Github Actions

From Apertium
Revision as of 13:31, 17 April 2021 by Popcorndude (talk | contribs) (Created page with "Github Actions seems like a nice way to do continuous integration, but building other people's code from a pull request is a security vulnerability: https://securitylab.github...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

Github Actions seems like a nice way to do continuous integration, but building other people's code from a pull request is a security vulnerability: https://securitylab.github.com/research/github-actions-preventing-pwn-requests/

Fortunately, we only need to get it right once and then we can have a shared copy between different repos: https://docs.github.com/en/actions/learn-github-actions/sharing-workflows-with-your-organization