Comment on Automatically Building Pull Requests from GitHub by Ricky Clarkson

Isn’t this a security risk at least for public repositories? A build could involve executing arbitrary code, and you wouldn’t want to execute arbitrary code on your build server that people you don’t know send as pull requests.