You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I was reflecting re this issue, and I feel it should not be the repository to control which rule is disabled, but the rule itself.
I think I'll add a metadata.allowlist and a metadata.blocklist containing regexes of repo names we want, or we don't want to apply rules on.
The incentive for devs to just block random rules is too high haha? Only issue could be disclosure of private repo names in the public security-action repo, but we can choose to ignore this.
I don't want this to be abused, but for brave.com it would be helpful to ignore certain rules such as templated hrefs.
The text was updated successfully, but these errors were encountered: