[Policy Bot] found one or more issues with this repository.

[google-cloud-policy-bot[bot]]

Policy Bot found one or more issues with this repository.

• [ ] Default branch is 'main'
• [ ] Branch protection is enabled
• [x] Renovate bot is enabled
• [ ] Merge commits disabled
• [x] There is a CODEOWNERS file
• [ ] GitHub detects a valid LICENSE.md
• [x] There is a CODE_OF_CONDUCT.md
• [x] There is a CONTRIBUTING.md
• [x] There is a SECURITY.md

[SurferJeffAtGoogle]

@kelsk To prevent pipeline injection attacks, it's important that this repository enable branch protection. Is there something preventing you from doing it today?

[kelsk]

@SurferJeffAtGoogle We do have branch protection enabled on the default branch, v1. I suspect policy-bot is looking for branch protection in the main branch, so I'll add branch protection to main immediately.

(Why main isn't default: Cloud Code hardcodes the sample repo's branch name to retrieve the samples, so the Cloud Code Samples repo uses branches for versioning to ensure backwards compatibility with older versions of Cloud Code.)