Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on How to build an NPM worm.
Travis CI intentionally avoids this sort of vulnerability by never providing encrypted environment variables when running pull requests from forks:
https://docs.travis-ci.com/user/encryption-keys/
This is especially necessary because a pull request can make arbitrary code change, like "print the npm access token", which would then run as part of the test suite and show up in the public logs.
There are no comments on this comment yet.
Travis CI intentionally avoids this sort of vulnerability by never providing encrypted environment variables when running pull requests from forks:
https://docs.travis-ci.com/user/encryption-keys/
This is especially necessary because a pull request can make arbitrary code change, like "print the npm access token", which would then run as part of the test suite and show up in the public logs.