Ensure to prevent approvals by users who add commits

By default, users who commit to a merge request can still approve it. You can prevent committers from approving merge requests that are partially their own at both the project and instance level.

Risk Level: medium
Platform: Gitlab
Spectral Rule ID: GL-HRD003

REMEDIATION

To do this:

SaaS:

  1. Go to your project and select Settings > General .
  2. Expand Merge request (MR) approvals.
  3. Select the "Prevent approvals by users who add commits" checkbox. If this checkbox is cleared, an administrator has disabled it at the instance level, which cannot be changed at the project level.
  4. Select Save changes.

Read more: