3 ms·

I saw this happen in a couple of orgs I’m in that don’t use Travis, at least to my knowledge

• nstart 4y ago
  If a team member uses a personal token with Travis and the personal token can access private org repos, there’s a chance this can trigger.
  • jghn 4y ago
    Absolutely. I hadn’t seen anything yet that was a smoking gun pointing at Travis. While it’s a likely candidate I wanted to voice that it might be another vector