106
I checked whether well-known dev tools companies actually require code review before merging to main. Most don't (codatus.com)
submitted 2 months ago by to c/programming@programming.dev
14 comments fedilink hide all child comments
 

I scanned the public repos of 128 YC-backed dev tools companies, 6,195 repos in total. I expected the companies building our tooling to enforce the basics on themselves. Only 2 of the 128 require any status check to pass before merging.

you are viewing a single comment's thread
view the rest of the comments
[–] 33 points 2 months ago (2 children)

We used to use completely separate tools for code review (in our case because the process was older than git). Some of them might be doing something similar.

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [–] [S] 5 points 2 months ago

    That's fair, and it's a real limit of measuring GitHub config. If a team runs review or merge gating in a separate tool, or mirrors to GitHub from somewhere that's their actual source of truth, the scan won't see it and they'd look unprotected when they aren't. The finding is really about repos where GitHub is the place the work happens, and even then it's public repos only. Worth saying plainly so the number isn't read as more than it is.

  • permalink
  • fedilink
  • source
  • parent