2 ms·
This third party app gets write access to your repository, so it can do automated reviews of PRs? Why would you even grant it such permissions? this is ridicu
by pengaru 1y ago
This third party app gets write access to your repository, so it can do automated reviews of PRs?
Why would you even grant it such permissions? this is ridiculous.
- kmarc 1y agoBesides that this was clearly a security f*ckup, in my mind it's almost equivalent to running those third party liters in our Internet-connection-enabled editors and IDEs. Other than one banking project, I don't think I ever had to sandbox my editor in any way. Scary.