Skip to content

Remove independent public-issue creation from the publishing session #629

Closed

Description

@JacobStephens2

Remove the publishing session authority to create public issues independently so all public writes go through the validated staged path.

Private record: https://github.com/JacobStephens2/thirdshift/security/advisories/GHSA-jwc8-2c4w-hvm4

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    ready-for-agentFully specified, ready for an AFK agentsecurity-fixA fix for a reproduced Security finding

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions