-
-
Notifications
You must be signed in to change notification settings - Fork 327
Open
Labels
Type: SecurityAffects securityAffects securityType: Technical issueImprove something that users won't noticeImprove something that users won't notice
Description
Describe the issue
When you use the release notes script, it requests you put a GitHub token on disk in a token.json file. This is insecure as other rogue apps could harvest and exfiltrate this token.
Describe the improvement you'd like
Prompt the user for the token and only keep it in memory for the duration of the script's run time.
Describe alternatives you've considered
- Keep it as is
- do a 1pass integration
Metadata
Metadata
Assignees
Labels
Type: SecurityAffects securityAffects securityType: Technical issueImprove something that users won't noticeImprove something that users won't notice
Type
Projects
Status
💻 In Progress