3 ms·
+1 this a thousand times. The only way i have found to effectively lock things down is using an org and creating a new Github user just for third-party integrat
by kardon33 9y ago
+1 this a thousand times. The only way i have found to effectively lock things down is using an org and creating a new Github user just for third-party integrations.
- Kequc 9y agoBitbucket is fast, and I believe focuses on repository permissions. Have you tried them?
- kardon33 9y agoYes, though it has been a year or two. However it's more of a personal preference / fits within my normal work routine to use GH. I have a number of OS repos that, for community reasons, need to stay on GH, then most of my normal work is on GH which is generally where the concerns come in from a security standpoint.
- mrinterweb 9y agoI've done the same with creating multiple github user accounts . I think that is the only work around for some OAuth app integrations.