Skip to content

Latest commit

 

History

History
26 lines (18 loc) · 772 Bytes

no_conversation_resolution.md

File metadata and controls

26 lines (18 loc) · 772 Bytes
Raw

Default Branch Should Require All Conversations To Be Resolved Before Merge

policy name: no_conversation_resolution

severity: LOW

Description

Require all Pull Request conversations to be resolved before merging. Check this to avoid bypassing/missing a Pull Reuqest comment.

Threat Example(s)

Allowing the merging of code without resolving all conversations can promote poor and vulnerable code, as important comments may be forgotten or deliberately ignored when the code is merged.

Remediation

  1. Make sure you have admin permissions
  2. Go to the repo's settings page
  3. Enter "Branches" tab
  4. Under "Branch protection rules"
  5. Click "Edit" on the default branch rule
  6. Check "Require conversation resolution before merging"
  7. Click "Save changes"