3 ms·
Might also help with thwarting easy access to tokens/keys... especially for those that are not currently in their filtered list. While a bad actor can certainl
by ldoughty 3y ago
Might also help with thwarting easy access to tokens/keys... especially for those that are not currently in their filtered list.
While a bad actor can certainly scrape/clone the same data... Given repos with thousands of files... Scanning by scraping vs searching vs cloning.... Search is certainly the cheapest for the attacker while the most expensive for GitHub
- Thorrez 3y agoThat could be mostly solved by requiring login only for searches across all repos. Searches in a single repo could be anonymous. In fact, that's exactly how it was until in June GitHub started requiring login for searches even in just a single repo.