Re:CloudBee's CodeShip Critical Security Notification
by ejcb on Wednesday September 30, 2020 @05:00PM
(#24643773)
Hey, there - CodeShip employee here.
I can understand the language ambiguity, but note that there are two posts there. The initial post, focused only on the Github token breach, as well as the updated post expanding the scope.
The line quoted is referring to the scope in the update, not the original Github token breach which we noted originally did in fact mean repos had potentially been compromised.
I can understand the language ambiguity, but note that there are two posts there. The initial post, focused only on the Github token breach, as well as the updated post expanding the scope.
The line quoted is referring to the scope in the update, not the original Github token breach which we noted originally did in fact mean repos had potentially been compromised.