3 ms·
Curious why they would need to keep the GitHub integration down for a while longer. Are they afraid someone could still grab credentials?
by ec109685 5y ago
Curious why they would need to keep the GitHub integration down for a while longer. Are they afraid someone could still grab credentials?
- jxi 5y agoThey were using a legacy GitHub integration. Maybe it's inherently unsafe and they need to rewrite things using the new API.
- djbusby 5y agoAudit?
- dogecoinbase 4y agoGitHub is not allowing them to turn it back on yet (source: multiple people on both sides)
- jhealy 4y agoGitHub should insist on it being converted to a GitHub App before they allow it to be re-enabled. That way org admins can see the requested permissions and control exactly which repos are permitted. GitHub OAuth apps are an absolute nightmare to audit or control.