{"action":"created","issue":{"url":"https://api.github.com/repos/drone/drone/issues/1441","labels_url":"https://api.github.com/repos/drone/drone/issues/1441/labels{/name}","comments_url":"https://api.github.com/repos/drone/drone/issues/1441/comments","events_url":"https://api.github.com/repos/drone/drone/issues/1441/events","html_url":"https://github.com/drone/drone/issues/1441","id":129354810,"number":1441,"title":"Whitelist Github users for PRs on public repos","user":{"login":"siddharthist","id":4294323,"avatar_url":"https://avatars.githubusercontent.com/u/4294323?v=3","gravatar_id":"","url":"https://api.github.com/users/siddharthist","html_url":"https://github.com/siddharthist","followers_url":"https://api.github.com/users/siddharthist/followers","following_url":"https://api.github.com/users/siddharthist/following{/other_user}","gists_url":"https://api.github.com/users/siddharthist/gists{/gist_id}","starred_url":"https://api.github.com/users/siddharthist/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/siddharthist/subscriptions","organizations_url":"https://api.github.com/users/siddharthist/orgs","repos_url":"https://api.github.com/users/siddharthist/repos","events_url":"https://api.github.com/users/siddharthist/events{/privacy}","received_events_url":"https://api.github.com/users/siddharthist/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":9,"created_at":"2016-01-28T06:30:27Z","updated_at":"2016-01-28T07:18:04Z","closed_at":"2016-01-28T07:13:37Z","body":"This ticket tracks @Cadair's point (1) in #1061.\r\n\r\nA great way to secure drone builds from PR attacks on public repos is to disable automated builds except for a limited whitelist of GH users. This relies on Github's own security features, which are quite strong. \r\n\r\nThis would allow public repos to automatically test uploads from frequent and trusted contributors without exposing themselves to the many risks of running unvetted code in Docker on their build server. "},"comment":{"url":"https://api.github.com/repos/drone/drone/issues/comments/176025959","html_url":"https://github.com/drone/drone/issues/1441#issuecomment-176025959","issue_url":"https://api.github.com/repos/drone/drone/issues/1441","id":176025959,"user":{"login":"bradrydzewski","id":817538,"avatar_url":"https://avatars.githubusercontent.com/u/817538?v=3","gravatar_id":"","url":"https://api.github.com/users/bradrydzewski","html_url":"https://github.com/bradrydzewski","followers_url":"https://api.github.com/users/bradrydzewski/followers","following_url":"https://api.github.com/users/bradrydzewski/following{/other_user}","gists_url":"https://api.github.com/users/bradrydzewski/gists{/gist_id}","starred_url":"https://api.github.com/users/bradrydzewski/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bradrydzewski/subscriptions","organizations_url":"https://api.github.com/users/bradrydzewski/orgs","repos_url":"https://api.github.com/users/bradrydzewski/repos","events_url":"https://api.github.com/users/bradrydzewski/events{/privacy}","received_events_url":"https://api.github.com/users/bradrydzewski/received_events","type":"User","site_admin":false},"created_at":"2016-01-28T07:18:04Z","updated_at":"2016-01-28T07:18:04Z","body":"@siddharthist awesome!  I realize it isn't the exact functionality you were looking for, but hopefully it seems like a good compromise. We can definitely work together to add one (or more) of these sort of plugins to the official plugin registry.\r\n\r\nI'm actually really excited about this.\r\n\r\n@gtaylor I think we could definitely achieve something similar to the Kubernetes bot. It would likely be a separate service that would be registered with your repository, and that the plugin would invoke, but I think it should be possible if we expose the right hooks from Drone."}}