I’ve been running this setup for a few months now and haven’t looked back. Works super well, and essentially acts as an approval process for letting a container update or not.

The author also recently added a followup article to this one for using Forgejo instead, made migrating the setup super easy.