Branch protection not enforced on administrators

Rule Details

Cortex AppSec Rule ID	APPSEC_CICD_33
Category	Flow Control Mechanism
Severity	LOW

Impact

Branch protection rules are not enforced on administrators in an actively used repository. These are a mechanism to enforce a set of requirements before code can be pushed to a repository branch. These rules can apply to organization and repository administrators or to exclude them. Despite the fact that administrators can modify branch protection rules, it is recommended to apply it to them, to assist with restricting push of unreviewed code to a branch. An actively used repository has at least two contributors, over 50 commits, and was updated in the last 90 days.

Recommended Solution - Buildtime

To enforce branch protection on administrators:

1. Browse to the repository settings.
2. Under Branches, edit the rule that applies to the repository default branch.
3. Check the Include Administrators setting.