Setup Continuous Integration for your team’s Github repo using Github Actions or CircleCI.
Here relevant tutorials for Github Actions
The free version of CircleCI should also work for your project’s size
When any commit is pushed to main, all the tests should be run and any failing tests should cause the push to be rejected
Survive Dr. Greg’s Crazy Commit!
Dr. Greg will mangle your code and push it to your main branch
If the push is not rejected, -10
If the push is not rejected, your team will also have to deal with getting rid of Dr. Greg’s Crazy Commit.
Who knows when this mad doctor will strike again!?!?
Dr. Greg is just pushing a commit that mangles your code. There are no "github specific" malicious behaviors like changing permissions on your repository that your app's tests should detect.
Setup Continuous Integration for your team’s Github repo using Github Actions or CircleCI.
Here relevant tutorials for Github Actions
The free version of CircleCI should also work for your project’s size
When any commit is pushed to main, all the tests should be run and any failing tests should cause the push to be rejected
Survive Dr. Greg’s Crazy Commit!
Dr. Greg will mangle your code and push it to your main branch
If the push is not rejected, -10
If the push is not rejected, your team will also have to deal with getting rid of Dr. Greg’s Crazy Commit.
Who knows when this mad doctor will strike again!?!?
Dr. Greg is just pushing a commit that mangles your code. There are no "github specific" malicious behaviors like changing permissions on your repository that your app's tests should detect.