From e000c1132f4c0f1715da01b22703a948674111de Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Sat, 13 Jun 2026 14:49:17 +1000
Subject: [PATCH] feat: add branch protection

- add branch protection rules for docker repos
---
 .../unkin/repository/container-agent-base.yaml        | 11 +++++++++++
 .../unkin/repository/container-agent-dev.yaml         | 11 +++++++++++
 .../unkin/repository/container-agent-infra.yaml       | 11 +++++++++++
 3 files changed, 33 insertions(+)

diff --git a/config/git.unkin.net/unkin/repository/container-agent-base.yaml b/config/git.unkin.net/unkin/repository/container-agent-base.yaml
index 1d0c8c1..8d242f6 100644
--- a/config/git.unkin.net/unkin/repository/container-agent-base.yaml
+++ b/config/git.unkin.net/unkin/repository/container-agent-base.yaml
@@ -1,2 +1,13 @@
 description: "Base container image for forgebot agents"
 private: false
+default_branch: "main"
+default_delete_branch_after_merge: true
+default_merge_style: "squash"
+branch_protection:
+  - rule_name: "main"
+    enable_push: false
+    status_check_contexts:
+      - "ci/woodpecker/pr/build"
+    approval_whitelist_teams:
+      - "docker"
+      - "forgebot"
diff --git a/config/git.unkin.net/unkin/repository/container-agent-dev.yaml b/config/git.unkin.net/unkin/repository/container-agent-dev.yaml
index 577e1d6..0586779 100644
--- a/config/git.unkin.net/unkin/repository/container-agent-dev.yaml
+++ b/config/git.unkin.net/unkin/repository/container-agent-dev.yaml
@@ -1,2 +1,13 @@
 description: "Dev toolchain container for forgebot agents"
 private: false
+default_branch: "main"
+default_delete_branch_after_merge: true
+default_merge_style: "squash"
+branch_protection:
+  - rule_name: "main"
+    enable_push: false
+    status_check_contexts:
+      - "ci/woodpecker/pr/build"
+    approval_whitelist_teams:
+      - "docker"
+      - "forgebot"
diff --git a/config/git.unkin.net/unkin/repository/container-agent-infra.yaml b/config/git.unkin.net/unkin/repository/container-agent-infra.yaml
index 0370083..616df38 100644
--- a/config/git.unkin.net/unkin/repository/container-agent-infra.yaml
+++ b/config/git.unkin.net/unkin/repository/container-agent-infra.yaml
@@ -1,2 +1,13 @@
 description: "Infrastructure toolchain container for forgebot agents"
 private: false
+default_branch: "main"
+default_delete_branch_after_merge: true
+default_merge_style: "squash"
+branch_protection:
+  - rule_name: "main"
+    enable_push: false
+    status_check_contexts:
+      - "ci/woodpecker/pr/build"
+    approval_whitelist_teams:
+      - "docker"
+      - "forgebot"