Have you tried switching to the fork-and-pull-request model instead of everyone directly committing to the main repo?

(It's how many, many open-source projects run, and GitHub has a good write-up of it here: https://help.github.com/articles/using-pull-requests )

I think that you have bigger problems if anyone anywhere has commit privileges to your repository. You must trust your commitors. Am I missing something?