Example rulesets used by Astral

branches-disallow-advisory.json

{
  "name": "no-push-advisory-branches",
  "target": "branch",
  "enforcement": "active",
  "conditions": {
    "repository_name": {
      "include": [
        "ruff",
        "ty",
        "uv"
      ],
      "exclude": []
    },
    "ref_name": {
      "exclude": [],
      "include": [
        "refs/heads/advisory-*",
        "refs/heads/ghsa-*",
        "refs/heads/cve-*"
      ]
    }
  },
  "rules": [
    {
      "type": "non_fast_forward"
    },
    {
      "type": "creation"
    },
    {
      "type": "update"
    }
  ],
  "bypass_actors": []
}

branches-disallow-internal.json

{
  "name": "no-push-internal-branches",
  "target": "branch",
  "enforcement": "active",
  "conditions": {
    "repository_name": {
      "include": [
        "ruff",
        "ty",
        "uv"
      ],
      "exclude": []
    },
    "ref_name": {
      "exclude": [],
      "include": [
        "refs/heads/internal/**/*"
      ]
    }
  },
  "rules": [
    {
      "type": "non_fast_forward"
    },
    {
      "type": "creation"
    },
    {
      "type": "update"
    }
  ],
  "bypass_actors": []
}

branches-main.json

{
  "name": "branches-main",
  "target": "branch",
  "enforcement": "active",
  "conditions": {
    "repository_name": {
      "include": [
        "ruff",
        "ty",
        "uv"
      ],
      "exclude": []
    },
    "ref_name": {
      "exclude": [],
      "include": [
        "~DEFAULT_BRANCH"
      ]
    }
  },
  "rules": [
    {
      "type": "deletion"
    },
    {
      "type": "non_fast_forward"
    },
    {
      "type": "required_linear_history"
    },
    {
      "type": "pull_request",
      "parameters": {
        "required_approving_review_count": 0,
        "dismiss_stale_reviews_on_push": false,
        "required_reviewers": [],
        "require_code_owner_review": false,
        "require_last_push_approval": false,
        "required_review_thread_resolution": false,
        "allowed_merge_methods": [
          "squash",
          "rebase"
        ]
      }
    }
  ],
  "bypass_actors": []
}

tags-are-immutable.json

{
  "name": "tags-are-immutable",
  "target": "tag",
  "enforcement": "active",
  "conditions": {
    "repository_name": {
      "include": [
        "ruff",
        "ty",
        "uv"
      ],
      "exclude": []
    },
    "ref_name": {
      "exclude": [],
      "include": [
        "~ALL"
      ]
    }
  },
  "rules": [
    {
      "type": "deletion"
    },
    {
      "type": "non_fast_forward"
    },
    {
      "type": "update"
    }
  ],
  "bypass_actors": []
}

tags-require-release.json

{
  "name": "tag-requires-release",
  "target": "tag",
  "enforcement": "active",
  "conditions": {
    "repository_name": {
      "include": [
        "uv"
      ],
      "exclude": []
    },
    "ref_name": {
      "exclude": [],
      "include": [
        "~ALL"
      ]
    }
  },
  "rules": [
    {
      "type": "non_fast_forward"
    },
    {
      "type": "required_deployments",
      "parameters": {
        "required_deployment_environments": [
          "release"
        ]
      }
    }
  ],
  "bypass_actors": []
}