You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Is your feature request related to a problem? Please describe.
Some maintainers had raised the question about whether it is really a relevant security best practice to have 2+ Required Review (related to the branch protection check)
Describe alternatives you've considered
The Branch-Protection check explanation could talk (or at least refer) an explanation on why it is important to have 2 or more required reviews
To protect against insider risks: if one maintainer is compromised, an attacker can send a PR and use the compromised account to LGTM their own PRs. X LGTMs requires X compromised maintainers, which is harder.
You can also point them to slsa.dev: the source requirement will have more examples.
Is your feature request related to a problem? Please describe.
Some maintainers had raised the question about whether it is really a relevant security best practice to have 2+ Required Review (related to the branch protection check)
Describe alternatives you've considered
The Branch-Protection check explanation could talk (or at least refer) an explanation on why it is important to have 2 or more required reviews
Additional context
electron/electron#35741 (review)
The text was updated successfully, but these errors were encountered: