GitHub Actions update: Helping maintainers combat bad actors

Re:GitHub Actions update: Helping maintainers combat bad actors by villasv on Thursday April 22, 2021 @09:21PM (#26910058)

I think blocking the PR author instead of the original project is a good move. Adding more manual labor to maintainers, not so much.

I don’t have an alternative solution, though. I wish it would at least pass through PRs opened from GitHub citizens with some form of reputation.

[ Parent | on HN ]

Re:GitHub Actions update: Helping maintainers combat bad actors by miohtama on Friday April 23, 2021 @07:42AM (#26913678)

After Github has enough data, it can automatically identify malicious contributors. Facebook, Twitter, already do this for spam. But you are still going to need manual reports to get data.

[ Parent | on HN ]