Help us improve
Share bugs, ideas, or general feedback.
From github-it-admin
Full CRUD over the GitHub branch protection ruleset (gh api repos/.../rulesets/<id>). Use when adding/removing required status checks, adjusting strict_required_status_checks_policy, or modifying any other ruleset parameter. The chassis ruleset id is 16440994 (from setup-branch-protection.ts).
npx claudepluginhub subagentceo/knowledge-engineering --plugin github-it-adminHow this skill is triggered — by the user, by Claude, or both
Slash command
/github-it-admin:branch-protection-crudThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
- Adding a new required status check (e.g., promoting a `verify:*` step to gate merges).
Guides technical evaluation of code review feedback: read fully, restate for understanding, verify against codebase, respond with reasoning or pushback before implementing.
Share bugs, ideas, or general feedback.
verify:* step to gate merges).strict_required_status_checks_policy (this was the OAUTO12 / ORC7 root cause).gh auth status returns admin:org scope on alex-jadecli.scripts/setup-branch-protection.ts (this skill wraps it for CRUD, not replaces).Current chassis ruleset: id 16440994 on subagentceo/knowledge-engineering. Source-of-truth is scripts/setup-branch-protection.ts.
npm run setup:branch-protection
Already exists; this skill just documents that it's the canonical CREATE path.
gh api repos/${user_config.gh_org}/${user_config.gh_repo}/rulesets/16440994 | jq
Returns the full ruleset including required_status_checks, strict_required_status_checks_policy, target branches, etc.
npx tsx "${CLAUDE_PLUGIN_ROOT}/skills/branch-protection-crud/scripts/update-required-checks.ts" \
--add "npm run new-check" \
--remove "stale-check"
The script:
GETs the current ruleset.required_status_checks array (idempotent — add-already-present is a no-op).PUTs the updated ruleset back.gh api -X DELETE repos/${user_config.gh_org}/${user_config.gh_repo}/rulesets/16440994
Skill provides this verb for documentation, but does not script it — deleting a branch ruleset is a high-blast-radius operation that opens the main branch to direct pushes. Operator must run the raw gh api command intentionally.
| ID | Outcome | Verified by |
|---|---|---|
| OIT2-bp-1 | Wraps existing setup:branch-protection for CREATE (no duplication) | this SKILL.md references the script |
| OIT2-bp-2 | UPDATE script is idempotent and does read-after-write | unit test |
| OIT2-bp-3 | DELETE intentionally has no script (high blast radius) | SKILL.md states this explicitly |
@cite scripts/setup-branch-protection.ts @cite docs/decisions/2026-05-17-auto-merge-recovery.md (OAUTO12 — strict_required_status_checks_policy interaction) @cite https://docs.github.com/en/rest/repos/rules