Basic Setup Example

# Organization-wide repository settings
repository:
  # Security settings
  private: true
  visibility: private
  
  # Enable security features
  security:
    enableVulnerabilityAlerts: true
    enableAutomatedSecurityFixes: true
  
  # Collaboration features
  has_issues: true
  has_projects: true
  has_wiki: false  # Disable wikis, use docs in repo instead
  
  # Default branch
  default_branch: main
  
  # Pull request settings
  allow_squash_merge: true
  allow_merge_commit: false  # Enforce squash for clean history
  allow_rebase_merge: false
  allow_auto_merge: true
  delete_branch_on_merge: true  # Auto-cleanup merged branches
  allow_update_branch: true
  
  # Initialize new repos with README
  auto_init: true
  
  # Archive settings
  archived: false

# Standard labels for all repositories
labels:
  include:
    - name: bug
      color: "d73a4a"
      description: Something isn't working
    
    - name: enhancement
      color: "a2eeef"
      description: New feature or request
    
    - name: documentation
      color: "0075ca"
      description: Improvements or additions to documentation
    
    - name: security
      color: "ee0701"
      description: Security-related issue
    
    - name: dependencies
      color: "0366d6"
      description: Pull requests that update a dependency
    
    - name: good first issue
      color: "7057ff"
      description: Good for newcomers
  
  exclude:
    # Keep any release-* labels created manually
    - name: ^release

# Basic branch protection for main branch
branches:
  - name: default
    protection:
      # Require pull request reviews
      required_pull_request_reviews:
        required_approving_review_count: 1
        dismiss_stale_reviews: true
        require_code_owner_reviews: false  # Enable when CODEOWNERS is set up
        require_last_push_approval: false
        bypass_pull_request_allowances:
          apps: []
          users: []
          teams: []
        dismissal_restrictions:
          users: []
          teams: []
      
      # Require status checks
      required_status_checks:
        strict: true  # Require branches to be up to date
        contexts: []  # Add your CI checks here
      
      # Enforce for admins
      enforce_admins: false  # Allow admins to bypass for emergencies
      
      # No push restrictions
      restrictions:
        apps: []
        users: []
        teams: []