Re:GitHub Actions update: Helping maintainers combat bad actors
by saddlerustle on Friday April 23, 2021 @12:53AM
(#26911085)
It's really for their benefit rather than maintainers. The actions abuse was apparently a major capacity issue.
Well, from the blog post, that's one of the changes they outlined:
> Specifically, if we determine an Actions run to be abusive or against our terms, our enforcement will be directed at the account hosting the fork and not the account associated with the upstream repository
My guess is the reputation was a naive initial implementation, designed to prevent against someone opening a Github account, creating a mining action and running it. They probably just didn't consider these scenarios carefully when first applying reputation to pull requests, and this blog posts is them fixing it.