News for hackers. Stuff that matters.

A comment on CircleCI trusts 8 analytics companies with your source code and API tokens. Parent comment

Re:CircleCI trusts 8 analytics companies with your source co... by dabernathy89 on Tuesday October 10, 2017 @12:55PM (#15443341)
considering Gitlab has integrated CI, I'd say this is more than "tangentially" related. Developers are going to wonder if their CI tool is protected from this kind of issue.
[ Parent | on HN ]
Re:CircleCI trusts 8 analytics companies with your source co... by dschep on Tuesday October 10, 2017 @02:27PM (#15444143)
Yup. Especially given OPs comments:

> To be clear, letting third party JS run in a trusted environment like a dashboard is an industry wide problem. If we assume CircleCI is the only bad actor we're kind of missing the point of the exercise.

[ Parent | on HN ]