4 ms·
Not committing necessarily; there are plenty of GitHub Action triggers that a workflow can use that allow third-party use. I don’t think there’s a really direc
by woodruffw 2y ago
Not committing necessarily; there are plenty of GitHub Action triggers that a workflow can use that allow third-party use.
I don’t think there’s a really direct security risk here, per se: it’s just another way (there were plenty already) in which write implies execute in GHA.