minder icon indicating copy to clipboard operation
minder copied to clipboard

Minder to handle the pull request reopened webhook event

Open rdimitrov opened this issue 1 year ago • 0 comments

Currently Minder is not handling the pull request reopened webhook action.

This may be exploited by:

  • Opening a PR and closing it immediately.
  • Re-opening it later with the malicious content, i.e. adding a vulnerable package.

Minder will get the event but it will not process it thus allowing for this PR to move forward.

rdimitrov avatar May 20 '24 12:05 rdimitrov