4 ms·
Yep, that works great for cases where you trust all your contributors. We do the same for some projects internally, too. However, for public projects where you
by grhmc 3y ago
Yep, that works great for cases where you trust all your contributors. We do the same for some projects internally, too. However, for public projects where you don't it gets a bit ... dicier. Glad to hear that's working for you!
- dlahoda 3y agowe have public oss project. i guess we were not attacked yet. prs from forks run only main workflows, and these run nix which is kind of isolated enough. i guess one could attack with some infinite nix store bomb.