From d63c3edcaeeb7c9d260334ce4a2e7de41c7fa0b1 Mon Sep 17 00:00:00 2001
From: Dafydd Jones <dafydd@techneg.it>
Date: Sat, 25 Jul 2026 16:53:25 +0100
Subject: [PATCH] fix(admin-safe-settings): move rulesets into suborg so as not
 to try to modify organization rulesets

---
 admin-safe-settings/settings.yml         | 13 -------------
 admin-safe-settings/suborgs/rulesets.yml | 18 ++++++++++++++++++
 2 files changed, 18 insertions(+), 13 deletions(-)
 create mode 100644 admin-safe-settings/suborgs/rulesets.yml

diff --git a/admin-safe-settings/settings.yml b/admin-safe-settings/settings.yml
index 6926104..0dd798d 100644
--- a/admin-safe-settings/settings.yml
+++ b/admin-safe-settings/settings.yml
@@ -1,16 +1,3 @@
 repository:
   topics:
     - safe-settings
-
-rulesets:
-  - name: Prevent destruction of the default branch
-    target: branch
-    enforcement: active
-    conditions:
-      ref_name:
-        include:
-          - ~DEFAULT_BRANCH
-        exclude: []
-    rules:
-      - type: deletion
-      - type: non_fast_forward
diff --git a/admin-safe-settings/suborgs/rulesets.yml b/admin-safe-settings/suborgs/rulesets.yml
new file mode 100644
index 0000000..8d4e406
--- /dev/null
+++ b/admin-safe-settings/suborgs/rulesets.yml
@@ -0,0 +1,18 @@
+# See https://github.com/github/safe-settings/blob/main-enterprise/docs/sample-settings/suborg.yml
+# for example layout
+
+suborgrepos:
+  - '*'
+
+rulesets:
+  - name: Prevent destruction of the default branch
+    target: branch
+    enforcement: active
+    conditions:
+      ref_name:
+        include:
+          - ~DEFAULT_BRANCH
+        exclude: []
+    rules:
+      - type: deletion
+      - type: non_fast_forward