search

chiubaka / generator-chiubaka-typescript-package

Yeoman generator for standard Chiubaka Technologies TypeScript packages for libraries and other such things.
1 stars 0 forks source link

Replace user key with read/write deploy key in CircleCI #140

Open chiubaka opened 2 years ago

chiubaka commented 2 years ago

I'm currently using a user key in CircleCI to quickly test whether or not I can get git push writes working for my submodule deploys in #45.

This token essentially gives CircleCI the ability to run commands as me, which is very dangerous. I need to swap this out for a read/write deploy key and then figure out how to use that deploy key to write to multiple repositories (since this particular job will write to multiple repositories)

chiubaka commented 2 years ago

I can de-escalate this. This is important, but only becomes a real concern if I ever bring any collaborators onto this project who might have access to CircleCI builds.