Why not just create a user with only pull access?
There are three nodes that are running with the same repo. If one of them force pushes, the others have the repo to restore it.
In 6+ months that I’ve had this setup, I’ve never had to deal with that issue.
The convenience of having the agents create their own prs, and evaluate issues, is just too great.
reply
Why not just create a user with only pull access?