feat(repository): add new check repository_enforces_default_branch_protection
#6161
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Context
The default or main branch of a repository often represents the production-ready code and is critical to the stability and security of the project. Protecting this branch from unauthorized or unreviewed changes is essential to maintain the integrity of the codebase. Enforcing branch protection rules ensures that only approved changes, with proper testing and review, are merged into the main branch, preventing potential vulnerabilities from being introduced into production.
Description
This check ensures that branch protection is enforced on the default or main branch of a repository. By setting up branch protection rules, it restricts who can push changes directly, requires reviews and approvals before merging, and enforces necessary tests or checks, safeguarding the code from unapproved changes that could compromise the project's stability.
Checklist
License
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.