Skip to content

feat: default archive_on_destroy to true and has_downloads to false #14

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
josmo merged 2 commits into from
Aug 16, 2026
+6 −6
Merged

feat: default archive_on_destroy to true and has_downloads to false #14

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
85bf7ce
feat: default archive_on_destroy to true
josmo Aug 16, 2026
c2fed72
feat: default has_downloads to false
josmo Aug 16, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -133,7 +133,7 @@ upgrading. Breaking input changes so far, since the initial release:
| <a name="input_organization_variables"></a> [organization\_variables](#input\_organization\_variables) | Org-level shared Actions variables (plaintext value + visibility). | <pre>map(object({<br/> value = string<br/> visibility = optional(string, "private")<br/> repositories = optional(list(string), [])<br/> }))</pre> | `{}` | no |
| <a name="input_owners"></a> [owners](#input\_owners) | Explicit set of owner usernames (mapped to GitHub's `admin` role). Ignored when `owners_team` is set. | `set(string)` | `[]` | no |
| <a name="input_owners_team"></a> [owners\_team](#input\_owners\_team) | Convenience: derive organization owners from the members of this team, by<br/>name. `null` (default) means use the explicit `owners` set instead. There is<br/>no hardcoded owners team — the consumer chooses. | `string` | `null` | no |
| <a name="input_repositories"></a> [repositories](#input\_repositories) | Repositories and which teams may access them. See the repository submodule for the full object schema and validations. | <pre>list(object({<br/> name = string<br/> description = string<br/> visibility = optional(string, "private")<br/> readers = optional(list(string), [])<br/> writers = optional(list(string), [])<br/> admins = optional(list(string), [])<br/> restricted = optional(bool, false)<br/><br/> topics = optional(list(string), [])<br/> homepage_url = optional(string, null)<br/> has_issues = optional(bool, true)<br/> has_wiki = optional(bool, false)<br/> has_projects = optional(bool, false)<br/> has_downloads = optional(bool, true)<br/> is_template = optional(bool, false)<br/> gitignore_template = optional(string, null)<br/> license_template = optional(string, null)<br/> archived = optional(bool, false)<br/> archive_on_destroy = optional(bool, false)<br/> default_branch = optional(string, null)<br/> enable_pages = optional(bool, false)<br/> signed_commits = optional(bool, true)<br/><br/> allow_merge_commit = optional(bool, false)<br/> allow_squash_merge = optional(bool, true)<br/> allow_rebase_merge = optional(bool, false)<br/> allow_auto_merge = optional(bool, true)<br/> delete_branch_on_merge = optional(bool, true)<br/> merge_commit_message = optional(string, "PR_BODY")<br/> merge_commit_title = optional(string, "PR_TITLE")<br/><br/> template = optional(object({<br/> owner = string<br/> repository = string<br/> include_all_branches = optional(bool, false)<br/> }))<br/><br/> rulesets = optional(map(object({<br/> enforcement = optional(string, "active")<br/> target = optional(string, "branch")<br/> include_refs = optional(list(string), ["~ALL"])<br/> exclude_refs = optional(list(string), [])<br/> bypass_actors = optional(list(object({<br/> actor_type = string<br/> actor_id = optional(number, 0)<br/> team = optional(string)<br/> bypass_mode = optional(string, "always")<br/> })), [])<br/> rules = object({<br/> creation = optional(bool, false)<br/> update = optional(bool, false)<br/> deletion = optional(bool, false)<br/> non_fast_forward = optional(bool, false)<br/> required_signatures = optional(bool, false)<br/> required_linear_history = optional(bool, false)<br/> pull_request = optional(object({<br/> required_approving_review_count = optional(number, 0)<br/> require_code_owner_review = optional(bool, false)<br/> require_last_push_approval = optional(bool, false)<br/> dismiss_stale_reviews_on_push = optional(bool, false)<br/> required_review_thread_resolution = optional(bool, false)<br/> }))<br/> })<br/> })), {})<br/><br/> variables = optional(map(string), {})<br/> environments = optional(map(object({<br/> variables = optional(map(string), {})<br/> reviewers = optional(list(string), [])<br/> wait_timer = optional(number, 0)<br/> deployment_branch_policy = optional(object({<br/> protected_branches = optional(bool, false)<br/> custom_branch_policies = optional(list(string), [])<br/> }))<br/> })), {})<br/> }))</pre> | `[]` | no |
