Travis CI & GitHub: Interoperability of Build Status Reporting for Fork Pull Requests
When a pull request originates from a fork, Travis CI must decide which .travis.yml to run, whether to expose secure environment variables, and how to report the resulting status back to GitHub. The .travis.yml is taken from the head branch of the pull request, which allows a malicious fork to alter build steps while secrets remain hidden. However, the exact
github