If you have an open source project, you could have a separate repo or branch that your CI runs on, and only merge into the docker branch when everything passes. This way you provide full visibility into what code the container was built from, while retaining the other features.
For further actions, you may consider blocking this person and/or reporting abuse
We're a place where coders share, stay up-to-date and grow their careers.
If you have an open source project, you could have a separate repo or branch that your CI runs on, and only merge into the docker branch when everything passes. This way you provide full visibility into what code the container was built from, while retaining the other features.