MIPI-Alliance org defaults (.github)

This repository provides organization-wide default community-health files and the reusable governance checks for MIPI software projects, per the MIPI Policy and Procedures for Software Development Projects.

Any repository in the org that does not define its own version of these files inherits the defaults here:

• SECURITY.md — vulnerability reporting (Policy Annex D.6)
• CODE_OF_CONDUCT.md
• CONTRIBUTING.md (license-neutral)
• .github/PULL_REQUEST_TEMPLATE.md, .github/ISSUE_TEMPLATE/*

Reusable workflows

• .github/workflows/config-check.yml — validates a repo against its declared identity in .mipi/project.yml (license ↔ CLA ↔ visibility), fail-closed. License identity is verified by normalized-content hash against scripts/approved-license-hashes.json, so no license text is stored here.

Call it from a project repo with:

jobs:
  config-check:
    uses: MIPI-Alliance/.github/.github/workflows/config-check.yml@main

See the full design in the project tooling spec.