6 ms·

This app installed webhooks on all of my repos with no automated way to remove them. Very annoying.

by thedjinn 10y ago

lobster_johnson 10y ago
Can the OP respond to this? I have _tons_ of repos and don't want to end up in the same situation.
kogir 10y ago
You're right, and we're working on a solution for this now.
- thedjinn 10y ago
  In the meantime I suggest you warn trial users about this. I had to manually remove it from 40 repositories.
- robbiet480 10y ago
  Please work faster, I wasn't alerted that a webhook would be added and now I have 200+ repos that need to have a webhook removed...
- lobster_johnson 10y ago
  I dearly hope the solution involves not installing webhooks on all one's repositories. Not sure I understand what the webhook is for. (I've not yet installed the app — because of this issue.) Is this done in order to automatically track Github issue changes? If so, what happens if you want to use this app on a project that you don't have admin rights to?
tranvu 10y ago
I was about to download but I saw this comment. Thank you sir.
robbiet480 10y ago
I didn't want to wait for a solution that may never come for the webhooks added to 200+ repos of mine/that I have access to, so I hacked this script together. https://gist.github.com/robbiet480/2f095c910e56255c412d850400e90b07 https://gist.github.com/robbiet480/2f095c910e56255c412d85040...
- kogir 10y ago
  Thanks, and sorry. You shouldn't have had to write this.
ezekg 10y ago
Yeah… I downloaded but immediately uninstalled after wanting to connect and access data for my private repos. No thanks — I have multiple revenue-generating side projects that are developed on GitHub. I just couldn't get myself to push that authorize button. (I know this is partly on GitHub, but still.)
kogir 10y ago
We fucked up here, and I apologize. Many thanks to robbiet480 for writing a script to help clean it up. We've just pushed new client and server versions to cleanup hooks when the last admin user logs out. New downloads will be the latest version, and current users can update now using the Ship -> Check for Updates menu option. After that, you can logout using Ship -> Account -> Logout. If you used the app earlier and want to be sure all hooks are cleared out, you can log back in once more and then logout again to trigger the removal. There is also updated documentation here: https://www.realartists.com/docs/2.0/uninstall.html https://www.realartists.com/docs/2.0/uninstall.html So about hooks - Hooks are added so that Ship is alerted when new repos are created, issues/labels/milestones/comments are added/modified/deleted, issue templates change, etc. The user experience without hooks is acceptable, but not great. Presumably if you're using Ship, you want it to show the most up to date information. We disclose when you authorize Ship that you're granting repository and organization webhook permissions. This appears to be insufficient notice. We'll think about that next. If anyone is still having trouble or needs personalized help, we're reachable at support@realartists.com.
- zyxzkz 10y ago
  So..., why did you have to install the webhooks in the first place?
  - pault 10y ago
    > Hooks are added so that Ship is alerted when new repos are created, issues/labels/milestones/comments are added/modified/deleted, issue templates change, etc.
- lemming 10y ago
  Have you considered only adding webhooks per-repo, and not globally? I have access to numerous repos that I don't want or need real-time updates from, as well as repos from organisations that have added me which I would really rather not touch. They would probably not be happy that their repos are suddenly sending data to a third party that they didn't consent to. I would love something like Ship for my main public repo, and in fact would prefer to just use Ship for that repo.

This app installed webhooks on all of my repos with no automated way to remove them. Very annoying.

lobster_johnson 10y ago

Can the OP respond to this? I have _tons_ of repos and don't want to end up in the same situation.

kogir 10y ago

You're right, and we're working on a solution for this now.

thedjinn 10y ago
In the meantime I suggest you warn trial users about this. I had to manually remove it from 40 repositories.
robbiet480 10y ago
Please work faster, I wasn't alerted that a webhook would be added and now I have 200+ repos that need to have a webhook removed...
lobster_johnson 10y ago
I dearly hope the solution involves not installing webhooks on all one's repositories. Not sure I understand what the webhook is for. (I've not yet installed the app — because of this issue.) Is this done in order to automatically track Github issue changes? If so, what happens if you want to use this app on a project that you don't have admin rights to?

tranvu 10y ago

I was about to download but I saw this comment. Thank you sir.

robbiet480 10y ago

I didn't want to wait for a solution that may never come for the webhooks added to 200+ repos of mine/that I have access to, so I hacked this script together. https://gist.github.com/robbiet480/2f095c910e56255c412d850400e90b07 https://gist.github.com/robbiet480/2f095c910e56255c412d85040...

kogir 10y ago
Thanks, and sorry. You shouldn't have had to write this.

ezekg 10y ago

Yeah… I downloaded but immediately uninstalled after wanting to connect and access data for my private repos. No thanks — I have multiple revenue-generating side projects that are developed on GitHub. I just couldn't get myself to push that authorize button. (I know this is partly on GitHub, but still.)

kogir 10y ago

We fucked up here, and I apologize. Many thanks to robbiet480 for writing a script to help clean it up. We've just pushed new client and server versions to cleanup hooks when the last admin user logs out. New downloads will be the latest version, and current users can update now using the Ship -> Check for Updates menu option. After that, you can logout using Ship -> Account -> Logout. If you used the app earlier and want to be sure all hooks are cleared out, you can log back in once more and then logout again to trigger the removal. There is also updated documentation here: https://www.realartists.com/docs/2.0/uninstall.html https://www.realartists.com/docs/2.0/uninstall.html So about hooks - Hooks are added so that Ship is alerted when new repos are created, issues/labels/milestones/comments are added/modified/deleted, issue templates change, etc. The user experience without hooks is acceptable, but not great. Presumably if you're using Ship, you want it to show the most up to date information. We disclose when you authorize Ship that you're granting repository and organization webhook permissions. This appears to be insufficient notice. We'll think about that next. If anyone is still having trouble or needs personalized help, we're reachable at support@realartists.com.

zyxzkz 10y ago
So..., why did you have to install the webhooks in the first place?
- pault 10y ago
  > Hooks are added so that Ship is alerted when new repos are created, issues/labels/milestones/comments are added/modified/deleted, issue templates change, etc.
lemming 10y ago
Have you considered only adding webhooks per-repo, and not globally? I have access to numerous repos that I don't want or need real-time updates from, as well as repos from organisations that have added me which I would really rather not touch. They would probably not be happy that their repos are suddenly sending data to a third party that they didn't consent to. I would love something like Ship for my main public repo, and in fact would prefer to just use Ship for that repo.