Org-wide defaults for DataKind: community health files and shared CI workflows.
| File | Purpose |
|---|---|
CONTRIBUTING.md |
Branching, PR process, testing, approvals |
.github/PULL_REQUEST_TEMPLATE.md |
PR template with SOC 2 checklist |
CODE_OF_CONDUCT.md |
Code of conduct |
SECURITY.md |
Vulnerability reporting |
Repos override any of these by adding a local copy.
Copy .github/workflows/ci.yml.example to .github/workflows/ci.yml and .github/workflows/post-release.yml.example to .github/workflows/post-release.yml. Comment out jobs you don't need, add local lint / test jobs.
| Workflow | Purpose |
|---|---|
pr-title |
Validates PR titles |
link-asana-task |
Requires Asana task URL and links PR via GitHub integration |
dependency-review |
Flags vulnerable dependency changes |
enforce-pr-targets |
PRs to main only from release/* or hotfix/* |
pre-release |
Requires CHANGELOG.md on PRs to main |
post-release |
Tags release and opens PR to sync main into develop |
npm-audit |
npm audit (Node repos) |
composer-audit |
composer audit (PHP repos) |
Changes here affect all org repos that inherit from it. Open a PR to propose changes.