Reference Architecture (Conceptual)
This diagram represents a recommended nonprofit-friendly GitHub architecture emphasizing security, cost control, and scalability.
---
title: Reference Architecture
---
flowchart TD
subgraph MBARI
direction TB
subgraph org[Org Policies]
2fa[2FA]
prot-branch[Protected Branches]
code-reviews[Code Reviews]
end
subgraph teams[Teams]
eng[Engineering]
infra[Infrastructure]
data[Data Science]
external[External Collaborations]
end
subgraph repos[Repositories]
priv[Private By Default]
codeown[CODEOWNERS files]
portect[Protected Branches]
end
subgraph actions[GitHub Actions]
resuse[Reusable Workflows]
end
subgraph self-host[Self-Hosted Runners]
onprem[On Prem]
end
subgraph security[Security]
depend[Dependabot]
secret[Secrets Scanning]
code[Code Scanning]
advise[Advisories]
end
end
org --> teams --> repos --> actions --> self-host --> security
Design intent
- Policy is enforced above repositories
- CI/CD is centralized and reusable
- Costly compute is offloaded to self-hosted runners
- Security is “on by default”