3 ms·
No it doesn't have security implications. If you are insecure because someone has had one of their otherwise completely innocent PRs merged into your repo... y
by orlp 5mo ago
No it doesn't have security implications.
If you are insecure because someone has had one of their otherwise completely innocent PRs merged into your repo... you are insecure, period.
- lgrapenthin 5mo agoWhat you are describing is exactly a security implication.
- stavros 5mo agoSecurity isn't a binary "secure/insecure". You can be more or less secure than something.