From 6df50bc6b91dfecbde46eedaaf474302b2fc9a2d Mon Sep 17 00:00:00 2001 From: Nikolai Emil Damm Date: Sat, 17 Oct 2026 06:52:59 +0200 Subject: [PATCH] feat(ci): switch on the world-at-ruin deploy-starter policy for its trial Part of #202 Co-Authored-By: Claude Opus 5.5 --- scripts/validate-workflow-execution-policies.sh | 2 +- .../restrict-deploy-starters-world-at-ruin.json | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/scripts/validate-workflow-execution-policies.sh b/scripts/validate-workflow-execution-policies.sh index a177bdd..ace8867 100755 --- a/scripts/validate-workflow-execution-policies.sh +++ b/scripts/validate-workflow-execution-policies.sh @@ -60,7 +60,7 @@ actor_types='["User","Bot","Team","BusinessTeam","EnterpriseTeam","IntegrationIn # Policy files the maintainer has approved to be active, by exact file name. Adding a name here is # the approval: each activation changes this list in its own reviewed pull request. See the README's # "Testing a policy before it blocks". -approved_active='["restrict-deploy-starters-go-template.json","restrict-deploy-starters-data-product-controller.json"]' +approved_active='["restrict-deploy-starters-go-template.json","restrict-deploy-starters-data-product-controller.json","restrict-deploy-starters-world-at-ruin.json"]' failed=0 for f in "${files[@]}"; do diff --git a/workflow-execution-policies/restrict-deploy-starters-world-at-ruin.json b/workflow-execution-policies/restrict-deploy-starters-world-at-ruin.json index 2c55388..a0ad22c 100644 --- a/workflow-execution-policies/restrict-deploy-starters-world-at-ruin.json +++ b/workflow-execution-policies/restrict-deploy-starters-world-at-ruin.json @@ -1,6 +1,6 @@ { "name": "Only portfolio identities may start deploy and publish workflows in world-at-ruin", - "enforcement": "disabled", + "enforcement": "active", "conditions": { "repository_name": { "include": [