JamesMcGuigan / dotfiles

My personal .dotfiles and CLI scripts

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Rotate and remove Github API Token

DavidWittman opened this issue · comments

Hey @JamesMcGuigan, you've committed your Github API Tokens in your .bash_vars file. This could lead to an account compromise so you should rotate these and remove them from source control.

Thanks for looking out for me.

The token is question is my HOMEBREW_GITHUB_API_TOKEN. This is needed by homebrew to public github repos, but is otherwise configured to have no actual permissions to access my account.