Subject: Re: [boost] TravisCI and Coverall usage policies in Boost
From: Antony Polukhin (antoshkka_at_[hidden])
Date: 2014-09-18 05:42:16
2014-09-18 13:19 GMT+04:00 Andrey Semashev <andrey.semashev_at_[hidden]>:
> On Thu, Sep 18, 2014 at 12:38 PM, Antony Polukhin <antoshkka_at_[hidden]>
> > A few things make me nervous.
> > First of all, TravisCI requires some access permissions to the repo. I'm
> > not a github expert so I'm not 100% sure that this is safe.
> You mean push permissions? Hm, looks very insecure, that would be a
> big concern for me, especially if it can push to boostorg repos. Why
> does it need push rights?
It does not require push rights:
But it requires some `write:repo_hook` and `repo_deployment`. I'm not sure
what does it mean.
-- Best regards, Antony Polukhin
Boost list run by bdawes at acm.org, gregod at cs.rpi.edu, cpdaniel at pacbell.net, john at johnmaddock.co.uk