projects.yml
author Geoff Brown <gbrown@mozilla.com>
Wed, 16 Feb 2022 17:46:30 +0000
changeset 1282 388e286a59bf134e053dd55264572dc9e36e2640
parent 1278 1a6872af1fc4380fd1b2e54fd169ca49a59e022d
child 1302 11ab06ebda491bb1a35849b51c120f9a0478094b
permissions -rw-r--r--
no bug - backout 3 most recent commits, restoring normal grants; r=releng-reviewers,aki Differential Revision: https://phabricator.services.mozilla.com/D138933

# This file contains configuration for each of the repositories related to Firefox CI.
#
# Repositories are also known as projects (mostly within the
# taskgraph-generation code) and as branches (although they are not Mercurial
# branches).
#
# Structure
# ---------
#
# Each project is keyed by its "alias", a short, slash-free name for the project.
#
# The value is an object describing the project with the following keys:
#
# - `repo` -- the https repository URL
# - `repo_type` -- `hg` or `git` so far (for later expansion)
# - `access` -- the name of the group with access to this repository; typically `scm_level_{1,2,3}`.
# - `level` -- the level access to this repository; typically `{1,2,3}`.
# - `trust_domain` -- separation within an access level of projects with different organizations
# - `parent_repo` -- for projects like comm where the repo is checked out within a "parent" repo
# - 'is_try' -- if present and true, this is a "try" repo, meaning that users typically push new heads
#               and expect customized task graphs; other repos follow a more typical model of each new
#               push adding more commits to the previous head.
# - `features` -- features that should be enabled for this project, as an object with boolean
#                 values, defaulting to false
#   - 'is-trunk' -- Branches containing 'landed' code destined for nightly builds. These branches have a shared index
#       that can be referenced by the tip revision on any push.
#   - `gecko-cron` -- tasks defined in `.cron.yml` can run for this project (gecko/comm repos only)
#   - `hg-push` -- decision tasks run for pushes to this hg project's repository
#   - `gecko-roles` -- this repository should have gecko-related roles assigned (for users, actions, cron, etc.)
#   - `mobile-roles` -- this repository should have https://github.com/mozilla-mobile roles assigned (for users, actions, cron, etc.)
#   - `xpi-roles` -- this repository should have xpi roles assigned (for users, actions, cron, etc.)
#   - `adhoc-roles` -- this repository should have adhoc roles assigned (for users, actions, cron, etc.)
#   - `beetmover-phase` -- this https://github.com/mozilla-mobile repository should have beetmover related scopes associated
#   - `beetmover-maven-phase` -- this https://github.com/mozilla-mobile repository should have beetmover related scopes associated
#   - `beetmover-maven-nightly-phase` -- this https://github.com/mozilla-mobile repository should have beetmover nightly production related scopes associated
#   - `mobile-firebase-testing` -- this https://github.com/mozilla-mobile repository has end-to-end testing involving devices hosted at Google's Firebase
#   - `mobile-bump-github` -- this https://github.com/mozilla-mobile repository gets bumped.
#   - `mobile-public-code-coverage` -- this https://github.com/mozilla-mobile repository has code coverage enabled on PRs
#   - `mobile-sign-phase` -- this https://github.com/mozilla-mobile repository should have sign related scopes associated
#   - `mobile-pushapk-phase` -- this https://github.com/mozilla-mobile repository should have pushapk related scopes associated
#   - `github-taskgraph` -- this github repository has started using taskgraph
#   - `github-publication` -- this github repository automates publication to github releases.
#   - `gecko-actions` -- this repository should have gecko-related action hooks defined
#   - 'scriptworker' -- this repository uses at least one scriptworker instance
#   - 'shipit' -- this repository interacts with a shipit instance
#   - 'taskgraph-cron' -- tasks defined in `.cron.yml` can run for this project (non-gecko/comm taskgraph repos only)
#   - `trust-domain-scopes` -- this repository should have generic scopes associated to it's trust domain
#   - `treeherder-reporting` -- this repository reports results to treeherder
#   - `autophone` -- this repository is allowed to use the Android farm called "Autophone"

