Presets

Preset	Key	Purpose
✅ Recommended	repoPlugin.configs.recommended	Baseline repository policy checks
🔒 Strict	repoPlugin.configs.strict	Recommended plus stronger policy requirements
📦 Dependabot	repoPlugin.configs.dependabot	Dependabot update policy checks
🐙 GitHub	repoPlugin.configs.github	GitHub repository hygiene and automation
🦊 GitLab	repoPlugin.configs.gitlab	GitLab merge-request and CI hygiene
🗻 Codeberg	repoPlugin.configs.codeberg	Forgejo/Codeberg workflow hygiene
🪣 Bitbucket	repoPlugin.configs.bitbucket	Bitbucket pipelines policy checks
☁️ AWS	repoPlugin.configs.aws	AWS Amplify build-spec requirements
🔷 Azure	repoPlugin.configs.azure	Azure Pipelines policy checks
🌤️ Google Cloud	repoPlugin.configs.googleCloud	Google Cloud Build policy checks
🐳 Docker	repoPlugin.configs.docker	Docker packaging repository checks
▲ Vercel	repoPlugin.configs.vercel	Vercel project configuration requirements
🌐 Netlify	repoPlugin.configs.netlify	Netlify build configuration requirements
🌊 DigitalOcean	repoPlugin.configs.DigitalOcean	DigitalOcean App Platform spec requirements
🟢 Node	repoPlugin.configs.node	Node.js runtime version pinning requirements
🤖 AI	repoPlugin.configs.ai	Repository guidance files for AI-assisted development
🧩 All	repoPlugin.configs.all	All available rules

Rule matrix

• Fix legend:
  • 🔧 = autofixable
  • 💡 = suggestions available
  • — = report only
• Preset key legend:
  • ✅ — repoPlugin.configs.recommended
  • 🔒 — repoPlugin.configs.strict
  • 📦 — repoPlugin.configs.dependabot
  • 🐙 — repoPlugin.configs.github
  • 🦊 — repoPlugin.configs.gitlab
  • 🗻 — repoPlugin.configs.codeberg
  • 🪣 — repoPlugin.configs.bitbucket
  • ☁️ — repoPlugin.configs.aws
  • 🔷 — repoPlugin.configs.azure
  • 🌤️ — repoPlugin.configs.googleCloud
  • 🐳 — repoPlugin.configs.docker
  • ▲ — repoPlugin.configs.vercel
  • 🌐 — repoPlugin.configs.netlify
  • 🌊 — repoPlugin.configs.DigitalOcean
  • 🟢 — repoPlugin.configs.node
  • 🤖 — repoPlugin.configs.ai
  • 🧩 — repoPlugin.configs.all

