feat(repository): add new check repository_enforces_admin_branch_protection
#6205
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Context
Branch protection rules are designed to prevent unauthorized or unverified changes to critical branches like the main branch. By default, administrators are exempt from these rules, which can undermine their effectiveness. Since administrator accounts often have elevated privileges and are potential targets for attacks, ensuring that branch protection rules apply to administrators helps safeguard the integrity of the repository.
Description
This check ensures that branch protection rules are enforced for administrators. It validates that even users with elevated privileges must adhere to the same safeguards as other contributors, such as requiring reviews, passing checks, and restrictions on direct pushes. This policy reduces the risk of accidental or malicious changes bypassing established protections.
Checklist
License
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.