github.rulesets.tf

resource "github_repository_ruleset" "main" {
  name        = "Azure Verified Modules"
  repository  = data.github_repository.this.name
  target      = "branch"
  enforcement = "active"

  conditions {
    ref_name {
      include = ["~DEFAULT_BRANCH"]
      exclude = []
    }
  }

  rules {
    creation                = true
    deletion                = true
    required_linear_history = true
    non_fast_forward = true

    pull_request {
      dismiss_stale_reviews_on_push = true
      require_code_owner_review = true
      required_approving_review_count = var.is_protected_repo ? 1 : 0
      require_last_push_approval = var.is_protected_repo
      required_review_thread_resolution = true
    }
  }
}