3 ms·
Shouldn't GitHub put in some sort of warning for potential leaks when they happen?
by aflag 8y ago
Shouldn't GitHub put in some sort of warning for potential leaks when they happen?
- gcommer 8y agoFrom the paper: "GitHub recently introduced a beta version of Token Scanning" https://help.github.com/en/articles/about-token-scanning https://help.github.com/en/articles/about-token-scanning https://github.blog/2018-10-17-behind-the-scenes-of-github-token-scanning/ https://github.blog/2018-10-17-behind-the-scenes-of-github-t...
- aflag 8y agoThat's ok, I guess. But I was thinking more in the lines of blocking the push unless you disabled the feature from your repo.
- LyndsySimon 8y agoI believe they have it - I've gotten notified in the past when I committed secrets on purpose, for test applications. I'm not 100% sure they were from GitHub, but I think they were.
- deleted 8y ago[deleted]
- Pawamoy 8y agoI once pushed a GitHub token in a public repository. They immediately revoked the token and notified me by email.