3 ms·
You're mistaking "know" with "care," since my experience has been that people know way more than they care And I'm pretty certain that private repos are exempt
by mdaniel 1y ago
You're mistaking "know" with "care," since my experience has been that people know way more than they care
And I'm pretty certain that private repos are exempt from the platform's built-in secret scanners because they, too, erroneously think no one can read them without an invitation. Turns out Duo was apparently just silently invited to every repo : - \
- tough 1y agoI also remember reading about how due to how the git backend works your private git repos branches could get exposed to the public, so yea don't treat a repository as a private password mananger good point the scanner doesnt work on private repos =(