search

microsoft / VSTSAgent.PowerShell

Tools for managing and automating your Azure DevOps Agents.
MIT License
29 stars 23 forks source link

Alert: Nuget API secure token checked in #22

Closed temelj closed 4 years ago

temelj commented 4 years ago

I hope this token is revoked by now, but it is very good practice not to check this in together with your code.

https://github.com/microsoft/VSTSAgent.PowerShell/blob/be02cac56160e36d71f229a99a08e13c86fde 988/appveyor.yml#L7

jwittner commented 4 years ago

This uses AppVeyors Secure Variable feature.

“Secure” variables means you can safely put them into appveyor.yml that is visible to others.