I am noticing bot accounts hitting GitHub repos and approving (not merging, but approving) PRs. The GitHub docs on how to stop non-collaborators from doing this are difficult to understand. So far I have resorted to old-fashioned branch protection. Has anybody with a divining rod figured out the #github permissions to specifically address this issue?
0

If you have a fediverse account, you can quote this note from your own instance. Search https://akk.novalug.org/objects/bb66ac73-bf91-4fff-a5a2-584489fbaaa5 on your instance and quote it. (Note that quoting is not supported in Mastodon.)