Azure repository does not dismiss pull request approvals on the default branch when new commits are

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_262
Category	Flow Control Mechanism
Severity	MEDIUM

Impact

When a pull request is approved, it means that the code changes have been reviewed and can be merged into the target branch. However, new commits added to an existing pull request after it has been approved do not automatically require review. This can result in the bypassing of branch protection rules, allowing the merging of unreviewed commits into the default branch, potentially introducing malicious code that could be used to steal secrets, establish backdoors and affect production.