Fix code scanning alert - Branch-Protection

intel / pin-based-cec

Pin-Based Constant Execution Checker (Pin-based CEC)

BSD 3-Clause "New" or "Revised" License

15 stars 4 forks source link

Fix code scanning alert - Branch-Protection #26

Closed alext-w closed 2 months ago

alext-w commented 3 months ago

Tracking issue for:

[ ] https://github.com/intel/pin-based-cec/security/code-scanning/1

alext-w commented 3 months ago

The "checks" part of the finding will be primarily addressed by #12.

alext-w commented 2 months ago

Tweaked the branch protection rules to include stale review dismissal and requiring codeowners review, as mentioned in the scan warnings. The number of mandatory reviews is left at 1 for now, as that seems like an overkill for this project.