we have public oss project. i guess we were not attacked yet. prs from forks run only main workflows, and these run nix which is kind of isolated enough. i gu

we have public oss project. i guess we were not attacked yet. prs from forks run only main workflows, and these run nix which is kind of isolated enough. i guess one could attack with some infinite nix store bomb.