diff --git a/docs/spec/draft/threats.md b/docs/spec/draft/threats.md index f5cce2557..735a67b1d 100644 --- a/docs/spec/draft/threats.md +++ b/docs/spec/draft/threats.md @@ -89,7 +89,7 @@ Threats in this category can be mitigated by following source control management *Threat:* Submit code to the source repository without another person reviewing. -*Mitigation:* The producer can require pre-approval for all changes. +*Mitigation:* The producer requires approval of all changes before they are accepted. *Example:* Adversary directly pushes a change to a git repo's `main` branch. Solution: The producer can configure branch protection rules on the `main` branch.