Part 4 of 5
Key features for in-house teams
Protected branches
Block direct changes to main. Require a pull request, at least one approval and passing checks.
CODEOWNERS
A file that names who must review changes to each folder, for example the pathology lead for tie-pathology-orders.
# CODEOWNERS
/channels/ @example-trust/integration-maintainers
/docs/ @example-trust/integration-maintainersIssues and Projects
Track requests, defects and supplier actions in one place, and link them to the pull requests that fix them.
Actions
Automatically check every change: validate HL7 or FHIR samples, lint scripts, and check for accidentally committed secrets.
Secret scanning and push protection
GitHub blocks commits that contain known types of passwords and keys. Turn this on for every repository.
Releases and tags
Tag the version that was deployed (for example v2026.10.1) so you always know what is live.