News for hackers. Stuff that matters.

A comment on Read-only deploy keys. Parent comment

Re:Read-only deploy keys by eeeeeeeeeeeee on Tuesday June 16, 2015 @11:23PM (#9729919)
You can have a read-write user on your CI server, but use a read-only user for any remote server where code is deployed. It's bad security policy that GitHub ever allowed deploy keys to be RW.
[ Parent | on HN ]

There are no comments on this comment yet.