Skip to content

Custom properties

Custom properties allow you to decorate your repository with information such as compliance frameworks, data sensitivity, or project details.

agent_approval_check_repo_local
false
Repo enforces agent-approval-check via its own replacement ruleset (repo-level, or an org ruleset scoped to it) with per-repo bypass actors, instead of the generic org-level Agent Approval Check ruleset. allow_coworker_prs stays true for airlock.
allow_coworker_prs
false
Requires the agent-approval-check status on the default branch of any repo when set to `true`.
is_vendor_fork
false
Used to opt-out of rulesets like max file size and exempt the repo from required SAST workflow
repo_protection_L2
enable
Controls exceptions to https://go/source-security L2 enforcement
repo_protection_L3
enable
Controls exceptions to https://go/source-security L3 enforcement
repo_protection_L3_KIKD
disable
Controls exceptions to https://go/source-security L3 enforcement with KIKD integration for features where KIKD supports checks that would otherwise be controlled by GitHub Rulesets. To enable, must have BuildKite working on the repository.
repo_protection_L3_no_signing
disable
Controls exceptions to https://go/source-security L3 enforcement for exception case where code signing cannot be enforced. E.g. vendor forks. If this is set, should have `repo_protection_L3 = disable`
sast-exempted
true
Whether the repo is exempted from the rule requiring that it use the anthropics/sast GH action