Skip to content

Revert "CI: temporarily disable release check for PRs" - #156

Merged
jandubois merged 1 commit into
lima-vm:masterfrom
AkihiroSuda:ci
Mar 2, 2026
Merged

Revert "CI: temporarily disable release check for PRs"#156
jandubois merged 1 commit into
lima-vm:masterfrom
AkihiroSuda:ci

Conversation

@AkihiroSuda

Copy link
Copy Markdown
Member

Revert:

I was overreacting to https://www.stepsecurity.io/blog/hackerbot-claw-github-actions-exploitation .
We were not vulnerable because we had no workflows that permitted triggers from pull_request_target, issue_comment, or anything similar events.

This reverts commit e483e5c.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
@AkihiroSuda AkihiroSuda added this to the v1.2.3 milestone Mar 2, 2026
@jandubois
jandubois merged commit a5e9659 into lima-vm:master Mar 2, 2026
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants