Restrict Branch Merge and Automatically Add PR labels to Pull Requests

.github/ISSUE_TEMPLATE/FEATURE_REQUEST.md

@@ -6,6 +6,7 @@ labels: 'enhancement'
 
 ---
 
+
 ## 🚀 Feature Request
 
 _A clear and concise description of the feature or improvement you are suggesting._

.github/ISSUE_TEMPLATE/config.yml

@@ -1,6 +1 @@
 blank_issues_enabled: false
-
-contact_links:
-  - name: Report Security Vulnerability
-    url: mailto:srikar@finbox.in
-    about: Please report security vulnerabilities here.

.github/PULL_REQUEST_TEMPLATE.md

@@ -41,7 +41,6 @@ Share the testing strategy used to ensure the changes work as expected.
 - [ ] Tests for the changes have been added
 - [ ] CHANGELOG Updated
 - [ ] Version number updated
-- [ ] Added PR Labels
 - [ ] Build is successful
 - [ ] Changes do not negatively impact performance
 - [ ] New code follows Google Java/Kotlin Style guidelines

.github/labeler.yml

@@ -0,0 +1,7 @@
+documentation:
+  - changed-files:
+      - any-glob-to-any-file: ['.github/*', '**/*.md']
+
+enhancement:
+  - changed-files:
+      - any-glob-to-any-file: ['FinBoxRiskManager/*', 'RiskManager/*', 'RiskManagerTests/*']

.github/workflows/labeler.yml

@@ -0,0 +1,16 @@
+name: "Pull Request Labeler"
+on:
+  pull_request_target:
+    types:
+      - opened # Add labels when PR is created
+      - synchronize # Add labels when PR receives new commits, which may modify the files in the PR
+      - reopened # Add labels when PR is opened from closed state
+
+jobs:
+  labeler:
+    permissions:
+      contents: read
+      pull-requests: write
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/labeler@v5

.github/workflows/restrict-main.yml

@@ -0,0 +1,16 @@
+name: "Enforce Release or Hotfix Branch Merge"
+
+on:
+  pull_request:
+    branches:
+      - main
+
+jobs:
+  check-branch:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check if PR is from the release or hotfix branch
+        if: github.head_ref != 'release' && github.head_ref != 'hotfix'
+        run: |
+          echo "Only the release or hotfix branch can be merged into main."
+          exit 1

.github/workflows/restrict-release.yml

@@ -0,0 +1,16 @@
+name: "Enforce Release Branch Merge"
+
+on:
+  pull_request:
+    branches:
+      - release
+
+jobs:
+  check-branch:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check if PR is from the develop branch
+        if: github.head_ref != 'develop'
+        run: |
+          echo "Only the develop branch can be merged into release."
+          exit 1