diff --git a/5 changes b/5 changes new file mode 100644 index 0000000..452ea10 --- /dev/null +++ b/5 changes @@ -0,0 +1,533 @@ +name: 'Identify and close stale issues and PRs' + +on: + workflow_dispatch: + schedule: + - cron: '15 1 * * *' + +permissions: + issues: write + pull-requests: write + +jobs: + stale: + runs-on: ubuntu-latest + steps: + - uses: actions/stale@v9 + with: + stale-issue-message: + This issue has been identified as stale because it + has gone 14 days with no activity. + + The issue will be closed in 5 days. If this is incorrect, + simply comment on the issue, or remove the stale label. + stale-pr-message: + This pull request has been identified as stale because + it has gone 14 days with no activity. + + The pull request will be closed in 5 days. If this is incorrect, + simply comment on the PR, remove the label, or merge the PR. + + Reminder, once a PR is approved, and checks have passed, + you **can merge it yourself.** + days-before-stale: 14 + days-before-close: 5 + exempt-issue-labels: "keep-me" + exempt-pr-labels: "keep-me" + 78 changes: 78 additions & 0 deletions78 +CLA/microsoft.yml +Original file line number Diff line number Diff line change +@@ -0,0 +1,78 @@ +cla: + description: This is a yml file to describe Microsoft Contributor License Agreement, + content: | + ### Contribution License Agreement + This Contribution License Agreement (**“Agreement”**) is agreed to by the party signing below (**“You”**), + and conveys certain license rights to Microsoft Corporation and its affiliates (“Microsoft”) for Your + contributions to Microsoft open source projects. This Agreement is effective as of the latest signature + date below. + 1. **Definitions**. + **“Code”** means the computer software code, whether in human-readable or machine-executable form, + that is delivered by You to Microsoft under this Agreement. + **“Project”** means any of the projects owned or managed by Microsoft and offered under a license + approved by the Open Source Initiative (www.opensource.org). + **“Submit”** is the act of uploading, submitting, transmitting, or distributing code or other content to any + Project, including but not limited to communication on electronic mailing lists, source code control + systems, and issue tracking systems that are managed by, or on behalf of, the Project for the purpose of + discussing and improving that Project, but excluding communication that is conspicuously marked or + otherwise designated in writing by You as “Not a Submission.” + **“Submission”** means the Code and any other copyrightable material Submitted by You, including any + associated comments and documentation. + 2. **Your Submission**. You must agree to the terms of this Agreement before making a Submission to any + Project. This Agreement covers any and all Submissions that You, now or in the future (except as + described in Section 4 below), Submit to any Project. + 3. **Originality of Work**. You represent that each of Your Submissions is entirely Your original work. + Should You wish to Submit materials that are not Your original work, You may Submit them separately + to the Project if You (a) retain all copyright and license information that was in the materials as You + received them, (b) in the description accompanying Your Submission, include the phrase “Submission + containing materials of a third party:” followed by the names of the third party and any licenses or other + restrictions of which You are aware, and (c) follow any other instructions in the Project’s written + guidelines concerning Submissions. + 4. **Your Employer**. References to “employer” in this Agreement include Your employer or anyone else + for whom You are acting in making Your Submission, e.g. as a contractor, vendor, or agent. If Your + Submission is made in the course of Your work for an employer or Your employer has intellectual + property rights in Your Submission by contract or applicable law, You must secure permission from Your + employer to make the Submission before signing this Agreement. In that case, the term “You” in this + Agreement will refer to You and the employer collectively. If You change employers in the future and + desire to Submit additional Submissions for the new employer, then You agree to sign a new Agreement + and secure permission from the new employer before Submitting those Submissions. + 5. **Licenses**. + * **Copyright License**. You grant Microsoft, and those who receive the Submission directly or + indirectly from Microsoft, a perpetual, worldwide, non-exclusive, royalty-free, irrevocable license in the + Submission to reproduce, prepare derivative works of, publicly display, publicly perform, and distribute + the Submission and such derivative works, and