Rule	Fix	Preset key
require-aws-amplify-artifacts-base-directory	—	🔒 ☁️ 🧩
require-aws-amplify-artifacts-base-directory-relative-path	—	🔒 ☁️ 🧩
require-aws-amplify-artifacts-files	—	🔒 ☁️ 🧩
require-aws-amplify-artifacts-files-non-empty	—	🔒 ☁️ 🧩
require-aws-amplify-build-commands	—	🔒 ☁️ 🧩
require-aws-amplify-config-file	—	🔒 ☁️ 🧩
require-aws-amplify-version	—	🔒 ☁️ 🧩
require-aws-amplify-version-value	—	🔒 ☁️ 🧩
require-azure-pipelines-config-file	—	🔒 🔷 🧩
require-azure-pipelines-execution-plan	—	🔒 🔷 🧩
require-azure-pipelines-name	—	🔒 🔷 🧩
require-azure-pipelines-pr-branches	—	🔒 🔷 🧩
require-azure-pipelines-pr-trigger	—	🔒 🔷 🧩
require-azure-pipelines-trigger	—	🔒 🔷 🧩
require-azure-pipelines-trigger-branches	—	🔒 🔷 🧩
require-azure-pipelines-trigger-include-branches	—	🔒 🔷 🧩
require-bitbucket-pipelines-clone-depth	—	🪣 🧩
require-bitbucket-pipelines-config-file	—	🔒 🪣 🧩
require-bitbucket-pipelines-default-pipeline	—	🔒 🪣 🧩
require-bitbucket-pipelines-image-pinned-tag	—	🔒 🪣 🧩
require-bitbucket-pipelines-max-time	—	🔒 🪣 🧩
require-bitbucket-pipelines-pull-requests	—	🔒 🪣 🧩
require-bitbucket-pipelines-pull-requests-target-branches	—	🔒 🪣 🧩
require-bitbucket-pipelines-step-name	—	🔒 🪣 🧩
require-changelog-file	—	✅ 🔒 🧩
require-code-of-conduct-file	—	✅ 🔒 🐙 🦊 🗻 🪣 🧩
require-codeowners-file	—	🔒 🐙 🦊 🗻 🪣 🧩
require-codeowners-reviewable-patterns	—	🔒 🐙 🪣 🧩
require-contributing-file	—	✅ 🔒 🐙 🦊 🗻 🪣 🧩
require-copilot-instructions-file	—	🤖 🧩
require-dependabot-config-file	—	📦 🐙 🧩
require-dependabot-grouping	—	📦 🧩
require-dependabot-reviewers	—	📦 🐙 🧩
require-dependabot-schedule	—	📦 🐙 🧩
require-dependabot-update-entries	—	📦 🧩
require-dependency-update-config	—	📦 🧩
require-digitalocean-app-spec-component	—	🔒 🌊 🧩
require-digitalocean-app-spec-file	—	🔒 🌊 🧩
require-digitalocean-app-spec-name	—	🔒 🌊 🧩
require-digitalocean-app-spec-name-value	—	🔒 🌊 🧩
require-digitalocean-app-spec-region	—	🔒 🌊 🧩
require-digitalocean-app-spec-region-lowercase	—	🔒 🌊 🧩
require-digitalocean-app-spec-region-value	—	🔒 🌊 🧩
require-dockerfile	—	🔒 🐳 🧩
require-dockerfile-base-image-tag	—	🔒 🐳 🧩
require-dockerfile-cmd-or-entrypoint	—	🔒 🐳 🧩
require-dockerfile-first-instruction-from	—	🔒 🐳 🧩
require-dockerfile-from-instruction	—	🔒 🐳 🧩
require-dockerfile-user	—	🔒 🐳 🧩
require-dockerfile-workdir	—	🔒 🐳 🧩
require-dockerignore-file	—	🔒 🐳 🧩
require-forgejo-actions-concurrency	—	🔒 🗻 🧩
require-forgejo-actions-job-timeout-minutes	—	🔒 🗻 🧩
require-forgejo-actions-no-write-all-permissions	—	🔒 🗻 🧩
require-forgejo-actions-pinned-sha	—	🔒 🗻 🧩
require-forgejo-actions-workflow-dispatch	—	🔒 🗻 🧩
