4 ms·
That's github's service, before choosing to use it you should look at these policies (who and how github enterprise trust tokens) and see if it matches your nee
by iso1631 5y ago
That's github's service, before choosing to use it you should look at these policies (who and how github enterprise trust tokens) and see if it matches your needs.
If you were running the service, then the power to trust those tokens is with you.
- mjg59 5y agoYou're a 5-person startup. How do you verify that all of Github's token issuance policies align with your needs?
- iso1631 5y agoDon't. Run your own. It's a cost of business, you can either rely on the standard terms of your suppliers, or you can supply your own, it's far easier than the vast majority of industries. Git especially is a federated system that has no need for things like github.
- mjg59 5y agoOr we could invent better solutions where we didn't need to depend on policies imposed by vendors? The value that Github provides isn't around their git hosting, it's all the integrated features. Reimplementing that isn't going to be trivial - there's a reason so many people use hosted Git rather than doing it themselves.