3 ms·But the attacker could just create a branch, merge request and then merge that?by t0mas88 10mo agoBut the attacker could just create a branch, merge request and then merge that?x0x0 10mo agoWe require review on PRs before they can be merged.benoau 10mo agoThey can't with git by itself, but if you're also signed in to GitHub or BitBucket's CLI with an account able to approve merges they could use those tools.