Skip to content

[StepSecurity] Apply security best practices #161

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
step-security-bot wants to merge 1 commit into
base: main
Choose a base branch
from

[StepSecurity] Apply security best practices

491cfc5
Select commit
Loading
Failed to load commit list.
Open

[StepSecurity] Apply security best practices #161

[StepSecurity] Apply security best practices
491cfc5
Select commit
Loading
Failed to load commit list.
Mergify / Summary succeeded Jan 16, 2026 in 1s

2 potential rules

Rule: Automatic merge ⬇️ on approval ✔ (merge)

  • #approved-reviews-by>=1
  • status-success~=Build using Hugo
  • #changes-requested-reviews-by=0
  • #review-threads-unresolved=0
  • -approved-reviews-by~=author
  • -closed
  • -closed [📌 merge requirement]
  • -conflict [📌 merge requirement]
  • -draft [📌 merge requirement]
  • -label~=(blocked|do-not-merge|no-squash|two-approvers)
  • -merged
  • -title~=(WIP|wip)
  • author!=dependabot-preview[bot]
  • author!=dependabot[bot]
  • any of: [📌 merge -> configuration change requirements]
    • -mergify-configuration-changed
    • check-success = Configuration changed

Rule: Automatic merge ⬇️ on approval ✔ (comment)

  • #approved-reviews-by>=1
  • status-success~=Build using Hugo
  • #changes-requested-reviews-by=0
  • #review-threads-unresolved=0
  • -approved-reviews-by~=author
  • -closed
  • -label~=(blocked|do-not-merge|no-squash|two-approvers)
  • -merged
  • -title~=(WIP|wip)
  • author!=dependabot-preview[bot]
  • author!=dependabot[bot]
2 not applicable rules

Rule: automatic merge of Dependabot PRs (merge)

  • author=dependabot[bot]
  • -closed
  • -closed [📌 merge requirement]
  • -conflict [📌 merge requirement]
  • -draft [📌 merge requirement]
  • -label~=(blocked|do-not-merge)
  • -merged
  • -title~=(WIP|wip)
  • any of: [📌 merge -> configuration change requirements]
    • -mergify-configuration-changed
    • check-success = Configuration changed

Rule: automatic merge of Dependabot PRs (comment, review)

  • author=dependabot[bot]
  • -closed
  • -label~=(blocked|do-not-merge)
  • -merged
  • -title~=(WIP|wip)
Mergify commands and options

More conditions and actions can be found in the documentation.

You can also trigger Mergify actions by commenting on this pull request:

  • @Mergifyio refresh will re-evaluate the rules
  • @Mergifyio rebase will rebase this PR on its base branch
  • @Mergifyio update will merge the base branch into this PR
  • @Mergifyio backport <destination> will backport this PR on <destination> branch

Additionally, on Mergify dashboard you can:

  • look at your merge queues
  • generate the Mergify configuration with the config editor.

Finally, you can contact us on https://mergify.com

View more details on Mergify