Author Account Age
Ensures the PR author account age is not too new
author_account_age:
behavior: review
config:
min_age_days: 1
comment: true
Configuration
Setting | Description | Type | Default |
---|---|---|---|
min_age_days | The minimum age, in days, for an account to author PRs | integer | 1 |
comment | If set to true, SourceShield will comment on the PR with a message summarizing the author account age | boolean | true |
Description
The pull request author’s GitHub account age is one of many potential signals to consider when reviewing a proposed change. Malicious actors can create new GitHub accounts, without contribution history, and use them to submit malicious changes. Pull requests submitted by new accounts should be more heavily-scrutinized.
References
None