← all organisations

govuk-one-login / Practices

Continuous integration, dependency management, testing and commit discipline, measured from the repositories themselves.

Every claim here is measured against the file tree at HEAD and the commit history, for the 156 live repositories with real history. Archived repositories are excluded from the scorecards: judging a 2013 prototype against a 2026 standard tells you nothing useful.

Practice at a glance

83%
of live repos run GitHub Actions
129 of 156
74%
have Dependabot configured
the documented dependency policy
98%
have a README
basic discoverability
76%
carry a licence file
MIT is the GDS default

What stands out

83% of the live estate runs GitHub Actions.

RFC-123 made GitHub Actions the preferred CI platform, and the file system agrees: 129 of 156 live repositories carry a workflow.

Jenkins and Travis are archaeology here.

0 repositories carry a Jenkinsfile and 0 a .travis.yml, but among live repositories that falls to 0 and 0 respectively. GOV.UK does still run Jenkins for deployment where the manual says platform integration requires it - that machinery simply is not in these public repositories.

72% of merge commits came through the GitHub PR button.

The manual is explicit: merge via the GitHub UI so the PR number lands in the merge commit. 38.9k of 53.7k merge commits carry that signature, which is unusually high discipline for an estate this old and this large.

Conventional Commits never took hold.

Only 14.0% of commits use the feat:/fix: prefix convention, against 29% that reference a ticket identifier. GOV.UK's manual does not mandate Conventional Commits, and the history shows a house style of plain-English subjects averaging 48 characters.

98% of repositories default to main.

1 still default to master - almost entirely archived repositories frozen before the 2020 rename became standard.

Continuous integration

CI platform, whole estate

Counted across all repositories with history, including archived ones, so the historical platforms are visible.

GitHub ActionsGitHub Actions: 157157Jenkins (Jenkinsfile)Jenkins (Jenkinsfile): 00Travis CITravis CI: 00CircleCICircleCI: 00

Repository hygiene

Community health and documented conventions

Live repositories only. Bars are coloured by adoption: green above 75%, yellow above 45%, pink above 20%, red below.

READMEREADME: 153 of 156 (98.1%)98%153/156Licence fileMIT by GDS conventionLicence file: 118 of 156 (75.6%)76%118/156ci.yml workflowthe documented filenameci.yml workflow: 2 of 156 (1.3%)1%2/156.github/dependabot.ymldocumented policy.github/dependabot.yml: 115 of 156 (73.7%)74%115/156CODEOWNERSreview routingCODEOWNERS: 128 of 156 (82.1%)82%128/156PR templatePR template: 96 of 156 (61.5%)62%96/156CONTRIBUTINGCONTRIBUTING: 4 of 156 (2.6%)3%4/156SECURITY.mdvulnerability disclosureSECURITY.md: 8 of 156 (5.1%)5%8/156Code of conductCode of conduct: 9 of 156 (5.8%)6%9/156CHANGELOGCHANGELOG: 4 of 156 (2.6%)3%4/156Architecture decision recordsArchitecture decision records: 10 of 156 (6.4%)6%10/156

Tooling and testing

Build, container and test tooling

Live repositories only. Language-specific items are naturally capped by the share of repositories in that language.

DockerfileDockerfile: 61 of 156 (39.1%)39%61/156Docker Composelocal devDocker Compose: 13 of 156 (8.3%)8%13/156Terraform (.tf)Terraform (.tf): 12 of 156 (7.7%)8%12/156Helm chartHelm chart: 0 of 156 (0.0%)0%0/156.editorconfig.editorconfig: 37 of 156 (23.7%)24%37/156.rubocop.ymlRuby repos mostly.rubocop.yml: 0 of 156 (0.0%)0%0/156ESLint configESLint config: 22 of 156 (14.1%)14%22/156spec/ directoryRSpec, the GDS choicespec/ directory: 0 of 156 (0.0%)0%0/156test/ or tests/test/ or tests/: 35 of 156 (22.4%)22%35/156features/ (Cucumber)features/ (Cucumber): 4 of 156 (2.6%)3%4/156

How commits are written

Commit message habits

Out of 270.7k commits across the whole estate.

Merge commitsMerge commits: 53.7k53.7k...of which 'Merge pull request #n'...of which 'Merge pull request #n': 38.9k38.9kReference a ticket (ABC-123)Reference a ticket (ABC-123): 78.2k78.2kConventional Commits (feat:, fix:)Conventional Commits (feat:, fix:): 37.8k37.8kRevertsReverts: 2.1k2.1k

Most-referenced ticket prefixes

The trace of the issue trackers GDS has used over fifteen years.

PYICPYIC: 12.4k12.4kAUTAUT: 10k10kATOATO: 8.2k8.2kOJOJ: 8k8kOLHOLH: 6.7k6.7kDCMAWDCMAW: 5.5k5.5kLIMELIME: 4k4kKIWIKIWI: 3.3k3.3kSSESSE: 1.7k1.7kGPCGPC: 1.5k1.5kIPSIPS: 1.5k1.5kQAQA: 1.4k1.4kGOVSIGOVSI: 1.3k1.3kF2FF2F: 1.2k1.2kKBVKBV: 910910

Default branch

mainmain: 192192developdevelop: 22mastermaster: 11