address policy-bot 3000 file PR limit about policy-bot HOT 3 OPEN

Alternatively, we could create an option to have policy bot fail open instead of failing closed if the 300 file limit or 250 commit limit is reached?

from policy-bot.

I think it will be possible to address this limit via other APIs (should a specific PR hit it). I'd rather not introduce additional configuration options for something that impacts security like this.

As it stands, you already have the ability to override an error with an approval, so the current workaround is to have some kind of fallback rule in the policy that doesn't have a file predicate (e.g. "no approval required for staging files OR the devtools team has approved".)

from policy-bot.

As of GitHub Enterprise 2.17 (so probably before May 2019 for Github.com), the limit on this API was increased to 3000 files, and policy-bot was updated in #161. There's still a limit that I'm sure people will hit, but 3000 should be much more forgiving than 300.

from policy-bot.