Skip to content

Enforce Code Review and Approval Workflows

Info

ID: MS-M7009
MITRE mitigation: -

Require peer review and explicit approval before code changes can be merged to production branches. This ensures multiple parties validate changes, reducing the risk of malicious or erroneous code reaching production.

Techniques Addressed by Mitigation

ID Name Use
MS-TA7003 Code injection in connected repository Require peer review and approval before merging code changes to production branches.