---
ash:
  repo: https://hg.mozilla.org/projects/ash
  repo_type: hg
  access: scm_level_2
  trust_domain: gecko
  features:
    gecko-actions: true
    gecko-cron: true
    gecko-roles: true
    hg-push: true
    treeherder-reporting: true
    trust-domain-scopes: true
elm:
  repo: https://hg.mozilla.org/projects/elm
  repo_type: hg
  access: scm_level_2
  trust_domain: gecko
  features:
    gecko-actions: true
    gecko-cron: true
    gecko-roles: true
    hg-push: true
    treeherder-reporting: true
    trust-domain-scopes: true
mozilla-release:
  repo: https://hg.mozilla.org/releases/mozilla-release
  repo_type: hg
  access: scm_level_3
  trust_domain: gecko
  features:
    gecko-actions: true
    gecko-cron: true
    gecko-roles: true
    hg-push: true
    treeherder-reporting: true
    trust-domain-scopes: true
  cron:
    targets:
      - ship-geckoview
      - periodic-update
mozilla-esr78:
  repo: https://hg.mozilla.org/releases/mozilla-esr78
  repo_type: hg
  access: scm_level_3
  trust_domain: gecko
  features:
    gecko-actions: true
    gecko-cron: true
    gecko-roles: true
    hg-push: true
    treeherder-reporting: true
    trust-domain-scopes: true
  cron:
    targets:
      - periodic-update
mozilla-esr91:
  repo: https://hg.mozilla.org/releases/mozilla-esr91
  repo_type: hg
  access: scm_level_3
  trust_domain: gecko
  features:
    gecko-actions: true
    gecko-cron: true
    gecko-roles: true
    hg-push: true
    treeherder-reporting: true
    trust-domain-scopes: true
  cron:
    targets:
      - periodic-update
comm-esr78:
  repo: https://hg.mozilla.org/releases/comm-esr78
  repo_type: hg
  access: scm_level_3
  trust_domain: comm
  parent_repo: https://hg.mozilla.org/releases/mozilla-esr78
  features:
    gecko-actions: true
    gecko-cron: true
    gecko-roles: true
    hg-push: true
    treeherder-reporting: true
    trust-domain-scopes: true
comm-esr91:
  repo: https://hg.mozilla.org/releases/comm-esr91
  repo_type: hg
  access: scm_level_3
  trust_domain: comm
  parent_repo: https://hg.mozilla.org/releases/mozilla-esr91
  features:
    gecko-actions: true
    gecko-cron: true
    gecko-roles: true
    hg-push: true
    treeherder-reporting: true
    trust-domain-scopes: true
oak:
  repo: https://hg.mozilla.org/projects/oak
  repo_type: hg
  access: scm_level_3
  trust_domain: gecko
  features:
    gecko-actions: true
    gecko-cron: false
    gecko-roles: true
    hg-push: true
    treeherder-reporting: true
    trust-domain-scopes: true
pine:
  repo: https://hg.mozilla.org/projects/pine
  repo_type: hg
  access: scm_level_3
  trust_domain: gecko
  features:
    gecko-actions: true
    gecko-cron: true
    gecko-roles: true
    hg-push: true
    treeherder-reporting: true
    trust-domain-scopes: true
  cron:
    targets:
      - nightly-desktop
      - nightly-desktop-osx
      - nightly-desktop-win64
      - nightly-pinebuild
mozilla-beta:
  repo: https://hg.mozilla.org/releases/mozilla-beta
  repo_type: hg
  access: scm_level_3
  trust_domain: gecko
  features:
    gecko-actions: true
    gecko-cron: true
    gecko-roles: true
    hg-push: true
    treeherder-reporting: true
    trust-domain-scopes: true
  cron:
    targets:
      - ship-geckoview
      - l10n-bumper
      - daily-releases
      - periodic-update
comm-beta:
  repo: https://hg.mozilla.org/releases/comm-beta
  repo_type: hg
  access: scm_level_3
  trust_domain: comm
  parent_repo: https://hg.mozilla.org/releases/mozilla-beta
  features:
    gecko-actions: true
    gecko-cron: true
    gecko-roles: true
    hg-push: true
    treeherder-reporting: true
    trust-domain-scopes: true
mozilla-central:
  repo: https://hg.mozilla.org/mozilla-central
  repo_type: hg
  access: scm_level_3
  trust_domain: gecko
  features:
    gecko-actions: true
    gecko-cron: true
    gecko-roles: true
    hg-push: true
    is-trunk: true
    treeherder-reporting: true
    trust-domain-scopes: true
  cron:
    targets:
      - nightly-desktop
      - nightly-desktop-osx
      - nightly-desktop-win32
