In parallel I change the settings of the repository to require any change to go through a branch. If the branch is merged to master, the action will push the built container to the dockerhub.
I seem to also formally require any merge request to be reviewed, however admins can bypass that and I think anybody who would realistically do quick fixes are admins anyway.
In parallel I change the settings of the repository to require any change to go through a branch. If the branch is merged to master, the action will push the built container to the dockerhub.