3 ms·
I haven't tested this but the main risk that is possible is users creating PRs on public repositories with actions that run on pull request.
by hk1337 1y ago
I haven't tested this but the main risk that is possible is users creating PRs on public repositories with actions that run on pull request.
- 1oooqooq 1y agoif your unprotect pr job can have side effects besides accessing the public repo and returning a boolean for passing status, what hope is there?
- throwaway290 1y agoany job can have side effects so there is no hope indeed