Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

But that's why I said the test stage. Supposedly there is a step that runs for every single PR.

A lot of open source project have something like that too, where it's a lint checker or unit test runner or whatever.



You shouldn't be able to compromise `prod` from the `test` stage.


Tell that to the CIs with no env var scoping.

But yes, I get what you mean. It seems so weird to me that this scenario can be done.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: