Create Branch rules so that only Merge team members can merge PRs on the incubator app

[robinglov]

Overview

We need branch protections on all branches in this repo.

Action Items

• [x] Create a merge team
• [x] Settings to configure
  • [x] Require pull requests before merging
  • [x] Research the minimum permissions that a level one user needs to have on the code repos (incubator and devops security) so that when a user opens or updates a PR it kicks off the GitHub Action
    • [x] Restrict who can push to matching branches based on those permissions
  • [x] Search for and select the 'merge team' as entity that will have permission to push to a branch or create a matching branch.

Resources/Instructions

About branch protection rules Creating branch protection rules Managing branch protection rules

create a rule for all current and future branches in your repository with the wildcard syntax *

[chelseybeck]

• [x] @robinglov we should further refine this b/c there aren't protections on the main branch at all. Let's add all branch protections at once.

[chelseybeck]

What's the minimum permissions that a level one user needs to have on the code repos (incubator and devops security) so that when a user opens or updates a PR it kicks off the GitHub Action?

[ExperimentsInHonesty]

@chelseybeck does this need further refinement, or is this issue ready for the prioritized backlog?