News for hackers. Stuff that matters.

A comment on GitHub “allows” unauthorized users “merging” PRs, bypass write permission check?.

Re:GitHub “allows” unauthorized users “merging” PRs, bypass ... by RicoElectrico on Thursday August 25, 2022 @03:53PM (#32599138)
Tangential question - how do I check a list of people who can write to a public GitHub repo and merge a PR? Especially so if said repo is under a personal profile, not an organization.
[ Parent | on HN ]
Re:GitHub “allows” unauthorized users “merging” PRs, bypass ... by judge2020 on Thursday August 25, 2022 @04:46PM (#32599735)
settings -> collaborators. If you aren't a owner/admin of the repo you can't see the users with push permission.
[ Parent | on HN ]