Re:GitHub push protection is free for all public repositories
by darthbanane on Thursday May 11, 2023 @01:01AM
(#35897756)
Yeah definitely better than allowing the push. But I feel they should also at least recommend rotating the secret
[ Parent
| on HN ]
Re:GitHub push protection is free for all public repositories
by minedwiz on Thursday May 11, 2023 @01:16AM
(#35897878)
My team checked out the similar thing they're pushing in ADO (https://learn.microsoft.com/en-us/azure/defender-for-cloud/a...). The messages from that thing do tell you to rotate, though AFAIK not having looked that far into it just breaks the build, not proactive push detection.