3 ms·
Right. You'd need lock-down-all-AWS-controlled-by-the-foo-key because CircleCI got hacked and it had the foo-key. Sounds like a separate product (something ab
by __MatrixMan__ 4y ago
Right. You'd need lock-down-all-AWS-controlled-by-the-foo-key because CircleCI got hacked and it had the foo-key.
Sounds like a separate product (something about breaches and blast radii) and not a CircleCI feature.
- p-e-w 4y agoThe product already exists, it's called OAuth. All you need is an additional role that you can authorize: CircleCI would like to: - Upload build artifacts - Report security incidents Then in GitHub (or wherever), you have the aforementioned checkbox. So when CircleCI reports the incident, the GitHub account is locked down.
- namaria 4y agoYou mean hanging whole sections of our value chain on other companies' assets was not the best idea?