Great question! The configuration is entirely stored in the git repository. This means any addition follows the same process as any piece of code the given git repository holds. Therefore, if there is a review process on the given git repository, then the reviewer and the author are in charge of making sure the PR looks valid and doesn't do anything suspicious. More over, if notice something wrong after the facts, the git history is here to trace when that happened and what PR caused it. Let me know if I can provide any additional info.
Bug 1801606 Comment 3 Edit History
Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.
Great question! The configuration is entirely stored in the git repository. This means any addition follows the same process as any piece of code the given git repository holds. Therefore, if there is a review process on the given git repository, then the reviewer and the author are in charge of making sure the PR looks valid and doesn't do anything suspicious. More over, if we notice something wrong after the facts, the git history is here to trace when that happened and what PR caused it. Let me know if I can provide any additional info.