Skip to content

Commit f8891ce

Browse files
authored
Merge branch 'master' into auto-dpl-v2-update-docs
2 parents a93ceca + c708e0c commit f8891ce

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

user/pull-requests.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -29,10 +29,10 @@ To only build pull requests targeting specific branches you can use [the `branch
2929

3030
The most important restriction for pull requests is about secure environment variables and encrypted data.
3131

32-
A pull request sent from a fork of the upstream repository could be manipulated to expose environment variables.
32+
A pull request sent from a fork of the upstream repository (we call it an "external pull request") could be manipulated to expose environment variables.
3333
The upstream repository's maintainer would have no protection against this attack, as pull requests can be sent by anyone who forks the repository on GitHub.
3434

35-
Travis CI makes encrypted variables and data available only to pull requests coming from the same repository. These are considered trustworthy, as only members with write access to the repository can send them.
35+
Travis CI makes encrypted variables and data available only to pull requests coming from the same repository ("internal pull requests"). These are considered trustworthy, as only members with write access to the repository can send them.
3636

3737
Pull requests sent from forked repositories do not have access to encrypted variables or data even if these are defined in the fork source project.
3838

0 commit comments

Comments
 (0)