You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
A pull request sent from a fork of the upstream repository could be manipulated to expose any environment variables. The upstream repository’s maintainer would have no protection against this attack, as pull requests can be sent by anyone with a fork.
For the protection of secure data, Travis CI makes it available only on pull requests coming from the same repository. These are considered trustworthy, as only members with write access to the repository can send them.
Therefore you should consider running the Sauce Labs tests only if process.env.TRAVIS_SECURE_ENV_VARS === 'true'. Otherwise you could let Travis run the tests only in PhantomJS so pull requests can be verified to some degree.
The text was updated successfully, but these errors were encountered:
http://docs.travis-ci.com/user/pull-requests/#Security-Restrictions-when-testing-Pull-Requests:
Therefore you should consider running the Sauce Labs tests only if
process.env.TRAVIS_SECURE_ENV_VARS === 'true'
. Otherwise you could let Travis run the tests only in PhantomJS so pull requests can be verified to some degree.The text was updated successfully, but these errors were encountered: