My employer is similar but a little stricter about how we use GitHub pull requests. All new code goes in via pull request. All pull requests are reviewed by another developer. Almost all pull requests are sent to QA to test acceptance criteria. The sneaky commit will get you many frowny faces on chat. It works rather well. Does anyone else work like this?
curious. what industry are you in?
Web development consulting. We are the development team behind multiple funded startups - mercenaries for hire.