From df68a0bded6d6015c06736b3f92fa590d5ddbd4e Mon Sep 17 00:00:00 2001
From: Damilorlar <barakahmuhammad422@gmail.com>
Date: Thu, 22 Oct 2026 06:11:08 +0100
Subject: [PATCH] security(repo): add supply-chain checklist to PR template

Closes #475
---
 .github/pull_request_template.md | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 .github/pull_request_template.md

diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md
new file mode 100644
index 00000000..7dd08d08
--- /dev/null
+++ b/.github/pull_request_template.md
@@ -0,0 +1,21 @@
+<!-- Thanks for contributing! Please complete this checklist. -->
+
+## Summary
+
+<!-- What does this PR change, and why? -->
+
+## Supply-chain review
+
+- [ ] No package scripts or dependencies changed. If changed, explain why below.
+- [ ] No `.vscode/`, workflow, or other editor/config file changes. If changed, list them below.
+- [ ] No lockfile changes. If changed, explain the update below.
+- [ ] No binary or font asset changes. If changed, list and justify them below.
+- [ ] I confirm no automatic task (such as `preinstall`/`postinstall`) was added.
+- [ ] I confirm no hidden executable payload (encoded blob, obfuscated command, or unexpected binary) was added.
+- [ ] Any changed executable or binary was reviewed by a maintainer.
+
+## Testing
+
+<!-- Describe how these changes were verified. -->
+
+Closes #