Neon Law | Ship through GitOps

Ship through GitOps

Every change travels through a pull request to main. The required checks and resolved review threads protect the branch; auto-merge lands one squash commit, then the release and deployment flow begins from that reviewed tip.

Presenter notes

GitOps keeps ordinary contributors out of settings drift. Branch protections and merge behavior live in the private navigator CLI, so an authorized operator reviews the planned change before applying it to one named repository:


navigator ops github setup neon-law-foundation/navigator --dry-run

The repository name is optional — it falls back to GITHUB_REPOSITORY and then this checkout's origin — but the command still reconciles one repository at a time and cannot apply to every repository at once. Any repository on the github.com enterprise is in scope; a remote pointing anywhere else is refused before a token is read. It reconciles pull-request-only and squash-only policy, gated on one check named ci. Read GitOps before changing the real setting; contributors normally work through a PR and let the gate do its job.

View all slides Open display