Action commits access token

taichi / actions-package-update

keeps npm dependencies up-to-date by making pull requests from GitHub Actions or CI.

64 stars 12 forks source link

Closed MichaelFlucher closed 3 years ago

MichaelFlucher commented 3 years ago

The Action somehow managed to commit the env.sh file containing the access token to Github. https://github.com/Catrobat/Catblocks/blob/c81c15c6cb3d0db750c125a40000f5273aca2a0b/env.sh

Fortunately Github instantly blocked the Token.

Ghustavh97 commented 3 years ago

@MichaelFlucher sorry for this, i'm the one who created that stupid bug. I fixed it in less than 24 hours tho here: https://github.com/taichi/actions-package-update/pull/21 .

MichaelFlucher commented 3 years ago