Loading

Loading...

Back to Documentation

Security PolicyGHA-SEC011

GHA-SEC011Auto-Approve Pull Requests

Problem Statement

Automating PR approval removes manual oversight.

Vulnerability

Unauthorized Code Merge

Code Examples

Insecure Implementation

- run: gh pr review --approve

Secure Implementation

# Use manual review from maintainers

Remediation Steps

Always require human review, even for trusted contributors.