Consider disabling the push operation?

git remote set-url --push origin non-existent_path

Make push point to a non-existent path so that it fails every time it is push

At this point, git fetch will still work, but git push will fail.