GitHub – prevent collaborators from using push -f

by

This is easy to do with Git with a pre-receive hook. Of course, this requires that you are actually able to install hooks, and for obvious reasons, GitHub doesn’t allow you to upload arbitrary executable files to run on their servers 🙂

In general, the workflow with Git or really any distributed version control system, is that you don’t allow other people to push to your repository. Instead, you pull from theirs. This requires a much lower level of trust. So, this would be workaround number 1: don’t let them push, have them fork and then pull from them. That way, you can control what goes into your repository.

Another workaround would be to set up your own staging repository on a server you own, where you can install your own Git hooks. You can configure a pre-receive hook which denies pushing if it’s not a fast-forward and post-receive hook which automatically forwards all pushes to GitHub. Of course, this means that you lose many of the benefits of using GitHub in the first place.

As a third workaround, you could use multiple repositories. This is a combination of the two other approaches: have one repository that your collaborators can push to and another one that only you have access to, that you pull into from the first repository.

At any rate, you should file a feature request with GitHub (especially if you are a paying customer!) since this seems to be a useful feature.

More Related Contents:

  1. Is there a way to cache https credentials for pushing commits?
  2. Git push requires username and password
  3. Can’t push to GitHub because of large file which I already deleted
  4. Git Push ERROR: Repository not found
  5. ! [rejected] master -> master (fetch first)
  6. Remote origin already exists on ‘git push’ to a new repository
  7. Github remote push pack size exceeded
  8. How do I avoid the specification of the username and password at every git push?
  9. Git push hangs when pushing to Github?
  10. Push to GitHub error: Couldn’t find host github.com in the .netrc file; using defaults
  11. Heroku: How to push different local Git branches to Heroku/master
  12. Issue pushing new code in Github
  13. Is there a way in git to obtain a push date for a given commit?
  14. Pushing from local repository to GitHub hosted remote
  15. git push heroku master says “Everything up-to-date”, but the app is not current
  16. How do I fix “remote: fatal error in commit_refs” errors trying to push with Git?
  17. How to push different local Git branches to Heroku/master
  18. Only use a proxy for certain git urls/domains?
  19. How do you push just a single Git branch (and no other branches)?
  20. How can I find the location of origin/master in git, and how do I change it?
  21. How do I contribute to other’s code in GitHub? [closed]
  22. Merge pull request to a different branch than default, in Github
  23. Adding self-signed SSL certificate without disabling authority-signed ones
  24. Jenkins-Build when a change is pushed to GitHub option is not working
  25. Git LFS refused to track my large files properly, until I did the following
  26. How to install/setup TortoiseGit to work with GitHub
  27. How can I reduce the ever-increasing time to push a subtree?
  28. How to manage multiple ssh keys in the ~/.ssh directory
  29. How to pull remote branch from somebody else’s repo
  30. GitHub Api download zip or tarball link

Leave a Comment