# protected branches

Published articles for protected branches.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Restrict access to the production branch

DevFeed: [Restrict access to the production branch](<https://devfeed.tech/articles/restrict-access-to-the-production-branch-5772.md>)

Original publisher: [Read original article](<https://neon.com/blog/restrict-access-to-the-production-branch>)

Author: Carlota Soto

Published: 2024-07-26T17:30:44Z

Content type: tutorial

Language: en

Sources: [Blog -- Neon Docs](<https://devfeed.tech/sources/blog-neon-docs.md>)

Topics: [Database](<https://devfeed.tech/topics/database.md>), [Access Control](<https://devfeed.tech/topics/access-control.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [Networks](<https://devfeed.tech/topics/networks.md>)

Tags: [access-control](<https://devfeed.tech/tags/access-control.md>), [company](<https://devfeed.tech/tags/company.md>), [customer](<https://devfeed.tech/tags/customer.md>), [data](<https://devfeed.tech/tags/data.md>), [developers](<https://devfeed.tech/tags/developers.md>), [development](<https://devfeed.tech/tags/development.md>), [networks](<https://devfeed.tech/tags/networks.md>), [operational](<https://devfeed.tech/tags/operational.md>), [product](<https://devfeed.tech/tags/product.md>), [protected-branches](<https://devfeed.tech/tags/protected-branches.md>), [workflow](<https://devfeed.tech/tags/workflow.md>)

### AI overview

The article explains Neon's protected branches feature, which restricts access and operational actions on production or other critical database branches. Protected branches cannot be deleted or reset, associated projects and compute endpoints are safeguarded, and connections can be limited to IP addresses on a project allowlist.

### Source excerpt

Via database branching workflows, developers can quickly experiment and ship updates--this is why we often hear how Neon accelerates development for teams. But it can be nerve-wracking to think that you might accidentally delete the production branch or project. To give you peace...

## GitHub branch protection bypass can expose protected credentials to workflows

DevFeed: [GitHub branch protection bypass can expose protected credentials to workflows](<https://devfeed.tech/articles/working-as-unexpected-13341.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/working-as-unexpected>)

Published: 2024-05-31T00:00:00Z

Content type: opinion

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [GitHub](<https://devfeed.tech/topics/github.md>), [Security](<https://devfeed.tech/topics/security.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [code productivity](<https://devfeed.tech/topics/code-productivity.md>)

Tags: [branch-protection-rules](<https://devfeed.tech/tags/branch-protection-rules.md>), [github](<https://devfeed.tech/tags/github.md>), [github-branch-protections](<https://devfeed.tech/tags/github-branch-protections.md>), [new-branches](<https://devfeed.tech/tags/new-branches.md>), [protected-branches](<https://devfeed.tech/tags/protected-branches.md>), [release-branches](<https://devfeed.tech/tags/release-branches.md>), [release-workflow](<https://devfeed.tech/tags/release-workflow.md>), [secret-storage](<https://devfeed.tech/tags/secret-storage.md>), [secret-store](<https://devfeed.tech/tags/secret-store.md>), [secrets](<https://devfeed.tech/tags/secrets.md>), [security](<https://devfeed.tech/tags/security.md>), [security-best-practices](<https://devfeed.tech/tags/security-best-practices.md>), [use-of-github](<https://devfeed.tech/tags/use-of-github.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>), [workflows](<https://devfeed.tech/tags/workflows.md>)

### AI overview

The article describes a GitHub branch protection behavior that can allow a newly created branch to become protected and gain access to environment secrets through workflows. The author argues that this behavior can enable credential exfiltration and create risks for projects using wildcard branch protection rules, particularly release workflows.

### Source excerpt

Don't let the unexpected derail your projects. Read our guide on embracing uncertainty in software development and unlock new possibilities.

## Build with confidence with Schema Diff & Protected Branches

DevFeed: [Build with confidence with Schema Diff & Protected Branches](<https://devfeed.tech/articles/build-with-confidence-with-schema-diff-protected-branches-5076.md>)

Original publisher: [Read original article](<https://neon.com/blog/build-with-confidence-with-schema-diff-protected-branches>)

Author: Raouf Chebri

Published: 2024-04-16T13:33:07Z

Content type: tutorial

Language: en

Sources: [Blog -- Neon Docs](<https://devfeed.tech/sources/blog-neon-docs.md>)

Topics: [Database](<https://devfeed.tech/topics/database.md>), [protected branches](<https://devfeed.tech/topics/protected-branches.md>), [Structured-data](<https://devfeed.tech/topics/structured-data.md>), [Development](<https://devfeed.tech/topics/development.md>), [Database Migration](<https://devfeed.tech/topics/database-migration.md>), [Tooling](<https://devfeed.tech/topics/tooling.md>)

Tags: [code-review](<https://devfeed.tech/tags/code-review.md>), [collaboration](<https://devfeed.tech/tags/collaboration.md>), [community](<https://devfeed.tech/tags/community.md>), [database](<https://devfeed.tech/tags/database.md>), [debugging](<https://devfeed.tech/tags/debugging.md>), [development](<https://devfeed.tech/tags/development.md>), [postgres](<https://devfeed.tech/tags/postgres.md>), [protected-branches](<https://devfeed.tech/tags/protected-branches.md>), [schema](<https://devfeed.tech/tags/schema.md>), [serverless](<https://devfeed.tech/tags/serverless.md>)

### AI overview

Neon's article introduces schema diff and protected branches for Neon database branching. It explains how schema diff compares a branch's current and past schemas, including its use in debugging, code review, and collaboration, and demonstrates the feature in the Neon Console.

### Source excerpt

Neon helps teams ship with confidence without compromising development velocity. One of its features that contributes to that is database branching. In this post, we will explore two new features related to database branching: schema diff and protected branches. Database branches...

## Seven Practices to Prepare a Startup for SOC 2

DevFeed: [Seven Practices to Prepare a Startup for SOC 2](<https://devfeed.tech/articles/the-soc2-starting-seven-29174.md>)

Original publisher: [Read original article](<https://www.latacora.com/blog/2020/03/12/soc2-starting-seven/>)

Published: 2020-03-12T17:49:00Z

Content type: tutorial

Language: en

Sources: [Latacora](<https://devfeed.tech/sources/latacora.md>)

Topics: [soc2](<https://devfeed.tech/topics/soc2.md>), [Security](<https://devfeed.tech/topics/security.md>), [Terraform](<https://devfeed.tech/topics/terraform.md>), [CI/CD](<https://devfeed.tech/topics/cicd.md>), [Google Cloud Identity](<https://devfeed.tech/topics/google-cloud-identity.md>), [okta](<https://devfeed.tech/topics/okta.md>), [Logging](<https://devfeed.tech/topics/logging.md>), [Provisioning](<https://devfeed.tech/topics/provisioning.md>), [AWS CloudTrail](<https://devfeed.tech/topics/aws-cloudtrail.md>), [protected branches](<https://devfeed.tech/topics/protected-branches.md>), [GitHub](<https://devfeed.tech/topics/github.md>)

Tags: [aws](<https://devfeed.tech/tags/aws.md>), [ci-cd](<https://devfeed.tech/tags/ci-cd.md>), [cloudtrail](<https://devfeed.tech/tags/cloudtrail.md>), [deployment](<https://devfeed.tech/tags/deployment.md>), [github](<https://devfeed.tech/tags/github.md>), [logging](<https://devfeed.tech/tags/logging.md>), [okta](<https://devfeed.tech/tags/okta.md>), [patches](<https://devfeed.tech/tags/patches.md>), [protected-branches](<https://devfeed.tech/tags/protected-branches.md>), [security](<https://devfeed.tech/tags/security.md>), [soc2](<https://devfeed.tech/tags/soc2.md>), [terraform](<https://devfeed.tech/tags/terraform.md>)

### AI overview

The article recommends seven practices for startups that expect large-company clients to require a SOC 2 report: centralized identity with 2FA, pull-request controls and CI/CD, centralized logging, infrastructure provisioning with Terraform or a similar tool, AWS CloudTrail and AssumeRole, device management with encryption and current patches, and software vendor risk tracking. It also recommends documenting basic policies.

### Source excerpt

So, you plan to sell your startup's product to big companies one day. Congratu-dolences! Really, that's probably the only reason you should care about this article. If that's not you, go forth and live your life! We'll ask no more of your time. For the rest of you: Industry people talk about SOC2 a lot, and it's taken on a quasi-mystical status, not least because it's the product of the quasi-mystical accounting industry. But what it all boils down to is: eventually you'll run into big-company clients demanding a SOC2 report to close a sale. You know this and worry about it.