feat: Add repository protection systems

- Add PR template to prevent commercial content leakage
- Add automated workflow to scan for prohibited content
- Protect against business strategy, infrastructure details, customer info
This commit is contained in:
David Snelling 2025-08-18 17:41:47 -07:00
parent f8c45f2d8d
commit 7432fab3bc
3 changed files with 13792 additions and 0 deletions

18
.github/pull_request_template.md vendored Normal file
View file

@ -0,0 +1,18 @@
# 🚨 CRITICAL: Public Repository Checklist
## Before merging this PR, confirm:
- [ ] **No business strategy** - No pricing, revenue plans, or commercial roadmaps
- [ ] **No customer info** - No specific customer details or enterprise discussions
- [ ] **No infrastructure details** - No Google Cloud project IDs or internal URLs
- [ ] **No SkillVill content** - All SkillVill planning belongs in brain-cloud repo
- [ ] **Open source focused** - Content appropriate for public consumption
- [ ] **Registry references OK** - Only registry.soulcraft.com endpoint references allowed
## ✅ This PR contains only:
- [ ] Open source Brainy library improvements
- [ ] Generic documentation updates
- [ ] CLI enhancements (registry integration OK)
- [ ] Community-focused features
**🛡️ When in doubt, move content to brain-cloud private repo instead!**

43
.github/workflows/repo-audit.yml vendored Normal file
View file

@ -0,0 +1,43 @@
name: 🚨 Repository Content Audit
on:
push:
branches: [ main ]
pull_request:
branches: [ main ]
jobs:
audit-content:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: 🔍 Scan for commercial content
run: |
echo "🚨 Scanning for prohibited content..."
# Scan for business terms
if grep -r -i "skillvill\|revenue\|pricing.*\$[0-9]\|enterprise.*plan\|business.*plan.*\$" . --exclude-dir=.git --exclude-dir=node_modules; then
echo "❌ FOUND BUSINESS CONTENT IN PUBLIC REPO!"
exit 1
fi
# Scan for infrastructure details
if grep -r "476163328636\|brain-cloud-api.*\.run\.app" . --exclude-dir=.git --exclude-dir=node_modules; then
echo "❌ FOUND INFRASTRUCTURE DETAILS IN PUBLIC REPO!"
exit 1
fi
# Scan for customer info
if grep -r -i "customer.*\$\|client.*enterprise\|acme.*corp.*\$" . --exclude-dir=.git --exclude-dir=node_modules; then
echo "❌ FOUND CUSTOMER INFO IN PUBLIC REPO!"
exit 1
fi
echo "✅ Content audit passed - repository is clean!"
- name: 📝 Verify allowed content
run: |
echo "✅ Checking for required open source content..."
ls -la src/ bin/ README.md package.json
echo "✅ All good - open source content present"