Skip to content

Added repository hardening files#12

Merged
vnovitskyi merged 6 commits intomasterfrom
vn/update-repository
Apr 23, 2026
Merged

Added repository hardening files#12
vnovitskyi merged 6 commits intomasterfrom
vn/update-repository

Conversation

@vnovitskyi
Copy link
Copy Markdown

@vnovitskyi vnovitskyi commented Apr 21, 2026

As requested by AppSec team, this PR adds repository hardening to make the epics gem compliant with Pennylane's security standards:

  • CODEOWNERS file — requires review from @pennylane-hq/transactions-hub, recommends @pennylane-hq/security
  • Pre-commit system — rubocop autocorrect, DO NOT COMMIT check, SSH key passphrase enforcement, trailing whitespace, actionlint
  • CI summary job — aggregates test and license check results as a single required status check
  • RuboCop configuration — aligned with Pennylane standards
  • Gemfile — adds license_finder, rubocop, rubocop-performance, rubocop-rspec to dev dependencies

Notion:
https://linear.app/pennylanefr/issue/BANK-1285/update-ebics-repository
https://www.notion.so/scribetech/Repositories-hardening-1cfc3cfcebe842bc88c3ac4fae4a0506

@vnovitskyi vnovitskyi requested a review from victorps-pl April 22, 2026 07:44
@vnovitskyi vnovitskyi marked this pull request as ready for review April 22, 2026 07:44
Comment thread doc/dependency_decisions.yml Outdated
Comment on lines +26 to +43
- - :permit
- LGPL
- :who:
:why:
:versions: []
:when: 2026-04-21 13:20:19.815137000 Z
- - :permit
- Artistic-1.0-Perl
- :who:
:why:
:versions: []
:when: 2026-04-21 13:20:20.331016000 Z
- - :permit
- GPL-2.0-or-later
- :who:
:why:
:versions: []
:when: 2026-04-21 13:20:20.809597000 Z
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These licenses are either unauthorized by Legal (GPL), or will need to be discussed with the Legal team before being able to be whitelisted here. 🙏

@vnovitskyi vnovitskyi requested a review from victorps-pl April 23, 2026 09:23
@vnovitskyi vnovitskyi merged commit 254c77d into master Apr 23, 2026
10 checks passed
@vnovitskyi vnovitskyi deleted the vn/update-repository branch April 23, 2026 11:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants