4 ms·
Once again[1][2], scanning alerts on private repos are only sent to owners. Whereas public repos are, you know, public. It's really tiring that people correct
by oefrha 4y ago
Once again[1][2], scanning alerts on private repos are only sent to owners. Whereas public repos are, you know, public.
It's really tiring that people correct other people's misinformation when they themselves haven't read the bold bullets points in "Learn more about secret scanning"[3] and end up totally missing the point.
[1] https://news.ycombinator.com/item?id=34067335 https://news.ycombinator.com/item?id=34067335
[2] https://news.ycombinator.com/item?id=34067625 https://news.ycombinator.com/item?id=34067625
[3] https://docs.github.com/en/code-security/secret-scanning/about-secret-scanning https://docs.github.com/en/code-security/secret-scanning/abo...
- jopsen 4y agoAh yeah, that's a good point. Honestly, I'm just very happy GitHub is doing this, because we've all made these mistakes. And it's so easy for then to hide in git revision history. Only the be found when someone scans for the secrets.