3 ms·
This is why for private and business projects, we don't use GitHub, we use Amazon CodeCommit.
by fortran77 2y ago
This is why for private and business projects, we don't use GitHub, we use Amazon CodeCommit.
- makach 2y agoThe article states that this “vulnerability” might exist in other scm systems as well
- swozey 2y agoBecause of literally this issue? I'm not sure if you're doing a generic "I don't like github" or know for a fact that CodeCommit doesn't have issues like this. This seems like a terrible security vector but I'm not sure migrating thousands of repos out of github vs. training engineers to keep public and private repos completely separated makes sense and you haven't explained why you use CodeCommit. Unless it is this reason, which like I said, seems a bit heavy handed, but I rarely move private repos to public. I kind of assumed this was a distributed Git problem, not Github, but I don't know.
- fortran77 2y agoI use and like github for open source and publically shared projects.