I'm trying to setup a review workflow where nobody can write on master. In that workflow all PRs are merged by a 'automerge' user that do it after the PR is approved by all reviewers.
So far i've come to:
- Using the workzone (plug in/add on) i can define a group that is used as default reviewers
- Using the workzone (plug in/add on) i can set the 'automerge' to do the merge after the PR is approved
- Using the Branch Permition i can lock the write on master only to the 'automerge' user
But i have one problem:
- The user can add additional reviewers to it's like
Because of PCI-DSS standard only pre-approved reviwers can be included in the PR.
My question here is: Is there a way to prevent the inclusion of additional reviewers in PR?