How to block COMMITs to Approved PRs?

Question

Occasionally we see branches with Approved Pull Requests updated before they are deployed to Production.  The only way we've seen this happen is when the Merge Masters (my silly term) merge the branches post deployment.

Not necessarily the best way to manage merges to master, but it's what we've got.

What I'd like to know is how the commit can be blocked if there is an Approved PR, or how to send a notification that the commit has occurred?  I'm thinking the latter is the way to go because otherwise, you'd have to have a process to "unblock" the commit so that code could get pushed through.

Any ideas?

Saxea _Flowie_ · Answer

I see, so you need to block the Jira ticket/deployment.

Flowie 'stale' support is a different feature than the 'reset approval' from Bitbucket. Bitbucket removes the approval while Flowie will mark them as 'stale'. Flagging as 'stale' can be helpful to identify that the problem has happened, but from Bitbucket side only, not Jira.

Also, we are working on a Jira integration for Flowie, and that could also help with blocking from the Jira side. I'd need to understand better your workflow though. You can shoot an email to support@flowie.app referencing this thread, and I'd be happy to discuss and learn more about it to be able to assist.

jh074626 · Answer

Saxea, as described by Sean, we have settings in our repo that marks the Approval as "stale" and requiring reapproval.  The problem is knowing it has happened and "blocking" the Jira ticket from CAB approval and/or production deployment.

I'll take a look at Flowie and see if it helps address our specific situation.

jh074626 · Answer

Thank you, Sean.  We already have those settings enabled.  :-)  Those settings have been very important in finding these occurrences.

This issue occurs because the flow we use deploys the code to Production before the merge is done.  So, the Approval is made stale, but the code may be packaged and deployed without that approval.

What I started playing with yesterday was a Jira automation trigger by a Commit.  The idea was that if the PR was Approved, a notification would be sent out saying it needed to be reapproved.

I thought of trying to build something to block the Commit, but that was seemed to be much more complex and would likely require multiple automations or rules, including an "unblock".