News for hackers. Stuff that matters.
Re:Okta says its GitHub account hacked, source code stolen by e1g on Wednesday December 21, 2022 @06:59AM (#34079513)
GitHub Org admins have the option to block all regular PATs, and only allow fine-grained tokens that they pre-approve. This block is “off” by default, but I expect the best practice soon will be to enforce this rule.
Re:Okta says its GitHub account hacked, source code stolen by Aeolun on Wednesday December 21, 2022 @08:02AM (#34080155)
Oh, aside from the pre-approval, that would be really nice. I need stuff scoped to the org that is not necessarily connected to my personal account (and all it’s repositories).