      - nightly-desktop-win64
      - nightly-desktop-win64-aarch64
      - periodic-update
      - ship-geckoview
      - l10n-bumper
      - l10n-cross-channel
      - target: scriptworker-canary
        allow-input: true
comm-central:
  repo: https://hg.mozilla.org/comm-central
  repo_type: hg
  access: scm_level_3
  trust_domain: comm
  parent_repo: https://hg.mozilla.org/mozilla-central
  features:
    gecko-actions: true
    gecko-cron: true
    gecko-roles: true
    hg-push: true
    is-trunk: true
    treeherder-reporting: true
    trust-domain-scopes: true
  cron:
    targets: [nightly-desktop]
cedar:
  repo: https://hg.mozilla.org/projects/cedar
  repo_type: hg
  access: scm_level_3
  trust_domain: gecko
  features:
    gecko-actions: true
    gecko-cron: true
    gecko-roles: true
    hg-push: true
    treeherder-reporting: true
    trust-domain-scopes: true
  cron:
    targets:
      - nightly-desktop
      - nightly-desktop-osx
      - nightly-desktop-win64
birch:
  repo: https://hg.mozilla.org/projects/birch
  repo_type: hg
  access: scm_level_3
  trust_domain: gecko
  features:
    gecko-actions: true
    gecko-cron: true
    gecko-roles: true
    hg-push: true
    treeherder-reporting: true
    trust-domain-scopes: true
  cron:
    targets: [nightly-desktop]
cypress:
  repo: https://hg.mozilla.org/projects/cypress
  repo_type: hg
  access: scm_level_2
  trust_domain: comm
  features: {}
ux:
  repo: https://hg.mozilla.org/projects/ux
  repo_type: hg
  access: scm_level_3
  trust_domain: gecko
  features: {}
graphics:
  repo: https://hg.mozilla.org/projects/graphics
  repo_type: hg
  access: scm_level_2
  trust_domain: gecko
  features: {}
try:
  repo: https://hg.mozilla.org/try
  repo_type: hg
  access: scm_level_1
  trust_domain: gecko
  is_try: true
  features:
    gecko-actions: true
    gecko-cron: false
    gecko-roles: true
    hg-push: true
    treeherder-reporting: true
    trust-domain-scopes: true
try-comm-central:
  repo: https://hg.mozilla.org/try-comm-central
  repo_type: hg
  access: scm_level_1
  trust_domain: comm
  is_try: true
  features:
    gecko-actions: true
    gecko-cron: false
    gecko-roles: true
    hg-push: true
    treeherder-reporting: true
    trust-domain-scopes: true
larch:
  repo: https://hg.mozilla.org/projects/larch
  repo_type: hg
  access: scm_level_2
  trust_domain: gecko
  features:
    gecko-actions: true
    gecko-cron: false
    gecko-roles: true
    hg-push: true
    treeherder-reporting: true
    trust-domain-scopes: true
maple:
  repo: https://hg.mozilla.org/projects/maple
  repo_type: hg
  access: scm_level_3
  trust_domain: gecko
  features:
    gecko-actions: true
    gecko-cron: true
    gecko-roles: true
    hg-push: true
    treeherder-reporting: true
    trust-domain-scopes: true
  cron:
    targets:
      - nightly-desktop
      - nightly-pinebuild
jamun:
  repo: https://hg.mozilla.org/projects/jamun
  repo_type: hg
  access: scm_level_2
  trust_domain: comm
  features:
    gecko-actions: true
    gecko-cron: false
    gecko-roles: true
    hg-push: true
    treeherder-reporting: true
    trust-domain-scopes: true
autoland:
  repo: https://hg.mozilla.org/integration/autoland
  repo_type: hg
  access: scm_level_3
  trust_domain: gecko
  features:
    gecko-actions: true
    gecko-cron: true
    gecko-roles: true
    hg-push: true
    is-trunk: true
    treeherder-reporting: true
    trust-domain-scopes: true
  cron:
    targets:
      - perftest-on-autoland
stylo:
  repo: https://hg.mozilla.org/incubator/stylo
  repo_type: hg
  access: scm_level_2
  trust_domain: gecko
  features: {}
stylo-try:
  repo: https://hg.mozilla.org/incubator/stylo-try
  repo_type: hg
  access: scm_level_1
  trust_domain: gecko
  is_try: true
  features: {}
holly:
  repo: https://hg.mozilla.org/projects/holly
  repo_type: hg
  access: scm_level_2
  trust_domain: gecko
  features:
    gecko-actions: true
    gecko-cron: false
    gecko-roles: true
    hg-push: true
    treeherder-reporting: true
    trust-domain-scopes: true


