our internally used development process demands that we formally prove that all commits that were pushed are covered by a review (=pull request).
I know that if we would have enabled branch protection since the beginning of existence of a repo and its branches no commit can be pushed to the protected branches without a review/pull request.
Our internal auditors unfortunately are not satisfied with only looking at pull requests and telling them "The process does not allow to not cover a commit with a review".
Any idea how this could be accomplished? Can I fetch all the data via REST API and create a report on my own or is there something already existing, did not find anything in that direction in the web ui.
Thank you