const hasStoreApiRouteChanges = () => {
    for (let file of danger.git.modified_files) {
        if (file.includes('SalesChannel') && file.includes('Route.php') && !file.includes('/Test/')) {
            return true;
        }
    }

    for (let file of danger.git.created_files) {
        if (file.includes('SalesChannel') && file.includes('Route.php') && !file.includes('/Test/')) {
            return true;
        }
    }

    return false;
}
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.