zlacker

It's not clear to me whether this is possible under any configuration, but: can you enforce a two-person rule? I'd like all users to be able to merge accepted PRs, but no one should be able to push directly to master (unless an admin specifically elevates permissions to do that).

The only way I can think of is to have a bot be the only one with commit access, and to interact with the bot to do merging. But that seems pretty roundabout.

>>closep+(OP)
This sounds like how my previous company had GitHub configured.

We couldn't push to master, but we could merge accepted PRs. Not sure if this was done with GitHub or with Git itself.

>>Randal+A7
Generally speaking that's what Github's "protected branches" are, and it looks like you lose those for private repos when you switch to the free plan.

>>closep+(OP)
Protected branches are the gateway to the multi-PR-review requirement, so you'd need the $4 GH Teams.