kaios:
  repo: https://hg.mozilla.org/projects/kaios
  repo_type: hg
  access: scm_kaios
  trust_domain: kaios
  features:
    gecko-actions: true
    gecko-cron: false
    gecko-roles: true
    hg-push: true
    treeherder-reporting: true
    trust-domain-scopes: true

kaios-try:
  repo: https://hg.mozilla.org/projects/kaios-try
  repo_type: hg
  access: scm_level_1
  trust_domain: kaios
  is_try: true
  features:
    gecko-actions: true
    gecko-cron: false
    gecko-roles: true
    hg-push: true
    treeherder-reporting: true
    trust-domain-scopes: true


# non-gecko repositories

nss:
  repo: https://hg.mozilla.org/projects/nss
  repo_type: hg
  access: scm_nss
  trust_domain: nss
  features:
    hg-push: true
    trust-domain-scopes: true
    treeherder-reporting: true

nss-try:
  repo: https://hg.mozilla.org/projects/nss-try
  repo_type: hg
  access: scm_level_1
  trust_domain: nss
  is_try: true
  features:
    hg-push: true
    trust-domain-scopes: true
    treeherder-reporting: true

ci-configuration:
  repo: https://hg.mozilla.org/ci/ci-configuration
  repo_type: hg
  access: scm_firefoxci
  trust_domain: ci
  features:
    hg-push: true
    taskgraph-actions: true
    trust-domain-scopes: true
    treeherder-reporting: true

ci-configuration-try:
  repo: https://hg.mozilla.org/ci/ci-configuration-try
  repo_type: hg
  access: scm_level_1
  trust_domain: ci
  is_try: true
  features:
    hg-push: true
    taskgraph-actions: true
    trust-domain-scopes: true
    treeherder-reporting: true

taskgraph:
  repo: https://hg.mozilla.org/ci/taskgraph
  repo_type: hg
  access: scm_level_3
  trust_domain: taskgraph
  features:
    hg-push: true
    taskgraph-actions: true
    trust-domain-scopes: true
    treeherder-reporting: true

taskgraph-try:
  repo: https://hg.mozilla.org/ci/taskgraph-try
  repo_type: hg
  access: scm_level_1
  trust_domain: taskgraph
  is_try: true
  features:
    hg-push: true
    taskgraph-actions: true
    trust-domain-scopes: true
    treeherder-reporting: true

version-control-tools:
  repo: https://hg.mozilla.org/hgcustom/version-control-tools
  repo_type: hg
  access: scm_versioncontrol
  features:
    hg-push: true

# mobile Github repositories
android-components:
  repo: https://github.com/mozilla-mobile/android-components
  trust_domain: mobile
  trust_project: android-components
  repo_type: git
  default_branch: main
  level: 3
  features:
    beetmover-maven-phase: true
    beetmover-maven-nightly-phase: true
    github-taskgraph: true
    mobile-roles: true
    mobile-firebase-testing: true
    mobile-public-code-coverage: true
    scriptworker: true
    shipit: true
    taskgraph-actions: true
    taskgraph-cron: true
    treeherder-reporting: true
    trust-domain-scopes: true
  cron:
    targets: [nightly]

staging-android-components:
  repo: https://github.com/mozilla-releng/staging-android-components
  trust_domain: mobile
  trust_project: android-components
  repo_type: git
  default_branch: main
  level: 1
  features:
    beetmover-maven-phase: true
    beetmover-maven-nightly-phase: true
    github-taskgraph: true
    mobile-roles: true
    mobile-firebase-testing: true
    mobile-public-code-coverage: true
    scriptworker: true
    shipit: true
    taskgraph-actions: true
    taskgraph-cron: true
    treeherder-reporting: true
    trust-domain-scopes: true
  cron:
    targets: []

