github-community-projects / private-mirrors

A GitHub App that allows you to contribute upstream using private mirrors of public projects
MIT License
119 stars 12 forks source link

Verify ownership of fork/mirror on push event for single instance mode #169

Open ajhenry opened 2 months ago

ajhenry commented 2 months ago

Is your feature request related to a problem?

Since we are pushing towards offering this as an app that can be installed for many users. We need to add better protections when sync repos on a push event.

Describe the solution you'd like

We need to verify that the owner of the push event is the same owner for the source and destination.

Describe alternatives you've considered

No response

Additional context

No response