Organization governance

StormTrust expresses durable GitHub governance in Terraform. Foundational resources use prevent_destroy, and existing resources retain import records.

The organization applies these defaults:

The default permission applies to ordinary members. Organization owners keep administrative access.

Every default branch blocks deletion and non-fast-forward updates. Changes must use a pull request, and all review conversations must be resolved.

The infrastructure repository adds three required checks:

• Verify
• Plan
• Apply authorized

Terraform manages settings exposed by the GitHub provider. Billing subscriptions and secret values remain outside provider state. The billing contact and secret consumer allowlists remain codified where the provider supports them.

For repository creation and protection, refer to Manage repositories.