minder
minder copied to clipboard
Minder to handle the pull request reopened webhook event
Currently Minder is not handling the pull request reopened webhook action.
This may be exploited by:
- Opening a PR and closing it immediately.
- Re-opening it later with the malicious content, i.e. adding a vulnerable package.
Minder will get the event but it will not process it thus allowing for this PR to move forward.