Skip to content

Commit

Permalink
revert checks.md content
Browse files Browse the repository at this point in the history
Signed-off-by: Joyce <joycebrum@google.com>
  • Loading branch information
joycebrum authored May 19, 2023
1 parent 6ff1dcb commit 1809887
Showing 1 changed file with 4 additions and 10 deletions.
14 changes: 4 additions & 10 deletions docs/checks.md
Original file line number Diff line number Diff line change
Expand Up @@ -73,15 +73,10 @@ result to meet most user needs.

Different types of branch protection protect against different risks:

- Require code review:
- requires at least one reviewer, which greatly
reduces the risk that a compromised contributor can inject malicious code.
Review also increases the likelihood that an unintentional vulnerability in
a contribution will be detected and fixed before the change is accepted.

- requiring two or more reviewers protects even more from the insider risk
whereby a compromised contributor can be used by an attacker to LGTM
the attacker PR and inject a malicious code as if it was legitm.
- Require code review: requires at least one reviewer, which greatly
reduces the risk that a compromised contributor can inject malicious code.
Review also increases the likelihood that an unintentional vulnerability in
a contribution will be detected and fixed before the change is accepted.

- Prevent force push: prevents use of the `--force` command on public
branches, which overwrites code irrevocably. This protection prevents the
Expand Down Expand Up @@ -672,4 +667,3 @@ This check determines whether the webhook defined in the repository has a token
- Check whether your service supports token authentication.
- If there is support for token authentication, set the secret in the webhook configuration. See [Setting up a webhook](https://docs.github.com/en/developers/webhooks-and-events/webhooks/creating-webhooks#setting-up-a-webhook)
- If there is no support for token authentication, consider implementing it by following [these directions](https://docs.github.com/en/developers/webhooks-and-events/webhooks/securing-your-webhooks).

0 comments on commit 1809887

Please sign in to comment.