require-forgejo-actions-workflow-file	—	🔒 🗻 🧩
require-forgejo-actions-workflow-name	—	🔒 🗻 🧩
require-forgejo-actions-workflow-permissions	—	🔒 🗻 🧩
require-forgejo-actions-workflow-trigger-coverage	—	🗻 🧩
require-gitattributes-file	—	✅ 🔒 🧩
require-github-actions-workflow-file	—	🔒 🐙 🧩
require-github-actions-workflow-name	—	🔒 🐙 🧩
require-github-code-scanning-workflow	—	🐙 🧩
require-github-issue-template-labels	—	🔒 🐙 🧩
require-gitignore-file	—	✅ 🔒 🧩
require-gitlab-ci-cache-policy	—	🔒 🦊 🧩
require-gitlab-ci-config-file	—	🔒 🦊 🧩
require-gitlab-ci-default-timeout	—	🔒 🦊 🧩
require-gitlab-ci-interruptible	—	🔒 🦊 🧩
require-gitlab-ci-merge-request-pipelines	—	🔒 🦊 🧩
require-gitlab-ci-needs-dag	—	🦊 🧩
require-gitlab-ci-rules-over-only-except	—	🔒 🦊 🧩
require-gitlab-ci-security-scanning	—	🔒 🦊 🧩
require-gitlab-ci-stages	—	🔒 🦊 🧩
require-gitlab-ci-workflow-rules	—	🔒 🦊 🧩
require-gitlab-issue-template-file	—	🔒 🦊 🧩
require-gitlab-merge-request-template-file	—	🔒 🦊 🧩
require-google-cloud-build-config-file	—	🔒 🌤️ 🧩
require-google-cloud-build-step-name	—	🔒 🌤️ 🧩
require-google-cloud-build-steps	—	🔒 🌤️ 🧩
require-google-cloud-build-steps-non-empty	—	🔒 🌤️ 🧩
require-google-cloud-build-timeout	—	🔒 🌤️ 🧩
require-google-cloud-build-timeout-format	—	🔒 🌤️ 🧩
require-google-cloud-build-timeout-max	—	🔒 🌤️ 🧩
require-google-cloud-build-timeout-positive	—	🔒 🌤️ 🧩
require-issue-template-file	—	🔒 🐙 🦊 🗻 🧩
require-license-file	—	✅ 🔒 🐙 🦊 🗻 🪣 🧩
require-license-spdx-identifier	—	✅ 🔒 🧩
require-netlify-build-command	—	🔒 🌐 🧩
require-netlify-build-command-non-empty	—	🔒 🌐 🧩
require-netlify-build-publish-directory	—	🔒 🌐 🧩
require-netlify-build-section	—	🔒 🌐 🧩
require-netlify-config-file	—	🔒 🌐 🧩
require-netlify-publish-directory-no-trailing-slash	—	🔒 🌐 🧩
require-netlify-publish-directory-non-empty	—	🔒 🌐 🧩
require-netlify-publish-relative-path	—	🔒 🌐 🧩
require-node-version-file	—	🟢 🧩
require-nvmrc-file	—	🟢 🧩
require-pr-template-checklist-items	—	🔒 🧩
require-pull-request-template-file	—	🔒 🐙 🦊 🗻 🧩
require-readme-badges	—	🧩
require-readme-file	—	✅ 🔒 🐙 🦊 🗻 🪣 🧩
require-readme-sections	—	🔒 🧩
require-release-config-file	—	🐙 🧩
require-secret-scanning-config	—	🔒 🐙 🧩
require-security-policy-contact-channel	—	🔒 🐙 🧩
require-security-policy-file	—	✅ 🔒 🐙 🦊 🗻 🪣 🧩
require-single-codeowners-file	—	🔒 🐙 🦊 🗻 🪣 🧩
require-support-file	—	✅ 🔒 🐙 🦊 🗻 🪣 🧩
require-vercel-build-command	—	🔒 ▲ 🧩
require-vercel-config-file	—	🔒 ▲ 🧩
require-vercel-config-object	—	🔒 ▲ 🧩
require-vercel-schema	—	🔒 ▲ 🧩
require-vercel-schema-url	—	🔒 ▲ 🧩
require-vercel-valid-json	—	🔒 ▲ 🧩
require-vercel-version-value	—	🔒 ▲ 🧩

