Reminds me of the time I forgot to lock the Ansible vault before pushing my new playbook to production. Thankfully my boss caught it and was able to scrub the commit, but I still got a very, very stern talking-to.
The worst case of this I heard was a crypto developer that lost 300k$ of clients money when he accidentally pushed some crypto keys to GitHub public repository. Last I heard he was getting sued.
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !programmerhumor@lemmy.ml
Post funny things about programming here! (Or just rant about your favourite programming language.)
Rules:
Posts must be relevant to programming, programmers, or computer science.
No NSFW content.
Jokes must be in good taste. No hate speech, bigotry, etc.
Reminds me of the time I forgot to lock the Ansible vault before pushing my new playbook to production. Thankfully my boss caught it and was able to scrub the commit, but I still got a very, very stern talking-to.
https://docs.github.com/en/code-security/secret-scanning/protecting-pushes-with-secret-scanning
Ooof!
GitHub pushed API keys to GitHub themself once, so you’re not alone xD
Wasn’t this the reason they built the system to protect you from this by defining secrets not to be pushed?
Is this like when Facebook suggested you upload all your nudes so they can tell you if your sensitive photos are ever leaked.
Non prod creds, right? Right…
Narrator: It was the prod creds.
Image not visible, link missing when opening thread.
I know it’s not you, it’s me. But yeah. No idea what the image is, can’t copy paste from home thread.
Bart Simpson writing “I will not push API keys to github” on the blackboard over and over
Thank you kind person. Funnily enough the image is now visible.
API*
Yep, edited my comment already it is midnight in my defense
Edit didn’t take.
But…It still says APT
The worst case of this I heard was a crypto developer that lost 300k$ of clients money when he accidentally pushed some crypto keys to GitHub public repository. Last I heard he was getting sued.