Closed aaronshurley closed 1 year ago
To turn on branch protection rules:
develop
) and edit its rules.Require a pull request before merging
and set Require approvals
to 1
.Save changes
.Validated that all established repos already had this enabled.
Describe the problem/challenge you have To reduce the attack surface for bad actors to get rogue code into our repositories we need to adopt a two-person approval strategy.
Describe the solution you'd like Every change MUST be agreed to by at least two developers (one of whom may be the submitter) prior to integration into the repository. Controls must be in place to ensure that a trusted engineer cannot act as a second trusted engineer on their own submission
Anything else you would like to add: We will focus on the "established" repos for this change for now: