OSS
Browse OpenForge documentation
← All OSS projects
/oss/en/openforge/templates

Templates Catalog

Catalog of reusable, production-tested implementation templates provided in OpenForge.

Templates Catalog

Templates provide safe, conservative, and battle-tested starting points for OSS implementations. Customize versions, permissions, registries, and domain endpoints according to the target project's threat model before deployment.

Directory Structure

Architecture diagram
Responsive vector rendering · source preserved
templates/ github/ # Issue / PR templates, CODEOWNERS patterns workflows/ # CI, release, SBOM, supply chain validation workflows scripts/ # Toolchain verification, lockfile sanity checks, helper scripts policy/ # Dependency review policies, plugin intake rules, waiver formats container/ # Minimal multi-stage Dockerfile baselines kubernetes/ # Deployment, Service, Ingress, NetworkPolicy, PDB, Kustomize gitops/ # Argo CD App-of-Apps and GitOps deployment blueprints identity/ # OIDC / Keycloak / OAuth2 integration contracts observability/ # /healthz, /readyz, Prometheus metrics, OpenTelemetry contracts backup/ # Backup and disaster recovery verification runbooks offline/ # Air-gap bundle manifests and trusted plugin catalogs design/ # README designs, architecture diagrams, status badges

Key Template Categories

1. GitHub & Workflow Assets (templates/github/, templates/workflows/)

  • Issue Templates: Structured formats for Bug Reports, Feature Proposals, and Architecture RFCs
  • PR Template: Requirements for change descriptions, verification evidence, and quality checklists
  • CI Workflows: Automated linting, test execution, container builds, and security scans
  • Release Workflows: Tag-triggered automated artifact builds, changelog extraction, SBOM generation, and cryptographic signing

2. Container & Kubernetes Manifests (templates/container/, templates/kubernetes/)

  • Multi-stage Dockerfiles: Separate build tooling from runtime environments to minimize attack surfaces
  • K8s Manifests: Production-grade Deployment, Service, Ingress, NetworkPolicy, and PodDisruptionBudget manifests
  • Kustomize / Argo CD: Multi-environment overlays and GitOps synchronization structures

3. Security & Governance Rules (templates/policy/, templates/identity/)

  • Dependency Review Policies: Automated license compatibility and vulnerability threshold enforcement
  • OIDC Federation: Token federation configurations for Keycloak and cloud IAM providers
  • Security Exception Waivers: Formal templates for documenting time-bounded security exceptions