Hey everyone, It seems that branch protection rules that are setup in GitHub via the .asf.yaml file [1] can be bypassed if someone pushes directly the changes to the GitBox repository. I tested this while merging PR-359 [2].
If we don't want to allow pushing directly to GitBox maybe we should raise an infra ticket to block this (if possible). On the other hand, instead of asking the contributors to manually squash and rebase their PRs we could leave this window open for this or other similar use-cases. I don't really mind either way but just wanted to bring this up. In case we want to act upon it this thread would be a good place to start. Best, Stamatis [1] https://github.com/apache/incubator-xtable/blob/7c7b54b3870791578b4689b29cf8794866eefa52/.asf.yaml#L36 [2] https://github.com/apache/incubator-xtable/pull/359#issuecomment-1999265918
