- 
                Notifications
    
You must be signed in to change notification settings  - Fork 0
 
Open
Labels
Description
What's wrong?
Your version control system is not set up to require code reviews.
GitHub Repo
How to fix?
Set up protected branches in your version control tool account to make sure that changes are reviewed and approved.
- Protect the default branch (or production branch, if it was explicitly specified during linking) in each GitHub, Bitbucket, GitLab, or Azure DevOps repository, or AWS CodeCommit repository. In most cases, the default branch is the 
mainbranch. - Set up required reviews
- In GitHub, set up either a protection rule or a ruleset.
 - In Bitbucket, set up a merge check for at least one approval.
 - In GitLab, set up merge request approvals or required approval by codeowners. If requiring approval by codeowners, be sure to create a CODEOWNERS file for the repository.
 - In Azure DevOps, set the minimum number of reviewers to be greater than 0, or greater than 1 if "Allow requesters to approve their own changes" is selected. You can also set up a policy to automatically include code reviewers on all pull requests with a group as a required reviewer and set the minimum number of reviewers to be a greater than 0, or greater than 1 if "Allow requesters to approve their own changes" is selected.
 - In AWS CodeCommit, create an approval rule that includes the default branch and set the number of approvals needed to be at least 1.
 
 
This issue was automatically created from Vanta. View test in Vanta