reference-browser:
  repo: https://github.com/mozilla-mobile/reference-browser
  trust_domain: mobile
  trust_project: reference-browser
  repo_type: git
  default_branch: master
  level: 3
  features:
    autophone: true
    github-taskgraph: true
    mobile-roles: true
    mobile-bump-github: true
    mobile-firebase-testing: true
    mobile-sign-phase: true
    mobile-pushapk-phase: true
    scriptworker: true
    taskgraph-actions: true
    taskgraph-cron: true
    treeherder-reporting: true
    trust-domain-scopes: true
  cron:
    targets:
      # Cannot name the following entry "bump-android-components" because the full hookId is larger
      # than 64 characters. For more details see: https://phabricator.services.mozilla.com/D67443
      - bump-android-comp
      - nightly

fenix:
  repo: https://github.com/mozilla-mobile/fenix
  trust_domain: mobile
  trust_project: fenix
  repo_type: git
  default_branch: main
  level: 3
  features:
    autophone: true
    beetmover-phase: true
    github-taskgraph: true
    github-publication: true
    mobile-roles: true
    mobile-bump-github: true
    mobile-firebase-testing: true
    mobile-public-code-coverage: true
    mobile-pushapk-phase: true
    mobile-sign-phase: true
    scriptworker: true
    shipit: true
    taskgraph-actions: true
    taskgraph-cron: true
    treeherder-reporting: true
    trust-domain-scopes: true
  cron:
    targets:
      - bump-android-components
      - nightly
      - screenshots

staging-fenix:
  repo: https://github.com/mozilla-releng/staging-fenix
  trust_domain: mobile
  trust_project: fenix
  repo_type: git
  default_branch: main
  level: 1
  features:
    autophone: true
    beetmover-phase: true
    github-publication: true
    github-taskgraph: true
    mobile-roles: true
    mobile-firebase-testing: true
    mobile-public-code-coverage: true
    mobile-pushapk-phase: true
    mobile-sign-phase: true
    scriptworker: true
    shipit: true
    taskgraph-actions: true
    taskgraph-cron: true
    treeherder-reporting: true
    trust-domain-scopes: true
  cron:
    targets: [nightly]
    hooks_owner: releng+staging-fenix@mozilla.com
    notify_emails: []

focus-android:
  repo: https://github.com/mozilla-mobile/focus-android
  trust_domain: mobile
  trust_project: focus-android
  repo_type: git
  default_branch: main
  level: 3
  features:
    beetmover-phase: true
    github-taskgraph: true
    github-publication: true
    mobile-roles: true
    mobile-bump-github: true
    mobile-firebase-testing: true
    mobile-public-code-coverage: true
    mobile-pushapk-phase: true
    mobile-sign-phase: true
    scriptworker: true
    shipit: true
    taskgraph-actions: true
    taskgraph-cron: true
    treeherder-reporting: true
    trust-domain-scopes: true
  cron:
    targets:
      - nightly

staging-focus-android:
  repo: https://github.com/mozilla-releng/staging-focus-android
  trust_domain: mobile
  trust_project: focus-android
  repo_type: git
  default_branch: main
  level: 1
  features:
    github-publication: true
    github-taskgraph: true
    mobile-roles: true
    mobile-firebase-testing: true
    mobile-public-code-coverage: true
    mobile-pushapk-phase: true
    mobile-sign-phase: true
    scriptworker: true
    shipit: true
    taskgraph-actions: true
    taskgraph-cron: true
    treeherder-reporting: true
    taskgraph-actions: true
  cron:
    targets: [nightly]
    hooks_owner: releng+staging-focus-android@mozilla.com
    notify_emails: []


firefox-ios:
  repo: https://github.com/mozilla-mobile/firefox-ios
  trust_domain: mobile
  trust_project: firefox-ios
  repo_type: git
  level: 3
  features:
    github-taskgraph: true
    mobile-roles: true
    taskgraph-actions: true
    taskgraph-cron: true
    treeherder-reporting: true
    trust-domain-scopes: true
  cron:
    targets: [l10-screenshots]

focus-ios:
  repo: https://github.com/mozilla-mobile/focus-ios
  trust_domain: mobile
  trust_project: focus-ios
  repo_type: git
  level: 3
  features:
    github-taskgraph: true
    mobile-roles: true
    taskgraph-actions: true
    taskgraph-cron: true
    treeherder-reporting: true
    trust-domain-scopes: true
  cron:
    targets: [l10-screenshots]

firefox-tv:
  repo: https://github.com/mozilla-mobile/firefox-tv
  trust_domain: mobile
  trust_project: firefox-tv
  repo_type: git
  default_branch: master
  level: 3
  features:
    github-taskgraph: true
    mobile-roles: true
    mobile-sign-phase: true
    mobile-pushapk-phase: true
    scriptworker: true

# mozilla's Github repositories
application-services:
  repo: https://github.com/mozilla/application-services/
  repo_type: git
  level: 3
  trust_domain: app-services
  trust_project: app-services
  features:
    # TODO Bug 1601687 - Enable `beetmover-maven-phase` once scriptworker scopes are predictible
    # across projects.
    github-taskgraph: true
    scriptworker: true
    taskgraph-cron: true
    taskgraph-actions: true

glean:
  repo: https://github.com/mozilla/glean/
  repo_type: git
  level: 3
  trust_domain: glean
  trust_project: glean
  default_branch: main
  features:
    # TODO Bug 1601687 - Enable `beetmover-maven-phase` once scriptworker scopes are predictible
    # across projects.
    github-taskgraph: true
    scriptworker: true
    taskgraph-actions: true

# mozilla-releng Github repositories
k8s-autoscale:
  repo: https://github.com/mozilla-releng/k8s-autoscale
  repo_type: git
  default_branch: master
  trust_domain: releng
  level: 3

mapper:
  repo: https://github.com/mozilla-releng/mapper
  repo_type: git
  default_branch: master
  trust_domain: releng
  level: 3

product-details:
  repo: https://github.com/mozilla-releng/product-details
  repo_type: git
  trust_domain: releng
  level: 3

shipit:
  repo: https://github.com/mozilla-releng/shipit
  repo_type: git
  features:
    github-taskgraph: true
    trust-domain-scopes: true
  trust_domain: releng
  level: 3

tooltool:
  repo: https://github.com/mozilla-releng/tooltool
  repo_type: git
  default_branch: master
  trust_domain: releng
  level: 3

treestatus:
  repo: https://github.com/mozilla-releng/treestatus
  repo_type: git
  default_branch: master
  trust_domain: releng
  level: 3

balrog:
  repo: https://github.com/mozilla-releng/balrog
  repo_type: git
  trust_domain: releng
  level: 3

taskhuddler:
  repo: https://github.com/mozilla-releng/taskhuddler
  repo_type: git
  default_branch: master
  trust_domain: releng
  level: 3

scriptworker:
  repo: https://github.com/mozilla-releng/scriptworker
  repo_type: git
  default_branch: master
  trust_domain: releng
  level: 3

# mozilla-releng Github repositories
build-puppet:
  repo: https://github.com/mozilla-releng/build-puppet
  repo_type: git
  default_branch: master
  trust_domain: releng
  level: 1

occ:
  repo: https://github.com/mozilla-releng/OpenCloudConfig
  repo_type: git
  default_branch: master
  trust_domain: releng
  level: 3

cloud-image-builder:
  repo: https://github.com/mozilla-platform-ops/cloud-image-builder
  repo_type: git
  default_branch: main
  trust_domain: relops
  level: 3

cloud-image-deploy:
  repo: https://github.com/mozilla-platform-ops/cloud-image-deploy
  repo_type: git
  default_branch: main
  trust_domain: relops
  level: 3