| <a name="input_repositories"></a> [repositories](#input\_repositories) | Repositories and which teams may access them. See the repository submodule for the full object schema and validations. | <pre>list(object({<br/> name = string<br/> description = string<br/> visibility = optional(string, "private")<br/> readers = optional(list(string), [])<br/> writers = optional(list(string), [])<br/> admins = optional(list(string), [])<br/> restricted = optional(bool, false)<br/><br/> topics = optional(list(string), [])<br/> homepage_url = optional(string, null)<br/> has_issues = optional(bool, true)<br/> has_wiki = optional(bool, false)<br/> has_projects = optional(bool, false)<br/> has_downloads = optional(bool, false)<br/> is_template = optional(bool, false)<br/> gitignore_template = optional(string, null)<br/> license_template = optional(string, null)<br/> archived = optional(bool, false)<br/> archive_on_destroy = optional(bool, true)<br/> default_branch = optional(string, null)<br/> enable_pages = optional(bool, false)<br/> signed_commits = optional(bool, true)<br/><br/> allow_merge_commit = optional(bool, false)<br/> allow_squash_merge = optional(bool, true)<br/> allow_rebase_merge = optional(bool, false)<br/> allow_auto_merge = optional(bool, true)<br/> delete_branch_on_merge = optional(bool, true)<br/> merge_commit_message = optional(string, "PR_BODY")<br/> merge_commit_title = optional(string, "PR_TITLE")<br/><br/> template = optional(object({<br/> owner = string<br/> repository = string<br/> include_all_branches = optional(bool, false)<br/> }))<br/><br/> rulesets = optional(map(object({<br/> enforcement = optional(string, "active")<br/> target = optional(string, "branch")<br/> include_refs = optional(list(string), ["~ALL"])<br/> exclude_refs = optional(list(string), [])<br/> bypass_actors = optional(list(object({<br/> actor_type = string<br/> actor_id = optional(number, 0)<br/> team = optional(string)<br/> bypass_mode = optional(string, "always")<br/> })), [])<br/> rules = object({<br/> creation = optional(bool, false)<br/> update = optional(bool, false)<br/> deletion = optional(bool, false)<br/> non_fast_forward = optional(bool, false)<br/> required_signatures = optional(bool, false)<br/> required_linear_history = optional(bool, false)<br/> pull_request = optional(object({<br/> required_approving_review_count = optional(number, 0)<br/> require_code_owner_review = optional(bool, false)<br/> require_last_push_approval = optional(bool, false)<br/> dismiss_stale_reviews_on_push = optional(bool, false)<br/> required_review_thread_resolution = optional(bool, false)<br/> }))<br/> })<br/> })), {})<br/><br/> variables = optional(map(string), {})<br/> environments = optional(map(object({<br/> variables = optional(map(string), {})<br/> reviewers = optional(list(string), [])<br/> wait_timer = optional(number, 0)<br/> deployment_branch_policy = optional(object({<br/> protected_branches = optional(bool, false)<br/> custom_branch_policies = optional(list(string), [])<br/> }))<br/> })), {})<br/> }))</pre> | `[]` | no |
| <a name="input_secrets"></a> [secrets](#input\_secrets) | Decrypted secret values keyed by scope. Supplied already-decrypted by the caller; this module never performs decryption. | <pre>object({<br/> org = optional(map(string), {})<br/> repos = optional(map(object({<br/> actions = optional(map(string), {})<br/> environments = optional(map(map(string)), {})<br/> })), {})<br/> })</pre> | <pre>{<br/> "org": {},<br/> "repos": {}<br/>}</pre> | no |
| <a name="input_teams"></a> [teams](#input\_teams) | Teams and their membership. A team may hold predefined organization-level<br/>GitHub roles via `org_roles`. Repository access is granted per repository via<br/>readers/writers/admins, not through org roles. | <pre>list(object({<br/> name = string<br/> description = string<br/> members = optional(list(string), [])<br/> org_roles = optional(list(string), [])<br/> }))</pre> | `[]` | no |
| <a name="input_users"></a> [users](#input\_users) | Organization members. `fullname`/`email` are informational; membership is keyed on `username`. | <pre>list(object({<br/> username = string<br/> fullname = optional(string, "")<br/> email = optional(string, "")<br/> }))</pre> | `[]` | no |
Expand Down
2 changes: 1 addition & 1 deletion modules/repository/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -47,7 +47,7 @@ No modules.
| Name | Description | Type | Default | Required |
| ---- | ----------- | ---- | ------- | :------: |
| <a name="input_all_members_team_id"></a> [all\_members\_team\_id](#input\_all\_members\_team\_id) | ID of the all-members team that receives default read access on non-restricted repositories. null disables the default read grant. | `string` | `null` | no |
| <a name="input_repositories"></a> [repositories](#input\_repositories) | Repositories to manage and which teams may access them. `readers`, `writers`<br/>and `admins` reference team names from `var.teams`. A team listed at more than<br/>one level gets the highest permission (admin > write > read). Set<br/>`restricted = true` to withhold the default all-members read grant. | <pre>list(object({<br/> name = string<br/> description = string<br/> visibility = optional(string, "private")<br/> readers = optional(list(string), [])<br/> writers = optional(list(string), [])<br/> admins = optional(list(string), [])<br/> restricted = optional(bool, false)<br/><br/> topics = optional(list(string), [])<br/> homepage_url = optional(string, null)<br/> has_issues = optional(bool, true)<br/> has_wiki = optional(bool, false)<br/> has_projects = optional(bool, false)<br/> has_downloads = optional(bool, true)<br/> is_template = optional(bool, false)<br/> gitignore_template = optional(string, null)<br/> license_template = optional(string, null)<br/> archived = optional(bool, false)<br/> archive_on_destroy = optional(bool, false)<br/> default_branch = optional(string, null)<br/> enable_pages = optional(bool, false)<br/> signed_commits = optional(bool, true)<br/><br/> allow_merge_commit = optional(bool, false)<br/> allow_squash_merge = optional(bool, true)<br/> allow_rebase_merge = optional(bool, false)<br/> allow_auto_merge = optional(bool, true)<br/> delete_branch_on_merge = optional(bool, true)<br/> merge_commit_message = optional(string, "PR_BODY")<br/> merge_commit_title = optional(string, "PR_TITLE")<br/><br/> template = optional(object({<br/> owner = string<br/> repository = string<br/> include_all_branches = optional(bool, false)<br/> }))<br/><br/> rulesets = optional(map(object({<br/> enforcement = optional(string, "active")<br/> target = optional(string, "branch")<br/> include_refs = optional(list(string), ["~ALL"])<br/> exclude_refs = optional(list(string), [])<br/> bypass_actors = optional(list(object({<br/> actor_type = string<br/> actor_id = optional(number, 0)<br/> team = optional(string)<br/> bypass_mode = optional(string, "always")<br/> })), [])<br/> rules = object({<br/> creation = optional(bool, false)<br/> update = optional(bool, false)<br/> deletion = optional(bool, false)<br/> non_fast_forward = optional(bool, false)<br/> required_signatures = optional(bool, false)<br/> required_linear_history = optional(bool, false)<br/> pull_request = optional(object({<br/> required_approving_review_count = optional(number, 0)<br/> require_code_owner_review = optional(bool, false)<br/> require_last_push_approval = optional(bool, false)<br/> dismiss_stale_reviews_on_push = optional(bool, false)<br/> required_review_thread_resolution = optional(bool, false)<br/> }))<br/> })<br/> })), {})<br/><br/> variables = optional(map(string), {})<br/> environments = optional(map(object({<br/> variables = optional(map(string), {})<br/> reviewers = optional(list(string), [])<br/> wait_timer = optional(number, 0)<br/> deployment_branch_policy = optional(object({<br/> protected_branches = optional(bool, false)<br/> custom_branch_policies = optional(list(string), [])<br/> }))<br/> })), {})<br/> }))</pre> | `[]` | no |
| <a name="input_repositories"></a> [repositories](#input\_repositories) | Repositories to manage and which teams may access them. `readers`, `writers`<br/>and `admins` reference team names from `var.teams`. A team listed at more than<br/>one level gets the highest permission (admin > write > read). Set<br/>`restricted = true` to withhold the default all-members read grant. | <pre>list(object({<br/> name = string<br/> description = string<br/> visibility = optional(string, "private")<br/> readers = optional(list(string), [])<br/> writers = optional(list(string), [])<br/> admins = optional(list(string), [])<br/> restricted = optional(bool, false)<br/><br/> topics = optional(list(string), [])<br/> homepage_url = optional(string, null)<br/> has_issues = optional(bool, true)<br/> has_wiki = optional(bool, false)<br/> has_projects = optional(bool, false)<br/> has_downloads = optional(bool, false)<br/> is_template = optional(bool, false)<br/> gitignore_template = optional(string, null)<br/> license_template = optional(string, null)<br/> archived = optional(bool, false)<br/> archive_on_destroy = optional(bool, true)<br/> default_branch = optional(string, null)<br/> enable_pages = optional(bool, false)<br/> signed_commits = optional(bool, true)<br/><br/> allow_merge_commit = optional(bool, false)<br/> allow_squash_merge = optional(bool, true)<br/> allow_rebase_merge = optional(bool, false)<br/> allow_auto_merge = optional(bool, true)<br/> delete_branch_on_merge = optional(bool, true)<br/> merge_commit_message = optional(string, "PR_BODY")<br/> merge_commit_title = optional(string, "PR_TITLE")<br/><br/> template = optional(object({<br/> owner = string<br/> repository = string<br/> include_all_branches = optional(bool, false)<br/> }))<br/><br/> rulesets = optional(map(object({<br/> enforcement = optional(string, "active")<br/> target = optional(string, "branch")<br/> include_refs = optional(list(string), ["~ALL"])<br/> exclude_refs = optional(list(string), [])<br/> bypass_actors = optional(list(object({<br/> actor_type = string<br/> actor_id = optional(number, 0)<br/> team = optional(string)<br/> bypass_mode = optional(string, "always")<br/> })), [])<br/> rules = object({<br/> creation = optional(bool, false)<br/> update = optional(bool, false)<br/> deletion = optional(bool, false)<br/> non_fast_forward = optional(bool, false)<br/> required_signatures = optional(bool, false)<br/> required_linear_history = optional(bool, false)<br/> pull_request = optional(object({<br/> required_approving_review_count = optional(number, 0)<br/> require_code_owner_review = optional(bool, false)<br/> require_last_push_approval = optional(bool, false)<br/> dismiss_stale_reviews_on_push = optional(bool, false)<br/> required_review_thread_resolution = optional(bool, false)<br/> }))<br/> })<br/> })), {})<br/><br/> variables = optional(map(string), {})<br/> environments = optional(map(object({<br/> variables = optional(map(string), {})<br/> reviewers = optional(list(string), [])<br/> wait_timer = optional(number, 0)<br/> deployment_branch_policy = optional(object({<br/> protected_branches = optional(bool, false)<br/> custom_branch_policies = optional(list(string), [])<br/> }))<br/> })), {})<br/> }))</pre> | `[]` | no |
| <a name="input_repository_secrets"></a> [repository\_secrets](#input\_repository\_secrets) | Per-repository Actions and environment secret values (plaintext), keyed by<br/>repository name. Supplied already-decrypted by the caller; this module never<br/>performs decryption. | <pre>map(object({<br/> actions = optional(map(string), {})<br/> environments = optional(map(map(string)), {})<br/> }))</pre> | `{}` | no |
| <a name="input_teams"></a> [teams](#input\_teams) | Map of team name => { id, slug } for teams that may be granted repository access or set as environment reviewers. Supplied by the teams module. | <pre>map(object({<br/> id = string<br/> slug = string<br/> }))</pre> | `{}` | no |

Expand Down
4 changes: 2 additions & 2 deletions modules/repository/variables.tf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,12 +19,12 @@ variable "repositories" {
has_issues = optional(bool, true)
has_wiki = optional(bool, false)
has_projects = optional(bool, false)
has_downloads = optional(bool, true)
has_downloads = optional(bool, false)
is_template = optional(bool, false)
gitignore_template = optional(string, null)
license_template = optional(string, null)
archived = optional(bool, false)
archive_on_destroy = optional(bool, false)
archive_on_destroy = optional(bool, true)
default_branch = optional(string, null)
enable_pages = optional(bool, false)
signed_commits = optional(bool, true)
Expand Down
4 changes: 2 additions & 2 deletions variables.tf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -68,12 +68,12 @@ variable "repositories" {
has_issues = optional(bool, true)
has_wiki = optional(bool, false)
has_projects = optional(bool, false)
has_downloads = optional(bool, true)
has_downloads = optional(bool, false)
is_template = optional(bool, false)
gitignore_template = optional(string, null)
license_template = optional(string, null)
archived = optional(bool, false)
archive_on_destroy = optional(bool, false)
archive_on_destroy = optional(bool, true)
default_branch = optional(string, null)
enable_pages = optional(bool, false)
signed_commits = optional(bool, true)
Expand Down
Loading