4 ms·
At least for the projects I work with at Microsoft, nearly no user accounts have direct write access to source repos. Checkins are done by a service account onl
by CurtHagenlocher 6y ago
At least for the projects I work with at Microsoft, nearly no user accounts have direct write access to source repos. Checkins are done by a service account only after a pull request has successfully been built and run tests, and has been signed off on by appropriate users -- e.g. I can't sign off on my own PR.
EDIT: Sorry, somehow I missed the reply by thatsamonad or I would have replied to it instead of its parent.
- rightbyte 6y agoI meam it sounds like a good security mesuare but also like a pain to work with? I have recurring nightmare that management realize that submits can be blocked if they generate CI warnings and there will be no warnings anymore.
- tikkabhuna 6y agoTools that generate warnings can be configured to only do so on new or modified code. We do the same for our code. It can be a difficult, but ultimately some codebases require it.