2 ms·
This action by GitHub will help prevent this type of exploit, which seems like a good thing. Folks who haven’t merged a pull request before will need approvals
by ec109685 6y ago
This action by GitHub will help prevent this type of exploit, which seems like a good thing. Folks who haven’t merged a pull request before will need approvals to trigger an action: https://github.blog/2021-04-22-github-actions-update-helping-maintainers-combat-bad-actors/ https://github.blog/2021-04-22-github-actions-update-helping...
- haik90 6y agoI don't think this prevent this exploit because it mergered by bot (BrewTestBot in this case). An this exploit still working if any of contributor create malicious update