GitHub
Releases
Security & compliance
Code quality
Branch protection too weak
Part of the Repository protection posture check · fix arrives as a guide
What it is
The default branch is protected, but weakly — no required approvals, or force pushes still permitted, or administrators exempt from the rules.
Why it matters
Partial protection reads as protection on the settings page while leaving the specific gap that matters. An admin exemption in particular means the rule does not apply to the accounts most worth compromising.
How to fix it
Require at least one approving review, dismiss stale approvals on new commits, block force pushes, and apply the rules to administrators too.
Run them all on your app
Connect your repo and your live services with read-only scopes. The first scan is free, and nothing changes without your approval.