Re:GitHub commit search: “remove password”
by chimeracoder on Wednesday February 15, 2017 @06:53AM
(#13651349)
Why would you ever want to share a valid Github API key publicly?
Re:GitHub commit search: “remove password”
by Klathmon on Wednesday February 15, 2017 @07:05AM
(#13651409)
It's been a while, but IIRC it was a key with no permissions used on a CI server to get around github's API usage limits.
It probably wasn't the best idea, but it was the only "secret" needed in the whole project and I didn't want to maintain a way of managing secrets in a public project for a pointless key.
In the end I did just that, and looking back it was the better choice, but at the time it was annoying.
Re:GitHub commit search: “remove password”
by Cyphase on Wednesday February 15, 2017 @08:46AM
(#13651914)
"... used ... to get around github's API usage limits."
I wonder why they'd want to invalidate that. :)
Re:GitHub commit search: “remove password”
by remmelt on Wednesday February 15, 2017 @07:00AM
(#13651384)
Continuous development, e.g. Jenkins? (Please don’t do this)
Re:GitHub commit search: “remove password”
by jayshua on Wednesday February 15, 2017 @08:35AM
(#13651850)
Why not?
Re:GitHub commit search: “remove password”
by arjie on Wednesday February 15, 2017 @10:00AM
(#13652420)
Out of curiosity, why not a deploy user? https://developer.github.com/guides/managing-deploy-keys/
Annoyingly there is no way to turn it off even when you explicitly want to share an API key knowingly. But i'm more than fine with needing to "obfuscate" an API key or manage secrets correctly knowing it saves TONS of people.