# L10n repositories
android-l10n-tooling:
  repo: https://github.com/mozilla-l10n/android-l10n-tooling
  repo_type: git
  default_branch: master
  level: 3
  trust_domain: l10n
  features:
    github-taskgraph: true
    taskgraph-cron: true
    taskgraph-actions: true
  cron:
    targets:
      - target: update-l10n
        bindings:
          - exchange: exchange/taskcluster-github/v1/push
            routing_key_pattern: primary.mozilla-mobile.fenix
          - exchange: exchange/taskcluster-github/v1/push
            routing_key_pattern: primary.mozilla-mobile.android-components
          - exchange: exchange/taskcluster-github/v1/push
            routing_key_pattern: primary.mozilla-mobile.firefox-tv
          - exchange: exchange/taskcluster-github/v1/push
            routing_key_pattern: primary.mozilla-lockwise.lockwise-android
      - target: update-projects
        bindings: []

elmo-taskcluster:
  repo: https://github.com/mozilla-services/elmo-taskcluster
  repo_type: git
  default_branch: master
  level: 3
  trust_domain: l10n

# Mozilla VPN
mozilla-vpn-client:
  repo: https://github.com/mozilla-mobile/mozilla-vpn-client
  repo_type: git
  default_branch: main
  level: 3
  trust_domain: mozillavpn
  trust_project: mozillavpn
  features:
    github-taskgraph: true
    taskgraph-actions: true
    # Enable this after .taskcluster.yml and .cron.yml exist in the repo
    #taskgraph-cron: true
    treeherder-reporting: true
    trust-domain-scopes: true

# Bug 1520281: Add user repositories for experimenting with taskgraph and mobile
# repo:github.com/mozilla-extensions/* is configured in grants.yml, under the xpi-roles feature
xpi-manifest:
  repo: https://github.com/mozilla-extensions/xpi-manifest
  repo_type: git
  default_branch: main
  trust_domain: xpi
  level: 3
  features:
    trust-domain-scopes: true
    xpi-roles: true
    taskgraph-actions: true
    taskgraph-cron: true

rally-core-addon:
  repo: https://github.com/mozilla-rally/rally-core-addon
  repo_type: git
  default_branch: master
  trust_domain: xpi
  level: 1
  features:
    trust-domain-scopes: true
    taskgraph-actions: true
    xpi-roles: true

staging-xpi-manifest:
  repo: https://github.com/mozilla-releng/staging-xpi-manifest
  repo_type: git
  default_branch: main
  trust_domain: xpi
  level: 1
  features:
    trust-domain-scopes: true
    xpi-roles: true
    taskgraph-actions: true
    taskgraph-cron: true

staging-xpi-public:
  repo: https://github.com/mozilla-releng/staging-xpi-public
  repo_type: git
  default_branch: master
  trust_domain: xpi
  level: 1
  features:
    trust-domain-scopes: true
    xpi-roles: true

staging-xpi-private:
  repo: https://github.com/mozilla-releng/staging-xpi-private
  repo_type: git
  default_branch: master
  trust_domain: xpi
  level: 1
  features:
    trust-domain-scopes: true
    xpi-roles: true

# Bug 1594621: Create an adhoc signing repository
staging-adhoc-signing:
  repo: https://github.com/mozilla-releng/staging-adhoc-signing
  repo_type: git
  default_branch: master
  trust_domain: adhoc
  level: 1
  features:
    trust-domain-scopes: true
    adhoc-roles: true
    taskgraph-actions: true
    github-taskgraph: true

adhoc-signing:
  repo: https://github.com/mozilla-releng/adhoc-signing
  repo_type: git
  default_branch: master
  trust_domain: adhoc
  level: 3
  features:
    trust-domain-scopes: true
    adhoc-roles: true
    taskgraph-actions: true
    github-taskgraph: true

# Bug 1614312: Add code-analysis project for code-review & code-coverage
code-review:
  repo: https://github.com/mozilla/code-review
  repo_type: git
  default_branch: master
  trust_domain: code-analysis
  level: 3
  features:
    trust-domain-scopes: true

# Bug 1597598: Add taskgraph support to scriptworker-scripts
scriptworker-scripts:
  repo: https://github.com/mozilla-releng/scriptworker-scripts
  repo_type: git
  default_branch: master
  trust_domain: scriptworker
  level: 3
  features:
    trust-domain-scopes: true
    taskgraph-actions: true
    github-taskgraph: true

# Bug 1617635: Support building & indexing code-coverage docker image
code-coverage:
  repo: https://github.com/mozilla/code-coverage
  repo_type: git
  default_branch: master
  trust_domain: code-analysis
  level: 3
  features:
    trust-domain-scopes: true