search

bids-apps / MRtrix3_connectome

Generate subject connectomes from raw BIDS data & perform inter-subject connection density normalisation, using the MRtrix3 software package.
http://www.mrtrix.org/
Apache License 2.0
50 stars 26 forks source link

[BUG] Compromised credentials #121

Closed effigies closed 1 year ago

effigies commented 1 year ago

What version of the bids app were you using?

No response

Describe your problem in detail.

CircleCI has alerted everyone to cycle credentials stored in their environment variables: https://circleci.com/blog/january-4-2023-security-alert/

This project has what I suspect are @Lestropie's docker credentials in its environment variables.

What command did you run?

No response

Describe what you expected.

No response

Lestropie commented 1 year ago

Thanks for the heads-up.

Rotated the GitHub OAuth tokens, even though apparently CircleCI has done so for all users at their end.

My DockerHub password has been modified. (Tags currently aren't automatically resulting in Docker image pushes because I've not invested the effort in getting the CI up to date; but the credentials needed to be cycled nevertheless)