Comment Comment by boxed "Can hold"? Meaning the attacker needs push access to a public repo? parent boxed 18 days ago
