Dennis Kaarsemaker [off-list ref] writes:
On zo, 2015-10-04 at 10:46 -0700, Junio C Hamano wrote:
quoted
One final question. Which configuration file does the CI use when
running a PR-initiated test? The one already in the repository
i.e. the target of the proposed pull, or the one that is possibly
updated by the PR?
I am wondering if that can be an avenue for a possible mischief.
The latter. And it can, as it can enable notifications.
So it can add a slight annoyance if somebody wanted to, but not much
over the annoyance a random pull-request can already give to project
participants. IOW, nothing to worry about.
Thanks.