From 41bef700eb18d87227de4afd35b81a38f3ac7981 Mon Sep 17 00:00:00 2001
From: Dafydd Jones <dafydd@techneg.it>
Date: Tue, 3 Feb 2026 13:56:22 +0000
Subject: [PATCH] fix(safe-settings): place repo rulesets in a `suborg` file

---
 safe-settings/settings.yml         | 12 ------------
 safe-settings/suborgs/rulesets.yml | 18 ++++++++++++++++++
 2 files changed, 18 insertions(+), 12 deletions(-)
 create mode 100644 safe-settings/suborgs/rulesets.yml

diff --git a/safe-settings/settings.yml b/safe-settings/settings.yml
index 05ac975..2079975 100644
--- a/safe-settings/settings.yml
+++ b/safe-settings/settings.yml
@@ -9,18 +9,6 @@ repository:
   # In addition, Renovate defaults to squash merging unless the repository
   # settings disallows it.
   allow_squash_merge: false
-  rulesets:
-    - name: Prevent destruction of the default branch
-      target: branch
-      enforcement: active
-      conditions:
-        ref_name:
-          include:
-            - ~DEFAULT_BRANCH
-          exclude: []
-      rules:
-        - type: deletion
-        - type: non_fast_forward
   topics:
     - template
     - salt-formula
diff --git a/safe-settings/suborgs/rulesets.yml b/safe-settings/suborgs/rulesets.yml
new file mode 100644
index 0000000..8d4e406
--- /dev/null
+++ b/safe-settings/suborgs/rulesets.yml
@@ -0,0 +1,18 @@
+# See https://github.com/github/safe-settings/blob/main-enterprise/docs/sample-settings/suborg.yml
+# for example layout
+
+suborgrepos:
+  - '*'
+
+rulesets:
+  - name: Prevent destruction of the default branch
+    target: branch
+    enforcement: active
+    conditions:
+      ref_name:
+        include:
+          - ~DEFAULT_BRANCH
+        exclude: []
+    rules:
+      - type: deletion
+      - type: non_fast_forward