Merge pull request #1463 from Kobzol/repo-rust

Add rust repository under automation

Author: marcoieni

.github/CODEOWNERS

@@ -19,6 +19,7 @@ teams/**/*.toml
 # Modifying these files requires admin approval.
 /repos/rust-lang/team.toml @Mark-Simulacrum @pietroalbini @jdno @marcoieni
 /repos/rust-lang/sync-team.toml @Mark-Simulacrum @pietroalbini @jdno @marcoieni
+/repos/rust-lang/rust.toml @Mark-Simulacrum @pietroalbini @jdno @marcoieni
 /teams/infra-admins.toml @Mark-Simulacrum @pietroalbini @jdno @marcoieni
 /teams/team-repo-admins.toml @Mark-Simulacrum @pietroalbini @jdno @marcoieni
 /people/Mark-Simulacrum.toml @Mark-Simulacrum @pietroalbini @jdno @marcoieni

repos/rust-lang/rust.toml

@@ -0,0 +1,67 @@
+org = "rust-lang"
+name = "rust"
+description = "Empowering everyone to build reliable and efficient software."
+homepage = "https://www.rust-lang.org"
+bots = ["bors", "craterbot", "glacierbot", "log-analyzer", "rustbot", "rfcbot", "rust-timer"]
+
+[access.teams]
+bootstrap = "write"
+cargo = "write"
+clippy = "write"
+compiler = "write"
+infra = "write"
+lang = "write"
+lang-ops = "write"
+libs = "write"
+libs-api = "write"
+libs-contributors = "write"
+mods = "write"
+opsem = "write"
+project-exploit-mitigations = "write"
+project-stable-mir = "write"
+release = "write"
+rustdoc = "write"
+style = "write"
+types = "write"
+wg-prioritization = "triage"
+wg-triage = "write"
+
+[[branch-protections]]
+pattern = "master"
+merge-bots = ["homu"]
+
+[[branch-protections]]
+pattern = "stable"
+merge-bots = ["homu"]
+
+[[branch-protections]]
+pattern = "beta"
+merge-bots = ["homu"]
+
+[[branch-protections]]
+pattern = "try"
+merge-bots = ["homu"]
+
+[[branch-protections]]
+pattern = "auto"
+merge-bots = ["homu"]
+
+[[branch-protections]]
+pattern = "*"
+merge-bots = ["homu"]
+
+[[branch-protections]]
+pattern = "*/**/*"
+pr-required = false
+
+[[branch-protections]]
+pattern = "cargo_update"
+pr-required = false
+
+[[branch-protections]]
+pattern = "automation/bors/try-merge"
+pr-required = false
+
+[[branch-protections]]
+pattern = "automation/bors/try"
+pr-required = false

src/ci.rs

@@ -25,6 +25,16 @@ pub fn check_codeowners(data: Data) -> anyhow::Result<()> {
     Ok(())
 }
 
+/// Sensitive TOML data files.
+/// PRs that modify them need to be approved by an infra-admin.
+const PROTECTED_PATHS: &[&str] = &[
+    "/repos/rust-lang/team.toml",
+    "/repos/rust-lang/sync-team.toml",
+    "/repos/rust-lang/rust.toml",
+    "/teams/infra-admins.toml",
+    "/teams/team-repo-admins.toml",
+];
+
 /// We want to allow access to the data files to `team-repo-admins`
 /// (maintainers), while requiring a review from `infra-admins` (admins)
 /// for any other changes.
@@ -137,12 +147,8 @@ teams/**/*.toml
     )
     .unwrap();
 
-    let mut protected_paths = vec![
-        "/repos/rust-lang/team.toml".to_string(),
-        "/repos/rust-lang/sync-team.toml".to_string(),
-        "/teams/infra-admins.toml".to_string(),
-        "/teams/team-repo-admins.toml".to_string(),
-    ];
+    let mut protected_paths: Vec<String> =
+        PROTECTED_PATHS.iter().map(|&p| String::from(p)).collect();
 
     // Some users can be both admins and maintainers.
     let all_users = admins