You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Travis CI scripts contain surge credentials which anyone can use to deploy the site. This should never have been commited and should be changed to environment variables in CI
The text was updated successfully, but these errors were encountered:
If they are changed to environment variables, the pull requests won't get it working because the contributers won't have the credentials in their travis.
Possible solution is to encrypt them using travis Ruby gem
No one can change the environment variables except admins and maintainers. Encrypting using Travis gem is also using secrets as environment variables which are used to decrypt the file. Secondly, encrypting is used for files which can't be used as environment variables.
Travis CI scripts contain surge credentials which anyone can use to deploy the site. This should never have been commited and should be changed to environment variables in CI
The text was updated successfully, but these errors were encountered: