parse-community / Parse-SDK-Android

The Android SDK for Parse Platform
https://parseplatform.org/
Other
1.88k stars 735 forks source link

Security review of 3rd party services #1166

Open mtrezza opened 2 years ago

mtrezza commented 2 years ago

We are doing our annual security review of 3rd party services. The goal is to remove permissions of services that are no longer used in this repository's CI workflow.

Services that need to be reviewed:

mtrezza commented 2 years ago

@parse-community/android-sdk-review if someone could take a look and confirm whether we can remove all the services above, that would be great

azlekov commented 2 years ago

@mtrezza I'm pretty sure all of them can be removed

mtrezza commented 2 years ago

I would say so too. Haven't found any indication so far that any of these are used here.

Jawnnypoo commented 2 years ago

Coveralls is used to post on PRs, for example:

https://github.com/parse-community/Parse-SDK-Android/pull/1163#issuecomment-1105056174

Up to you guys on if you think this is useful to keep around. The rest seem inactive to me.

azlekov commented 2 years ago

Codecov == Coveralls?

Jawnnypoo commented 2 years ago

I believe so

mtrezza commented 2 years ago

These are 2 different services.