Risk of publishing dev github code to prod tenant

I also did see build & publish with approval .. couldn’t find any documentation on that