Re: [boost] TravisCI and Coverall usage policies in Boost

Subject: Re: [boost] TravisCI and Coverall usage policies in Boost
From: Antony Polukhin (antoshkka_at_[hidden])
Date: 2014-09-18 05:42:16

2014-09-18 13:19 GMT+04:00 Andrey Semashev <andrey.semashev_at_[hidden]>:

> On Thu, Sep 18, 2014 at 12:38 PM, Antony Polukhin <antoshkka_at_[hidden]>
> wrote:
> >
> > A few things make me nervous.
> >
> > First of all, TravisCI requires some access permissions to the repo. I'm
> > not a github expert so I'm not 100% sure that this is safe.
>
> You mean push permissions? Hm, looks very insecure, that would be a
> big concern for me, especially if it can push to boostorg repos. Why
> does it need push rights?
>

It does not require push rights:
http://docs.travis-ci.com/user/github-oauth-scopes/

But it requires some `write:repo_hook` and `repo_deployment`. I'm not sure
what does it mean.

-- 
Best regards,
Antony Polukhin