News for hackers. Stuff that matters.

A comment on Dependency Confusion: How I Hacked Into Apple, Microsoft and Other Companies. Parent comment

Re:Dependency Confusion: How I Hacked Into Apple, Microsoft ... by seg_lol on Wednesday February 10, 2021 @06:38AM (#26087957)
That explains why at a place I worked we had multiple github orgs for different subteams, and/or they were really cheap ... yeah confused now.
[ Parent | on HN ]
Re:Dependency Confusion: How I Hacked Into Apple, Microsoft ... by RyJones on Wednesday February 10, 2021 @06:43AM (#26087987)
We also have multiple orgs, but we hit the requirement that you only have one bot account. It would be super nice if GitHub allowed much tighter scoping for PATs.

I don’t know how many GitHub orgs the Linux Foundation has, but... hundreds? Having one bit account with wide permissions is a non starter

[ Parent | on HN ]