Post #2978558

@yossarian@infosec.exchange yeah, it would be more visible at least I imagine (you need to push a commit to main to poison the cache, which you can't hide again if branch protection is on). But in the tanstack case, where it was read-only, it would have stopped things from what I understand.