Question

A team deploys to production using a job that references `environment: production`. Security requires that no deployment to production proceeds without explicit human sign-off from a designated release manager, and that the workflow pauses until that approval is granted. Which configuration on the production environment satisfies this requirement?

Accepted Answer

Add a required reviewers protection rule listing the release manager to the production environment

Answer

Set a wait timer of 60 minutes on the production environment so the deployment delays before running

Answer

Store the deployment credentials as an environment secret scoped to production

Answer

Add a branch protection rule requiring a pull request review before merging to main