5 ms·
>For a security related product, this creates a huge attack surface and audit requirement. We agree. We spent a lot of time debating this. We originally set o
by phillmv 14y ago
>For a security related product, this creates a huge attack surface and audit requirement.
We agree. We spent a lot of time debating this.
We originally set out to build a gem, but realized it was so much easier to use through GitHub. Unfortunately, we can't provide more granular access due to what the API gives us.
We plan on eventually releasing said gem, as noted in the "I don't use github" link on the front page :).
- mrgreenfur 14y agoWhat about a functionality where I can upload my gemfile when I deploy? I deploy, cap sends you my gemfile and you notify me.
- phillmv 14y agoExactly what we had in mind. Soon!
- stephenhuey 14y agoLooking forward to it!
- kalv 14y agoYep +1 on this. I started to look into implementing this on a project but we too are not ok with giving Github access. On deploy posting the Gemfile is something that came to my mind too and would work.