Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
benfrancom
3 months ago
|
parent
|
context
|
favorite
| on:
Shai-Hulud compromised a dev machine and raided Gi...
If github, take a look at gh cli or git credential manager:
https://docs.github.com/en/get-started/git-basics/caching-yo...
progbits
3 months ago
[–]
I wouldn't say that's better. Now your .config directory contains a github token that can do more than just repo pull/push, and it is trivially exfiltrated. Though similar thing could be said for browser cookies.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
https://docs.github.com/en/get-started/git-basics/caching-yo...