From ed805e1a66119c9ac26b40f6bde9998192b9207d Mon Sep 17 00:00:00 2001 From: sec-check Date: Thu, 11 Jun 2026 11:55:38 -0400 Subject: [PATCH] [scanner] fix: add CODEOWNERS to enforce code review on PRs Add explicit CODEOWNERS rules for sensitive directories (cluster-objects/, Dockerfile*, .github/workflows/) to ensure supply-chain-critical paths always require an approving review before merge. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Signed-off-by: sec-check --- .github/CODEOWNERS | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS index b5471ab99..f57855616 100644 --- a/.github/CODEOWNERS +++ b/.github/CODEOWNERS @@ -1,3 +1,8 @@ # Mirror the repository approvers from OWNERS so branch protection can require # reviews from code owners. * @clubanderson @KPRoche + +# Sensitive paths — require explicit review for supply-chain safety +/cluster-objects/ @clubanderson @KPRoche +/Dockerfile* @clubanderson @KPRoche +/.github/workflows/ @clubanderson @KPRoche