Skip to content

security(repo): add supply-chain checklist to PR template - #504

Merged
karagozemin merged 2 commits into
Sub-Rosa-Issue:mainfrom
Damilorlar:security/475-pr-supply-chain-checklist
Oct 22, 2026
Merged

karagozemin merged 2 commits into
Sub-Rosa-Issue:mainfrom
Damilorlar:security/475-pr-supply-chain-checklist

Conversation

@Damilorlar

Copy link
Copy Markdown
Contributor

Summary

  • Add .github/pull_request_template.md with a concise supply-chain review checklist.

Changes

  • Asks whether package scripts or dependencies changed.
  • Calls out .vscode, workflow, config, lockfile, and binary/font changes.
  • Requires confirmation that no automatic task or hidden executable payload was added.
  • Keeps the template at 21 lines, under the 30-line limit.

Testing

  • Verified the template is 21 lines and valid Markdown.
  • No automation or application code changes required.

Closes #475

@karagozemin
karagozemin merged commit 2e8121f into Sub-Rosa-Issue:main Oct 22, 2026
1 of 4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

security(repo): add a supply-chain checklist to the PR template

2 participants