled: true
      tier: block
    codeql:
      enabled: true
      tier: block
      variant: selfgate
    dependency-review:
      enabled: true
      tier: block
    leftover-grep:
      enabled: true
      tier: block
    review-threads:
      enabled: true
      tier: block
    pr-checklist:
      enabled: true
      tier: block
    ship:
      enabled: true
      install_to: ~/bin
      gh_alias: true
mcp:
  enabled: true
  target: ~/.claude/mcp
  items: {}
harness:
  enabled: true
  kind: claude-code
  auto_mode: true
models:
  enabled: true
  schedule:
    time: '12:00'
github:
  ruleset:
    enabled: true
    name: rig-managed
    require_pull_request: true
    required_reviews: 0
    block_force_push: true
    restrict_deletion: true
    require_linear_history: false
    require_signatures: false
    admin_bypass: true
  merge:
    enabled: true
    squash_merge: true
    merge_commit: false
    rebase_merge: false
    delete_branch_on_merge: true
    allow_auto_merge: true
    allow_update_branch: true
  ghas:
    enabled: true
    vulnerability_alerts: true
    automated_security_fixes: true
    secret_scanning: true
    secret_scanning_push_protection: true
    code_scanning_default_setup: true
  actions:
    enabled: true
    actions_enabled: true
    allowed_actions: all
    default_workflow_permissions: read
    can_approve_pull_request_reviews: false
  browser:
    enabled: true
    discussions: false
    projects: true