GitHub Container Registry

Re:GitHub Container Registry by Latty on Tuesday September 01, 2020 @05:09PM (#24347089)

Is this another GitHub thing with only user-scoped access tokens rather than project scoped? I really don't like that and I'm surprised people are seemingly fine with it.

[ Parent | on HN ]

Re:GitHub Container Registry by cmwelsh on Tuesday September 01, 2020 @07:33PM (#24348347)

Service accounts are a valid security pattern - what does it mean, project scoped?

[ Parent | on HN ]

Re:GitHub Container Registry by Latty on Tuesday September 01, 2020 @08:51PM (#24348896)

I mean, let me limit a token's access to only a certain repository or subset of images or whatever the service is, rather than anything in my account.

Separate accounts are a massive pain to manage by comparison.

[ Parent | on HN ]

Re:GitHub Container Registry by chopraaa on Wednesday September 02, 2020 @08:36AM (#24352597)

It would be a valid security pattern if it was created under the org scope, but it isn't.

A "service account" on GitHub is just another user account tied to a real user with that users MFA (if MFA is enabled, and since we're referring to valid security patterns, it should be).

GitHub's organizational features are poor.

[ Parent | on HN ]