News for hackers. Stuff that matters.

A comment on A GitHub Bot to Auto-Approve PRs for SOC2 Compliance. Parent comment

Re:A GitHub Bot to Auto-Approve PRs for SOC2 Compliance by AnBouch on Tuesday February 18, 2025 @10:04AM (#43090304)
Approval is not mandatory for all PRs. You can change your policy about it and easily justify it with your auditor. => It makes way more sense to have important stuff reviewed vs automated approval from a bot.
[ Parent | on HN ]
Re:A GitHub Bot to Auto-Approve PRs for SOC2 Compliance by emregucerr on Tuesday February 18, 2025 @10:29AM (#43090622)
I think most people blindly try to get controls in Vanta/Drata to pass like us. I'd much rather build a dumb bot than having to talk to my auditor. But still

> we realize how stupid this is

[ Parent | on HN ]