ayagmar commented on PR #15865: URL: https://github.com/apache/lucene/pull/15865#issuecomment-4120400720
> > Hmm do you have any recommendations? > > I can trigger the backport on push to main instead of pr events, would you prefer this? > > I don't have any specific recommendations, but too many open source projects are getting hacked via `pull_request_target`, so i think we really need to avoid opening up a vector for trouble here. > > push to main sounds much better!! I agree and sorry about that haha, I've also been seeing the pwns and it's getting scary -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
