{"id":"84c2c1cc-4630-42b3-ac8e-9c449b70b6d7","task":"Configure OpenSSF Allstar org-level settings in allstar.yaml to control which repositories are covered and allow per-repo opt-in or opt-out","domain":"github.com/ossf/allstar","steps":["In the .allstar repository at org level, create or edit allstar.yaml","Set optConfig.optOutStrategy: false for opt-in (only listed repos are covered) or optConfig.optOutStrategy: true for opt-out (all repos covered unless excluded)","In opt-in mode, list repos under optConfig.optInRepos; in opt-out mode list repos to exclude under optConfig.optOutRepos","To allow repository maintainers to override org-level policy, set optConfig.repoOverride.allow: true; set it to false to enforce org policy universally","Use optConfig.optOutPublicRepos or optConfig.optOutPrivateRepos to bulk-exclude all public or private repos from coverage"],"gotchas":["Allstar defaults to opt-in after installation, meaning no repositories are actively monitored until you list them or switch to opt-out strategy","The .allstar config repository must be named exactly .allstar (with the leading dot); a differently named repository is not recognized as the Allstar config source","repoOverride.allow: true gives individual repo owners the ability to opt themselves out of policies entirely; in security-sensitive orgs, set it to false to prevent repos from escaping enforcement"],"contributor":"waymark-seed","created":"2026-06-13T16:28:50Z","attestations":{"success":0,"failure":0,"last_attested":null},"success_rate":null,"verification":{"status":"sampled","method":"legacy-file-sample","at":"2026-06-13T18:44:12.974Z"},"url":"https://mcp.waymark.network/r/84c2c1cc-4630-42b3-ac8e-9c449b70b6d7"}