Rules grouped by preset

Rules are listed below by preset so you can scan exactly what each config enables.

• Fix legend:
  • 🔧 = autofixable
  • 💡 = suggestions available
  • — = report only

✅ Recommended

• Preset key: repoPlugin.configs.recommended

Rule	Fix
require-changelog-file	—
require-code-of-conduct-file	—
require-contributing-file	—
require-gitattributes-file	—
require-gitignore-file	—
require-license-file	—
require-license-spdx-identifier	—
require-readme-file	—
require-security-policy-file	—
require-support-file	—

🔒 Strict

• Preset key: repoPlugin.configs.strict

Rule	Fix
require-changelog-file	—
require-code-of-conduct-file	—
require-codeowners-file	—
require-codeowners-reviewable-patterns	—
require-contributing-file	—
require-gitattributes-file	—
require-gitignore-file	—
require-issue-template-file	—
require-license-file	—
require-license-spdx-identifier	—
require-pr-template-checklist-items	—
require-pull-request-template-file	—
require-readme-file	—
require-readme-sections	—
require-security-policy-contact-channel	—
require-security-policy-file	—
require-single-codeowners-file	—
require-support-file	—

📦 Dependabot

• Preset key: repoPlugin.configs.dependabot

Rule	Fix
require-dependabot-config-file	—
require-dependabot-grouping	—
require-dependabot-reviewers	—
require-dependabot-schedule	—
require-dependabot-update-entries	—
require-dependency-update-config	—

🐙 GitHub

• Preset key: repoPlugin.configs.github

Rule	Fix
require-code-of-conduct-file	—
require-codeowners-file	—
require-codeowners-reviewable-patterns	—
require-contributing-file	—
require-dependabot-config-file	—
require-dependabot-reviewers	—
require-dependabot-schedule	—
require-github-actions-workflow-file	—
require-github-actions-workflow-name	—
require-github-code-scanning-workflow	—
require-github-issue-template-labels	—
require-issue-template-file	—
require-license-file	—
require-pull-request-template-file	—
require-readme-file	—
require-release-config-file	—
require-secret-scanning-config	—
require-security-policy-contact-channel	—
require-security-policy-file	—
require-single-codeowners-file	—
require-support-file	—

🦊 GitLab

• Preset key: repoPlugin.configs.gitlab

Rule	Fix
require-code-of-conduct-file	—
require-codeowners-file	—
require-contributing-file	—
require-gitlab-ci-cache-policy	—
require-gitlab-ci-config-file	—
require-gitlab-ci-default-timeout	—
require-gitlab-ci-interruptible	—
require-gitlab-ci-merge-request-pipelines	—
require-gitlab-ci-needs-dag	—
require-gitlab-ci-rules-over-only-except	—
require-gitlab-ci-security-scanning	—
require-gitlab-ci-stages	—
require-gitlab-ci-workflow-rules	—
require-gitlab-issue-template-file	—
require-gitlab-merge-request-template-file	—
require-issue-template-file	—
require-license-file	—
require-pull-request-template-file	—
require-readme-file	—
require-security-policy-file	—
require-single-codeowners-file	—
require-support-file	—

🗻 Codeberg / Forgejo

• Preset key: repoPlugin.configs.codeberg

Rule	Fix
require-code-of-conduct-file	—
require-codeowners-file	—
require-contributing-file	—
require-forgejo-actions-concurrency	—
require-forgejo-actions-job-timeout-minutes	—
require-forgejo-actions-no-write-all-permissions	—
require-forgejo-actions-pinned-sha	—
require-forgejo-actions-workflow-dispatch	—
require-forgejo-actions-workflow-file	—
require-forgejo-actions-workflow-name	—
require-forgejo-actions-workflow-permissions	—
require-forgejo-actions-workflow-trigger-coverage	—
require-issue-template-file	—
require-license-file	—
require-pull-request-template-file	—
require-readme-file	—
require-security-policy-file	—
require-single-codeowners-file	—
require-support-file	—

🪣 Bitbucket

• Preset key: repoPlugin.configs.bitbucket

Rule	Fix
require-bitbucket-pipelines-clone-depth	—
require-bitbucket-pipelines-config-file	—
require-bitbucket-pipelines-default-pipeline	—
require-bitbucket-pipelines-image-pinned-tag	—
require-bitbucket-pipelines-max-time	—
require-bitbucket-pipelines-pull-requests	—
require-bitbucket-pipelines-pull-requests-target-branches	—
require-bitbucket-pipelines-step-name	—
require-code-of-conduct-file	—
require-codeowners-file	—
require-codeowners-reviewable-patterns	—
require-contributing-file	—
require-license-file	—
require-readme-file	—
require-security-policy-file	—
require-single-codeowners-file	—
require-support-file	—

