"External status checks" can be accepted by users below developer access if the user is either author or assignee of the target merge request https://hackerone.com/reports/1375393 Severity: Medium | 610 USD Reported To: GitLab Reported By: #joaxcar State: Resolved Disclosed: June 8, 2022, 2:04pm (UTC) 153 views14:06