# TFNFR3 - GitHub Repo Branch Protection Module Specification for the Azure Verified Modules (AVM) program ID: TFNFR3 - Category: Contribution/Support - GitHub Repo Branch Protection Module owners MUST set a branch protection policy on their GitHub Repositories for AVM modules against their default branch, typically main, to do the following: Requires a Pull Request before merging Require approval of the most recent reviewable push Dismiss stale pull request approvals when new commits are pushed Require linear history Prevents force pushes Not allow deletions Require CODEOWNERS review Do not allow bypassing the above settings Above settings MUST also be enforced to administrators Tip If you use the template repository as mentioned in the contribution guide, the above will automatically be set. --- Source: https://raw.githubusercontent.com/Azure/Azure-Verified-Modules/refs/heads/main/docs/content/specs-defs/includes/terraform/shared/non-functional/TFNFR3.md Last Modified: 0001-01-01