Branch Protection Controls
Branch protection controls for GitHub/GitLab repositories
- ID
- repo-branch-protection
- Version
- dev-20260527
- Gemara version
- 1.1.0
- Author
- ComplyTime
Source Code Protection
Controls for protecting source code repositories via branch protection rules
BP-1 Require Pull Request Reviews
Objective
Ensure changes to protected branches go through a pull request process
Assessment requirements
Direct pushes to protected branches MUST be blocked
Applicability: github-repos, gitlab-repos
BP-2 Require Minimum Approvals
Objective
Pull requests to protected branches must have a minimum number of approvals
Assessment requirements
Pull requests must require a minimum number of approvals
Applicability: github-repos, gitlab-repos
BP-3 Restrict Force Pushes
Objective
Force pushes to protected branches must be blocked
Assessment requirements
Force pushes to protected branches must be blocked
Applicability: github-repos, gitlab-repos
BP-4 Prevent Admin Bypass
Objective
Admin bypass of branch protection rules must be prevented
Assessment requirements
Admin bypass prevention must be enabled on protected branches
Applicability: github-repos, gitlab-repos
BP-5 Require Code Owner Review
Objective
Code owner review must be required when CODEOWNERS file exists
Assessment requirements
Code owner review requirements must be enabled
Applicability: github-repos, gitlab-repos