to sublicense any or all of the foregoing rights to third + parties. + * **Patent License**. You grant Microsoft, and those who receive the Submission directly or + indirectly from Microsoft, a perpetual, worldwide, non-exclusive, royalty-free, irrevocable license under + Your patent claims that are necessarily infringed by the Submission or the combination of the + Submission with the Project to which it was Submitted to make, have made, use, offer to sell, sell and + import or otherwise dispose of the Submission alone or with the Project. + * **Other Rights Reserved**. Each party reserves all rights not expressly granted in this Agreement. + No additional licenses or rights whatsoever (including, without limitation, any implied licenses) are + granted by implication, exhaustion, estoppel or otherwise. + 6. **Representations and Warranties**. You represent that You are legally entitled to grant the above + licenses. You represent that each of Your Submissions is entirely Your original work (except as You may + have disclosed under Section 3). You represent that You have secured permission from Your employer to + make the Submission in cases where Your Submission is made in the course of Your work for Your + employer or Your employer has intellectual property rights in Your Submission by contract or applicable + law. If You are signing this Agreement on behalf of Your employer, You represent and warrant that You + have the necessary authority to bind the listed employer to the obligations contained in this Agreement. + You are not expected to provide support for Your Submission, unless You choose to do so. UNLESS + REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING, AND EXCEPT FOR THE WARRANTIES + EXPRESSLY STATED IN SECTIONS 3, 4, AND 6, THE SUBMISSION PROVIDED UNDER THIS AGREEMENT IS + PROVIDED WITHOUT WARRANTY OF ANY KIND, INCLUDING, BUT NOT LIMITED TO, ANY WARRANTY OF + NONINFRINGEMENT, MERCHANTABILITY, OR FITNESS FOR A PARTICULAR PURPOSE. + 7. **Notice to Microsoft**. You agree to notify Microsoft in writing of any facts or circumstances of which + You later become aware that would make Your representations in this Agreement inaccurate in any + respect. + 8. **Information about Submissions**. You agree that contributions to Projects and information about + contributions may be maintained indefinitely and disclosed publicly, including Your name and other + information that You submit with Your Submission. + 9. **Governing Law/Jurisdiction**. This Agreement is governed by the laws of the State of Washington, and + the parties consent to exclusive jurisdiction and venue in the federal courts sitting in King County, + Washington, unless no federal subject matter jurisdiction exists, in which case the parties consent to + exclusive jurisdiction and venue in the Superior Court of King County, Washington. The parties waive all + defenses of lack of personal jurisdiction and forum non-conveniens. + 10. **Entire Agreement/Assignment**. This Agreement is the entire agreement between the parties, and + supersedes any and all prior agreements, understandings or communications, written or oral, between + the parties relating to the subject matter hereof. This Agreement may be assigned by Microsoft. + 9 changes: 9 additions & 0 deletions9 +CODE_OF_CONDUCT.md +Original file line number Diff line number Diff line change +@@ -0,0 +1,9 @@ +# Microsoft Open Source Code of Conduct + +This project has adopted the [Microsoft Open Source Code of Conduct](https://opensource.microsoft.com/codeofconduct/). + +Resources: + +- [Microsoft Open Source Code of Conduct](https://opensource.microsoft.com/codeofconduct/) +- [Microsoft Code of Conduct FAQ](https://opensource.microsoft.com/codeofconduct/faq/) +- Contact [opencode@microsoft.com](mailto:opencode@microsoft.com) with questions or concerns + 21 changes: 21 additions & 0 deletions21 +LICENSE +Original file line number Diff line number Diff line change +@@ -0,0 +1,21 @@ +MIT License + + Copyright (c) Microsoft Corporation. + + Permission is hereby granted, free of charge, to any person obtaining a copy + of this software and associated documentation files (the "Software"), to deal + in the Software without restriction, including without limitation the rights + to use, copy, modify, merge, publish, distribute, sublicense, and/or sell + copies of the Software, and to permit persons to whom the Software is + furnished to do so, subject to the following conditions: + + The above copyright notice and this permission notice shall be included in all + copies or substantial portions of the Software. + + THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR + IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, + FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE + AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER + LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, + OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE + SOFTWARE + 2 changes: 2 additions & 0 deletions2 +README.md +Original file line number Diff line number Diff line change +@@ -0,0 +1,2 @@ +# .github +Default Community Health Files for the Microsoft organization on GitHub + 41 changes: 41 additions & 0 deletions41 +SECURITY.md +Original file line number Diff line number Diff line change +@@ -0,0 +1,41 @@ + + +## Security + +Microsoft takes the security of our software products and services seriously, which includes all source code repositories managed through our GitHub organizations, which include [Microsoft](https://github.com/Microsoft), [Azure](https://github.com/Azure), [DotNet](https://github.com/dotnet), [AspNet](https://github.com/aspnet) and [Xamarin](https://github.com/xamarin). + +If you believe you have found a security vulnerability in any Microsoft-owned repository that meets [Microsoft's definition of a security vulnerability](https://aka.ms/security.md/definition), please report it to us as described below. + +## Reporting Security Issues + +**Please do not report security vulnerabilities through public GitHub issues.** + +Instead, please report them to the Microsoft Security Response Center (MSRC) at [https://msrc.microsoft.com/create-report](https://aka.ms/security.md/msrc/create-report). + +If you prefer to submit without logging in, send email to [secure@microsoft.com](mailto:secure@microsoft.com). If possible, encrypt your message with our PGP key; please download it from the [Microsoft Security Response Center PGP Key page](https://aka.ms/security.md/msrc/pgp). + +You should receive a response within 24 hours. If for some reason you do not, please follow up via email to ensure we received your original message. Additional information can be found at [microsoft.com/msrc](https://www.microsoft.com/msrc). + +Please include the requested information listed below (as much as you can provide) to help us better understand the nature and scope of the possible issue: + + * Type of issue (e.g. buffer overflow, SQL injection, cross-site scripting, etc.) + * Full paths of source file(s) related to the manifestation of the issue + * The location of the affected source code (tag/branch/commit or direct URL) + * Any special configuration required to reproduce the issue + * Step-by-step instructions to reproduce the issue + * Proof-of-concept or exploit code (if possible) + * Impact of the issue, including how an attacker might exploit the issue + +This information will help us triage your report more quickly. + +If you are reporting for a bug bounty, more complete reports can contribute to a higher bounty award. Please visit our [Microsoft Bug Bounty Program](https://aka.ms/security.md/msrc/bounty) page for more details about our active programs. + +## Preferred Languages + +We prefer all communications to be in English. + +## Policy + +Microsoft follows the principle of [Coordinated Vulnerability Disclosure](https://aka.ms/security.md/cvd). + + + Binary file addedBIN +141 KB +images/open-at-microsoft.png +Unable to render rich display + + 9 changes: 9 additions & 0 deletions9 +policies/abandonedRepo.yml +Original file line number Diff line number Diff line change +@@ -0,0 +1,9 @@ +name: AbandonedRepo +description: The policy to archive old repositories. +owner: +resource: repository +where: +configuration: + abandonedRepoPrimitive: + isEnabled: true + notUsedDays: 1600 #4.5years + 8 changes: 8 additions & 0 deletions8 +policies/advancedsecurity.yml +Original file line number Diff line number Diff line change +@@ -0,0 +1,8 @@ +name: Advanced Security Settings +description: GHAS settings policy + +resource: repository +configuration: + advancedSecurity: + secretScanning: true + secretScanningPushProtection: true + 138 changes: 138 additions & 0 deletions138 +policies/cla.yml +Original file line number Diff line number Diff line change +@@ -0,0 +1,138 @@ +name: Contributor License Agreement Policy +description: CLA policy file + +resource: repository +where: +- | + !repository.name.equals("CHERIoT", StringComparison.InvariantCultureIgnoreCase) + && !repository.name.equals("digital-pathology", StringComparison.InvariantCultureIgnoreCase) + && !repository.name.equals("genescope_imaging", StringComparison.InvariantCultureIgnoreCase) + && !repository.name.equals("genescope_single-cell", StringComparison.InvariantCultureIgnoreCase) + && !repository.name.equals("genescope_multi-modal", StringComparison.InvariantCultureIgnoreCase) + && !repository.name.equals("scOlympia", StringComparison.InvariantCultureIgnoreCase) + && !repository.name.equals("stain-anything", StringComparison.InvariantCultureIgnoreCase) + && !repository.name.equals("qualys-command-line-agent", StringComparison.InvariantCultureIgnoreCase) +configuration: + cla: + content: https://raw.githubusercontent.com/microsoft/.github/main/CLA/microsoft.yml + minimalChangeRequired: + files: 2 + codeLines: 16 + bypassOrgs: + - bloomberg + bypassUsers: + - acomghbot + - ActivityWatchBot + - agentoffline-bot + - akri-bot + - ALGitHubBot + - ansibleazurebot + - anton-bot + - ascforiotbot + - audevbot + - azclibot + - azure-pipelines[bot] + - azure-pipelines-bot + - azure-powershell-bot + - azuresdkciprbot + - benrobot + - blackrobot + - bot-for-go[bot] + - CBL-Mariner-Bot + - content-assistant[bot] + - coreosbot + - csd-automationbot + - deanbot + - dependabot[bot] + - dependabot-preview[bot] + - dn-helix-agents-bot + - dokku-bot + - dotnet-bot + - dotnet-corert-bot + - dotnet-docker-bot + - dotnet-maestro[bot] + - dotnet-maestro-bot + - dotnet-winget-bot + - edtbot + - engelbot + - flinchbot + - github-actions[bot] + - goodboyrobot + - greenkeeper[bot] + - inclusive-coding-bot + - iotgwbot + - jenfoxbot + - julien-lebot + - learn-build-service-ppe[bot] + - learn-build-service-prod[bot] + - learn-build-service-test[bot] + - leha-bot + - liurunliang-bot + - LizardByte-bot + - LordBobbot + - McCoyBot + - meo-autobot + - microsoft-github-policy-service[bot] + - microsoft-golang-bot + - MicrosoftIssueBot + - MixedRealitySpectatorViewBot + - msftbot[bot] + - MSLearnBot + - mukaibot + - nfbot + - ninjarobot + - nzspambot + - oberonbot + - officedocsbot + - OhMyGuus-Bot + - opbld15 + - opbld16 + - opbld17 + - opbld27 + - openapi-sdkautomation[bot] + - openpublishbuild + - OutlookBot + - pbicvbot + - playwrightmachine + - podman-desktop-bot + - polymcbot + - prmerger-test[bot] + - pulumi-bot + - PylanceBot + - qa-bot + - release-please[bot] + - renovate[bot] + - reunion-maestro[bot] + - rnbot + - rnsdkbot + - RunTheBot + - sasabot + - SoundBot + - tecbot + - testplatform-bot + - thisisnotarobot + - trustedroots-bot + - typescript-bot + - uefibot + - UI-Fabric-RN-Bot + - upgradvisor-bot + - VSC-Service-Account + - vswdbot + - wdkbot + - wingetbot + - winobjc-bot + - WorkingRobot + - wslbot + - zangobot + - microsoft-graph-devx-bot[bot] + + prohibitedCompanies: + - msft + autoSignMsftEmployee: true + signRepos: + - repoName: cla-approvers-intel + fileName: approvedUsers.csv + companyName: intel + - repoName: cla-approved-bots + fileName: approvedBots.csv + companyName: microsoft-bots + 29 changes: 29 additions & 0 deletions29 +policies/mandatory-file-License.yml +Original file line number Diff line number Diff line change +@@ -0,0 +1,29 @@ +# metadata +name: This repo is missing a LICENSE file +description: This is a config to check if a LICENSE is present in a repo. + +# filters +resource: repository +where: +- | + !repository.name.equals("vscode-wiki", StringComparison.InvariantCultureIgnoreCase) # A special repo that mirrors vscode.wiki to enable contributions + && !repository.name.equals("winforms-designer", StringComparison.InvariantCultureIgnoreCase) # Private repo for collaboration with third party control vendors. It uses VS Supplemental License. +# primitive configuration +configuration: + mandatoryFiles: + issueTitle: This repo is missing a LICENSE file + issueBody: | + This repository is currently missing a LICENSE file. + + A license helps users understand how to use your project in a compliant manner. You can find the standard MIT license Microsoft uses at: https://github.com/microsoft/repo-templates/blob/main/shared/LICENSE. + If you would like to learn more about open source licenses, please visit the document at https://aka.ms/license (Microsoft-internal guidance). + prTitle: Adding Microsoft LICENSE + prBody: + file: + - path: license((-|_)([a-z0-9])*)*(\.[-_a-z0-9]+)* + ignoreCase: true + issueReminder: + firstReminderGapDays: -1 + followUpReminderGapDays: 0 + 40 changes: 40 additions & 0 deletions40 +policies/mandatory-files.yml +Original file line number Diff line number Diff line change +@@ -0,0 +1,40 @@ +# metadata +name: Mandatory files policy. +description: this policy will ensure the presence of important files in Microsoft project repositories. + +# filters +resource: repository +where: +- | + !repository.name.equals("openjdk-jdk", StringComparison.InvariantCultureIgnoreCase) + && !repository.name.equals("openjdk-jdk11u", StringComparison.InvariantCultureIgnoreCase) + && !repository.name.equals("openjdk-jdk17u", StringComparison.InvariantCultureIgnoreCase) + && !repository.name.equals("openjdk-jdk20u", StringComparison.InvariantCultureIgnoreCase) + && !repository.name.equals("openjdk-jdk21u", StringComparison.InvariantCultureIgnoreCase) + && !repository.name.equals("vscode-wiki", StringComparison.InvariantCultureIgnoreCase) # A special repo that mirrors vscode.wiki to enable contributions +# primitive configuration +configuration: + mandatoryFiles: + autoMergeDays: 10 + issueTitle: This repo is missing important files + issueBody: | + There are important files that Microsoft projects should all have that are not present in this repository. A pull request has been opened to add the missing file(s). When the pr is merged this issue will be closed automatically. + + Microsoft teams can [learn more about this effort and share feedback](https://docs.opensource.microsoft.com/releasing/maintain/templates/) within the open source guidance available internally. + prTitle: Adding Microsoft SECURITY.MD + prBody: | + Please accept this contribution adding the standard Microsoft SECURITY.MD :lock: file to help the community understand the security policy and how to safely report security issues. GitHub uses the presence of this file to light-up security reminders and a link to the file. This pull request commits the latest official SECURITY.MD file from https://github.com/microsoft/repo-templates/blob/main/shared/SECURITY.md. + + Microsoft teams can [learn more about this effort and share feedback](https://docs.opensource.microsoft.com/releasing/maintain/templates/) within the open source guidance available internally. + file: + - path: SECURITY.md + prContentLink: https://raw.githubusercontent.com/microsoft/repo-templates/main/shared/SECURITY.md + ignoreCase: true + prFilePath: SECURITY.md + otherPaths: + - docs/SECURITY.md + - .github/SECURITY.md + issueReminder: + firstReminderGapDays: 7 + followUpReminderGapDays: 2 + 10 changes: 10 additions & 0 deletions10 +policies/platformcontext.yml +Original file line number Diff line number Diff line change +@@ -0,0 +1,10 @@ +name: platform_context +description: The context for GitOps platform, this will drive GitOps specific policies +owner: +resource: repository +where: +configuration: + platformContext: + active: true +onFailure: +onSuccess: + 16 changes: 16 additions & 0 deletions16 +policies/pullrequest-quantifier.yml +Original file line number Diff line number Diff line change +@@ -0,0 +1,16 @@ +# metadata +name: pull request quantifier +description: quantify a pull request + +# filters +resource: repository +where: +- | + repository.name.equals("PullRequestQuantifier", StringComparison.InvariantCultureIgnoreCase) + || repository.name.equals("GitOps", StringComparison.InvariantCultureIgnoreCase) + || repository.name.startsWith("GitOps.", StringComparison.InvariantCultureIgnoreCase) + +# primitive configuration +configuration: + pullRequestQuantifierConfiguration: + enabled: true + 8 changes: 8 additions & 0 deletions8 +policies/repo-visibility.yml +Original file line number Diff line number Diff line change +@@ -0,0 +1,8 @@ +name: Repo Visibility Policy +description: Provides governance when attempting to open source a repository. + +resource: repository + +configuration: + repoVisibilitySettings: + active: true + 18 changes: 18 additions & 0 deletions18 +profile/README.md +Original file line number Diff line number Diff line change +@@ -0,0 +1,18 @@ +![Open Source at Microsoft](https://github.com/microsoft/.github/blob/main/images/open-at-microsoft.png) + +## Get Involved + +Right now, open communities are building amazing software together, and there are excellent "good first issue" opportunities, if you're looking to get involved. + +* [Explore featured projects](https://opensource.microsoft.com/projects/) +* [Explore open source jobs at Microsoft](https://careers.microsoft.com/us/en/search-results?keywords=open%20source) +* [Apply for Azure credits for open source projects](https://opensource.microsoft.com/azure-credits) +* Use [repository issues](https://docs.github.com/en/issues/tracking-your-work-with-issues/creating-an-issue) +and not [opensource@microsoft.com](mailto:opensource@microsoft.com) to ask questions specific to an individual Microsoft +repository.Visit [opensource.microsoft.com](https://opensource.microsoft.com) to learn more! + +---- + +Microsoft projects adopt the [Microsoft Open Source Code of Conduct](https://opensource.microsoft.com/codeofconduct/). For more information see the [Code of Conduct FAQ](https://opensource.microsoft.com/codeofconduct/faq/). + 5 changes: 5 additions & 0 deletions5 +renovate-config.json +Original file line number Diff line number Diff line change +@@ -0,0 +1,5 @@ +{ + "$schema": "https://docs.renovatebot.com/renovate-schema.json", + "description": "Default preset for use with Microsoft's repos", + "extends": ["config:base"] +} +Footer +© 2025 GitHub, Inc. +Footer navigation +Terms +Privacy +Securit