News for hackers. Stuff that matters.

A comment on GitHub mirror compromise incident report. Parent comment

Re:GitHub mirror compromise incident report by rdnetto on Wednesday July 04, 2018 @07:12PM (#17459925)
This is standard practice where I work due to SOX compliance. (No pushing directly to master, all PRs need at least one other person's approval). In practice it's not an issue, since PRs are good practice anyway.
[ Parent | on HN ]
Re:GitHub mirror compromise incident report by rich-w-big-ego on Thursday July 05, 2018 @01:45AM (#17461104)
Yes but you can push to PRs after approval and then merge them.
[ Parent | on HN ]
Re:GitHub mirror compromise incident report by dewey on Thursday July 05, 2018 @04:28AM (#17461690)
You could revoke push permissions on that branch after the PR is requested though - there are probably tools that do that already.
[ Parent | on HN ]