←back to thread

Leaked admin access token to Python, PyPI, and PSF GitHub repos

(jfrog.com)
114 points elchief | 1 comments | 12 Jul 24 00:34 UTC | HN request time: 0.21s | source
Show context
oakpond ◴[12 Jul 24 11:00 UTC] No.40944423[source]▶
Yikes, TIL: never build production artifacts from a development checkout?
replies(2): >>40947730 #>>40948087 #
ilc ◴[12 Jul 24 17:43 UTC] No.40947730[source]▶
There is a reason CI/CD servers exist.

Heck there's a few pieces of software I work on that I can't build locally, I just push WIPs to CI/CD.

I could try to setup a CI/CD pipeline of my own, but it isn't worth the time.

replies(1): >>40963375 #
1. arielcostas ◴[14 Jul 24 21:38 UTC] No.40963375[source]▶
Maybe I'm too young, but I can't imagine building stuff locally and then pushing. Too messy later figuring out why stuff worked on your machine but not the end users'. I like way better setting up a CI pipeline on GitHub, building stuff remotely and then downloading the final binary to my own device or a VM to do manual testing.