Skip to content

Remove dependency of on disk GH token for release notes #10520

@mrjones-plip

Description

@mrjones-plip

Describe the issue
When you use the release notes script, it requests you put a GitHub token on disk in a token.json file. This is insecure as other rogue apps could harvest and exfiltrate this token.

Describe the improvement you'd like
Prompt the user for the token and only keep it in memory for the duration of the script's run time.

Describe alternatives you've considered

  • Keep it as is
  • do a 1pass integration

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

Status

💻 In Progress

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions