3 ms·
Normal Heroku usage doesn’t download a zip because it uses git directly, but I’ve seen plenty of CI tools download zips.
by heartbreak 5y ago
Normal Heroku usage doesn’t download a zip because it uses git directly, but I’ve seen plenty of CI tools download zips.
- domh 5y agoI thought as much. Maybe it is CircleCI then.
- all-the-lights 5y agoIncluding Heroku CI? We don't use an external CI tool (or really any other integrations except GH), but I do see these download logs.
- heartbreak 5y agoFor what it's worth, elsewhere in this comment section someone posted that Github Support says the zip downloads weren't related to this incident. Reading between the lines, the compromised repos were probably accessed using normal git clone actions.
- all-the-lights 5y agoThat was me who posted that :) seems unrelated, but still hoping to get that figured out anyway.