Skip to content

mono - chore: defense - add CODEOWNERS for high-risk paths - #1704

Merged
jaredwray merged 2 commits into
mainfrom
cursor/defense-codeowners-7da5
Aug 24, 2026
Merged

mono - chore: defense - add CODEOWNERS for high-risk paths#1704
jaredwray merged 2 commits into
mainfrom
cursor/defense-codeowners-7da5

Conversation

@jaredwray

@jaredwray jaredwray commented Aug 24, 2026

Copy link
Copy Markdown
Owner

Summary

Add .github/CODEOWNERS for high-risk paths (defense-in-depth § 2) so lockdown-repo.sh --check can require a code-owner review.

Status update

DEFENSE_IN_DEPTH.md § 2: CODEOWNERS → (PR #1704 pending)

Changes

  • Own /.github/, /.cursor/, /.devcontainer/, and /scripts/ as @jaredwray

Say if you want a different owner or a second reviewer.

Verification

  • File matches the catalog template with {{OWNERS}} substituted

Reference: defense-in-depth-nodejs § 2

Open in Web Open in Cursor 

cursoragent and others added 2 commits August 24, 2026 23:04
Cover .github, .cursor, .devcontainer, and scripts so lockdown can
require a code-owner review. Owner is @jaredwray.

Co-authored-by: Jared Wray <me@jaredwray.com>
Co-authored-by: Jared Wray <me@jaredwray.com>
@github-advanced-security

Copy link
Copy Markdown

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

@codecov

codecov Bot commented Aug 24, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (f50b770) to head (dabc61b).
⚠️ Report is 6 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff            @@
##              main     #1704   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files           29        29           
  Lines         3513      3513           
  Branches       808       795   -13     
=========================================
  Hits          3513      3513           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@jaredwray
jaredwray merged commit 82e5371 into main Aug 24, 2026
14 checks passed
@jaredwray
jaredwray deleted the cursor/defense-codeowners-7da5 branch August 24, 2026 23:09
jaredwray added a commit that referenced this pull request Aug 24, 2026
* mono - chore: defense - mark CODEOWNERS item as merged

Reconcile DEFENSE_IN_DEPTH.md after #1704 landed and mention the
CODEOWNERS file in the public SECURITY.md summary.

Co-authored-by: Jared Wray <me@jaredwray.com>

* mono - chore: defense - record lockdown-repo.sh apply

Check off § 7 after the admin apply and list the live GitHub settings
in SECURITY.md. Account 2FA and npm registry manuals stay open.

Co-authored-by: Jared Wray <me@jaredwray.com>

---------

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants