LabelRepoMetadata returns the IFC label for structural repository metadata that only collaborators with write access can define: labels, branches, tags, releases, issue types, issue field definitions, discussion categories, and the collaborator roster. Integrity is trusted because, unlike issue/PR/
(isPrivate bool)
| 166 | // universally readable; private repositories restrict the reader set (the |
| 167 | // opaque "private" marker, resolved client-side at egress time). |
| 168 | func LabelRepoMetadata(isPrivate bool) SecurityLabel { |
| 169 | if isPrivate { |
| 170 | return PrivateTrusted() |
| 171 | } |
| 172 | return PublicTrusted() |
| 173 | } |
| 174 | |
| 175 | // LabelRelease returns the IFC label for repository releases (list_releases, |
| 176 | // get_latest_release, get_release_by_tag). |