What do you do about a peer who blatantly and publicly violates company policies? For example, someone who uploads a secret company document on GitHub so that it's easier for them to work from home. And then they share that document with you and ask you questions about it. On the one hand, you can be a dick about it (i.e., do the right thing and confront them) and pay a personal price. Alternatively, you can let it slide, pretend that nothing happened, and risk an escalation of inappropriate behavior in the future.