FWIW I'm glad I took a snapshot of the pull request...

FWIW I'm glad I took a snapshot of the pull request pages with https://archiveweb.page because GitHub have deleted the PR, so it's like it never existed.

Like 17 Apr 2021 at 20:47 | Open on social.coop

3 comments

Ed Summers

Another "user" started doing this too, so I guess my whitelisting of allowed actions wasn't enough to block the shell commands in the action. I'll just have to disable actions altogether for the moment.

GitHub have since added a form option for cryptocurrency mining when reporting abuse:

18 Apr 2021 at 14:57 | Open on social.coop

Ed Summers

This seems like a sensible solution: https://github.blog/changelog/2021-04-22-github-actions-maintainers-must-approve-first-time-contributer-workflow-runs/

23 Apr 2021 at 1:43 | Open on social.coop

Darius Kazemi

@edsu ha. Yes.

23 Apr 2021 at 1:50 | Open on friend.camp

Go Up