[project]
	description = Access inherited by all other projects.
[receive]
	requireContributorAgreement = false
	requireSignedOffBy = false
	requireChangeId = true
	enableSignedPush = false
[submit]
	mergeContent = true
	action = cherry pick
[access "refs/*"]
	read = group Anonymous Users
	read = group mdb/cuelang-repo
	forgeAuthor = group mdb/copybara-git-writers
	forgeCommitter = group mdb/copybara-git-writers
	push = group mdb/copybara-git-writers
	revert = group Registered Users
[access "refs/for/*"]
	addPatchSet = group Registered Users
[access "refs/for/refs/*"]
	push = group Registered Users
	pushMerge = group Registered Users
[access "refs/heads/*"]
	create = group Admins
	create = group Project Owners
	create = group mdb/cuelang-repo
	editTopicName = +force group Admins
	editTopicName = +force group Project Owners
	editTopicName = +force group mdb/cuelang-repo
	forgeAuthor = group Registered Users
	forgeAuthor = group mdb/copybara-git-writers
	forgeCommitter = group Admins
	forgeCommitter = group Project Owners
	forgeCommitter = group mdb/copybara-git-writers
	forgeCommitter = group mdb/cuelang-repo
	label-Code-Review = -2..+2 group Admins
	label-Code-Review = -2..+2 group Approvers
	label-Code-Review = -2..+2 group Project Owners
	label-Code-Review = -2..+2 group Reviewers
	label-Code-Review = -2..+2 group mdb/cuelang-repo
	label-Code-Review = -1..+1 group Registered Users
	push = group Admins
	push = group Project Owners
	push = group autoupdate-service-accounts
	push = group autoupdate-vigil-service-accounts
	push = group mdb/copybara-git-writers
	push = group mdb/cuelang-repo
	submit = group Admins
	submit = group Approvers
	submit = group Project Owners
	submit = group autoupdate-service-accounts
	submit = group autoupdate-vigil-service-accounts
	submit = group mdb/cuelang-repo
	label-SLSA-Policy-Verified = -1..+1 group SLSA Policy Verification Service Accounts
	Read = group SLSA Policy Verification Service Accounts
	Read = group autoupdate-onboarding-service-accounts
	Read = group autoupdate-service-accounts
	Read = group autoupdate-vigil-service-accounts
[access "refs/meta/config"]
	exclusiveGroupPermissions = read
	create = group Admins
	create = group Project Owners
	create = group mdb/cuelang-repo
	label-Code-Review = -2..+2 group Approvers
	label-Code-Review = -2..+2 group Project Owners
	label-Code-Review = -2..+2 group mdb/cuelang-repo
	push = group Admins
	push = group Approvers
	push = group Project Owners
	push = group mdb/cuelang-repo
	read = group Admins
	read = group Project Owners
	read = group mdb/cuelang-repo
	submit = group Admins
	submit = group Approvers
	submit = group Project Owners
	submit = group mdb/cuelang-repo
[access "refs/tags/*"]
	create = group Admins
	create = group Project Owners
	create = group mdb/cuelang-repo
	createSignedTag = group Admins
	createSignedTag = group Project Owners
	createSignedTag = group mdb/cuelang-repo
	createTag = group Admins
	createTag = group Project Owners
	createTag = group mdb/cuelang-repo
	forgeCommitter = group Admins
	forgeCommitter = group Project Owners
	forgeCommitter = group mdb/cuelang-repo
[label "Code-Review"]
	function = NoBlock
	defaultValue = 0
	value = -2 This shall not be merged
	value = -1 I would prefer this is not merged as is
	value = 0 No score
	value = +1 Looks good to me, but someone else must approve
	value = +2 Looks good to me, approved
	copyCondition = changekind:NO_CHANGE OR changekind:TRIVIAL_REBASE OR is:MIN
[capability]
	administrateServer = group Admins
	administrateServer = group mdb/cuelang-repo
	gerrit-google-manageUsersGet = group mdb/copybara-git-readers
	viewAllAccounts = group autoupdate-onboarding-service-accounts
	viewAllAccounts = group autoupdate-service-accounts
	viewAllAccounts = group autoupdate-vigil-service-accounts
	viewAllAccounts = group mdb/copybara-git-readers
[submit-requirement "Code-Review"]
	submittableIf = label:Code-Review=MAX AND -label:Code-Review=MIN
	canOverrideInChildProjects = true