Any site administrator can block all force pushes (git push --force) on a GitHub Enterprise appliance.

Each repository inherits a default force push setting from the settings of the user account or organization to which it belongs. Likewise, each organization and user account inherits a default force push setting from the force push setting for the entire appliance. If you change the force push setting for the appliance, it will change for all repositories owned by any user or organization.

  1. As a site admin, sign in to your GitHub Enterprise instance at http(s)://[hostname]/login.

  2. In the upper-right corner of any page, click . Rocketship icon for accessing site admin settings

  3. In the left sidebar, click Advanced Settings. Advanced Settings tab

  4. In the Key field, type git.reject_force_push. New setting key

  5. In the Value field, type the desired value.

    • To block force pushes on all branches, type all. New setting all branches value
    • To block force pushes on the default branch only, type default. New setting default branch only value

  6. To prevent this setting from being overridden by user, organization, or repository settings, select Policy. Policy radio button

  7. Click Add. Add setting

The change takes effect immediately. You should now see the new setting listed:

Apply setting

Further reading