News for hackers. Stuff that matters.

A comment on We stopped AI bot spam in our GitHub repo using Git's –author flag. Parent comment

Re:We stopped AI bot spam in our GitHub repo using Git's –au... by orlp on Monday May 18, 2026 @12:21PM (#48181839)
No it doesn't have security implications.

If you are insecure because someone has had one of their otherwise completely innocent PRs merged into your repo... you are insecure, period.

[ Parent | on HN ]
Re:We stopped AI bot spam in our GitHub repo using Git's –au... by lgrapenthin on Monday May 18, 2026 @12:30PM (#48181953)
What you are describing is exactly a security implication.
[ Parent | on HN ]
Re:We stopped AI bot spam in our GitHub repo using Git's –au... by stavros on Monday May 18, 2026 @12:36PM (#48182012)
Security isn't a binary "secure/insecure". You can be more or less secure than something.
[ Parent | on HN ]