☁️ AWS

• Preset key: repoPlugin.configs.aws

Rule	Fix
require-aws-amplify-artifacts-base-directory	—
require-aws-amplify-artifacts-base-directory-relative-path	—
require-aws-amplify-artifacts-files	—
require-aws-amplify-artifacts-files-non-empty	—
require-aws-amplify-build-commands	—
require-aws-amplify-config-file	—
require-aws-amplify-version	—
require-aws-amplify-version-value	—

🔷 Azure

• Preset key: repoPlugin.configs.azure

Rule	Fix
require-azure-pipelines-config-file	—
require-azure-pipelines-execution-plan	—
require-azure-pipelines-name	—
require-azure-pipelines-pr-branches	—
require-azure-pipelines-pr-trigger	—
require-azure-pipelines-trigger	—
require-azure-pipelines-trigger-branches	—
require-azure-pipelines-trigger-include-branches	—

🌤️ Google Cloud

• Preset key: repoPlugin.configs.googleCloud

Rule	Fix
require-google-cloud-build-config-file	—
require-google-cloud-build-step-name	—
require-google-cloud-build-steps	—
require-google-cloud-build-steps-non-empty	—
require-google-cloud-build-timeout	—
require-google-cloud-build-timeout-format	—
require-google-cloud-build-timeout-max	—
require-google-cloud-build-timeout-positive	—

🐳 Docker

• Preset key: repoPlugin.configs.docker

Rule	Fix
require-dockerfile	—
require-dockerfile-base-image-tag	—
require-dockerfile-cmd-or-entrypoint	—
require-dockerfile-first-instruction-from	—
require-dockerfile-from-instruction	—
require-dockerfile-user	—
require-dockerfile-workdir	—
require-dockerignore-file	—

▲ Vercel

• Preset key: repoPlugin.configs.vercel

Rule	Fix
require-vercel-build-command	—
require-vercel-config-file	—
require-vercel-config-object	—
require-vercel-schema	—
require-vercel-schema-url	—
require-vercel-valid-json	—
require-vercel-version-value	—

🌐 Netlify

• Preset key: repoPlugin.configs.netlify

Rule	Fix
require-netlify-build-command	—
require-netlify-build-command-non-empty	—
require-netlify-build-publish-directory	—
require-netlify-build-section	—
require-netlify-config-file	—
require-netlify-publish-directory-no-trailing-slash	—
require-netlify-publish-directory-non-empty	—
require-netlify-publish-relative-path	—

🌊 DigitalOcean

• Preset key: repoPlugin.configs.DigitalOcean

Rule	Fix
require-digitalocean-app-spec-component	—
require-digitalocean-app-spec-file	—
require-digitalocean-app-spec-name	—
require-digitalocean-app-spec-name-value	—
require-digitalocean-app-spec-region	—
require-digitalocean-app-spec-region-lowercase	—
require-digitalocean-app-spec-region-value	—

