Github PR deployments are suddenly being blocked for unknown author

Recently, Github PR preview deployments now require manual approval by myself for other peoples PRs. This was something that worked fine last week

Below is what I know see. When I click the link provided it takes me to a blank page (not the undefined in the url).

Any ideas to why this is and how I can fix it?


**You’ve received a Deploy Preview request from a fork by an unrecognized author**

This site is using the default sensitive variable policy, which requires site member approval for untrusted deploys when potentially sensitive environment variables are detected in your site configuration. You can [change your sensitive variable policy](https://app.netlify.com/teams/chrisolsen/undefined).

Hi, thanks for reaching out! Can you share the site ID you are seeing this error?

Hey Sam,

It is for abgov-ui-component-docs

Thanks for any help

The error message clearly explains the reason for this. Your site has some environment variables that might be sensitive. In order to protect them from being exposed to malicious users, we are asking you to approve the PRs. You can choose to allow anyone to submit PRs at the cost of security. There’s a third option to not pass on environment variables to these PRs.

It’s the blank env var in the env.tmpl triggering this? Because that is the only thing that I know of that might be considered, but this is a false flag. And if that is the case does that explain why every PR after this is requires approval?

So the issue isn’t obvious because of what I mentioned above.

You have an API key in your environment variables in the UI.