News for hackers. Stuff that matters.
Re:Heroku April 2022 Incident Review by jansan on Tuesday June 14, 2022 @02:05PM (#31743430)
Is it known who at Github can access private customer repos?
Re:Heroku April 2022 Incident Review by vorpalhex on Tuesday June 14, 2022 @02:09PM (#31743491)
I'd assume everyone who works there. They aren't encrypted or anything. If you have hardware access you have full github access.
Re:Heroku April 2022 Incident Review by jeremymcanally on Tuesday June 14, 2022 @03:34PM (#31744856)
But I can definitively say that any repo access is heavily logged. And this info is from like almost 10 years ago when I had first hand experience. I know they've upped their game in terms of repository access gating since then.