🟢 Node

• Preset key: repoPlugin.configs.node

Rule	Fix
require-node-version-file	—
require-nvmrc-file	—

🤖 AI

• Preset key: repoPlugin.configs.ai

Rule	Fix
require-copilot-instructions-file	—

🧩 All

• Preset key: repoPlugin.configs.all

Rule	Fix
require-aws-amplify-artifacts-base-directory	—
require-aws-amplify-artifacts-base-directory-relative-path	—
require-aws-amplify-artifacts-files	—
require-aws-amplify-artifacts-files-non-empty	—
require-aws-amplify-build-commands	—
require-aws-amplify-config-file	—
require-aws-amplify-version	—
require-aws-amplify-version-value	—
require-azure-pipelines-config-file	—
require-azure-pipelines-execution-plan	—
require-azure-pipelines-name	—
require-azure-pipelines-pr-branches	—
require-azure-pipelines-pr-trigger	—
require-azure-pipelines-trigger	—
require-azure-pipelines-trigger-branches	—
require-azure-pipelines-trigger-include-branches	—
require-bitbucket-pipelines-clone-depth	—
require-bitbucket-pipelines-config-file	—
require-bitbucket-pipelines-default-pipeline	—
require-bitbucket-pipelines-image-pinned-tag	—
require-bitbucket-pipelines-max-time	—
require-bitbucket-pipelines-pull-requests	—
require-bitbucket-pipelines-pull-requests-target-branches	—
require-bitbucket-pipelines-step-name	—
require-changelog-file	—
require-code-of-conduct-file	—
require-codeowners-file	—
require-codeowners-reviewable-patterns	—
require-contributing-file	—
require-copilot-instructions-file	—
require-dependabot-config-file	—
require-dependabot-grouping	—
require-dependabot-reviewers	—
require-dependabot-schedule	—
require-dependabot-update-entries	—
require-dependency-update-config	—
require-digitalocean-app-spec-component	—
require-digitalocean-app-spec-file	—
require-digitalocean-app-spec-name	—
require-digitalocean-app-spec-name-value	—
require-digitalocean-app-spec-region	—
require-digitalocean-app-spec-region-lowercase	—
require-digitalocean-app-spec-region-value	—
require-dockerfile	—
require-dockerfile-base-image-tag	—
require-dockerfile-cmd-or-entrypoint	—
require-dockerfile-first-instruction-from	—
require-dockerfile-from-instruction	—
require-dockerfile-user	—
require-dockerfile-workdir	—
require-dockerignore-file	—
require-forgejo-actions-concurrency	—
require-forgejo-actions-job-timeout-minutes	—
require-forgejo-actions-no-write-all-permissions	—
require-forgejo-actions-pinned-sha	—
require-forgejo-actions-workflow-dispatch	—
require-forgejo-actions-workflow-file	—
require-forgejo-actions-workflow-name	—
require-forgejo-actions-workflow-permissions	—
require-forgejo-actions-workflow-trigger-coverage	—
require-gitattributes-file	—
require-github-actions-workflow-file	—
require-github-actions-workflow-name	—
require-github-code-scanning-workflow	—
require-github-issue-template-labels	—
require-gitignore-file	—
require-gitlab-ci-cache-policy	—
require-gitlab-ci-config-file	—
require-gitlab-ci-default-timeout	—
require-gitlab-ci-interruptible	—
require-gitlab-ci-merge-request-pipelines	—
require-gitlab-ci-needs-dag	—
require-gitlab-ci-rules-over-only-except	—
require-gitlab-ci-security-scanning	—
require-gitlab-ci-stages	—
require-gitlab-ci-workflow-rules	—
require-gitlab-issue-template-file	—
require-gitlab-merge-request-template-file	—
require-google-cloud-build-config-file	—
require-google-cloud-build-step-name	—
require-google-cloud-build-steps	—
require-google-cloud-build-steps-non-empty	—
require-google-cloud-build-timeout	—
require-google-cloud-build-timeout-format	—
require-google-cloud-build-timeout-max	—
require-google-cloud-build-timeout-positive	—
require-issue-template-file	—
require-license-file	—
require-license-spdx-identifier	—
require-netlify-build-command	—
require-netlify-build-command-non-empty	—
require-netlify-build-publish-directory	—
require-netlify-build-section	—
require-netlify-config-file	—
require-netlify-publish-directory-no-trailing-slash	—
require-netlify-publish-directory-non-empty	—
require-netlify-publish-relative-path	—
require-node-version-file	—
require-nvmrc-file	—
require-pr-template-checklist-items	—
require-pull-request-template-file	—
require-readme-badges	—
require-readme-file	—
require-readme-sections	—
require-release-config-file	—
require-secret-scanning-config	—
require-security-policy-contact-channel	—
require-security-policy-file	—
require-single-codeowners-file	—
require-support-file	—
require-vercel-build-command	—
require-vercel-config-file	—
require-vercel-config-object	—
require-vercel-schema	—
require-vercel-schema-url	—
require-vercel-valid-json	—
require-vercel-version-value	—