News for hackers. Stuff that matters.

A comment on Heroku Security Notification. Parent comment

Re:Heroku Security Notification by pineconewarrior on Saturday April 16, 2022 @12:04AM (#31049362)
> It'd be great if Github could allow read/write permission grants on a per-repo basis. Maybe they do already!

They totally do. Shopify's Github integration works this way, and it is fantastic!

[ Parent | on HN ]
Re:Heroku Security Notification by bswinnerton on Saturday April 16, 2022 @12:11AM (#31049398)
These are known as GitHub apps and were designed to address this problem. https://docs.github.com/en/developers/apps/getting-started-w...
[ Parent | on HN ]
Re:Heroku Security Notification by TheSpiciestDev on Saturday April 16, 2022 @12:13AM (#31049404)
Thanks and I'm not surprised, it's a pretty intuitive feature! So really the only thing Heroku gets from these all-inclusive tokens is something to drive their type-a-head input on their integration page, right? Totally not worth it, I'd rather use Github's prompt.
[ Parent | on HN ]