THE INTENT: THE INTENT: The policy library moved to Git so that every policy change is reviewed by its owner before it merges. Emergencies go through with one reviewer and a 24-hour retro. That is what leadership was told.
grc/policy-library/.repo-controls.yaml 1 │ repo: grc/policy-library 2 │ default_branch: main 3 │ protection: 4 │ require_pull_request: true 5 │ required_approvals: 1 6 │ codeowners_review: true 7 │ paths_ignore: ["*.md", "docs/**"] 8 │ bypass_actors: ["grc-admins", "release-bot"] 9 │ enforce_admins: false10 │ notifications: "#grc-policy-changes"
grc@ctrl-f:~$