clojars / clojars-web

A community repository for open-source Clojure libraries
https://clojars.org
Eclipse Public License 1.0
468 stars 114 forks source link

Report validity to GitHub when scanning tokens #880

Closed tobias closed 5 months ago

tobias commented 5 months ago

GitHub supports[1] returning the validity (true or false positive) for Clojars deploy tokens that it reports to us. This implements that response.

Fixes #879.

[1]: https://docs.github.com/en/enterprise-cloud@latest/code-security/secret-scanning/secret-scanning-partner-program#provide-feedback-for-false-positives