deconst / strider-deconst-control

Deconst control repository build plugin for Strider CD
MIT License
1 stars 2 forks source link

Use a non-admin API key. #11

Closed smashwilson closed 8 years ago

smashwilson commented 8 years ago

Using the admin API key for the asset preparer is not ideal; it increases the risk of leaking the admin API key by getting malicious PRs. (You'd have to actually merge them, but still.) Issue a temporary API key and send that to the asset preparer instead.

Related to deconst/services#16.