Ensure require of minimum approvals before merge

Using approval rules, an admin can define how many approvals a merge request must receive before it can be merged and which users should do the approval.

Risk Level: medium
Platform: Gitlab
Spectral Rule ID: GL-HRD007

REMEDIATION

To add a merge request approval rule:

SaaS:

  1. Go to your project and select Settings > General .
  2. Expand Merge request (MR) approvals, and then select "Add approval rule".
  3. Add a human-readable Rule name.
  4. Set the number of required approvals in "Approvals required". A value of 0 makes the rule optional, and any number greater than 0 creates a required rule.
  5. Select Add approval rule.

Read more: