Post

Working with outside collaborators can add more work for a repo owner, from confirming access to changing permissions. To keep up with manual housekeeping for one shared org, we decided to use Evergreen: a GitHub App built with native GitHub features. The workflow 👇

github.blogStaying Evergreen: How we automated secure access and repo hygiene in a shared orgAutomate outside collaborator access reviews and stale-repository archival in your shared GitHub organization with native platform features.

0 reposts9 likes

WARNING: GitHub is vulnerable and not secure. It integrates an OAuth mechanism which can never be de-authenticated. The problem is exposing workflow to exploitation and deception.