371

Seriously how many times does this have to happen (lemmy.world)

submitted 4 months ago by carrylex@lemmy.world to c/programmer_humor@programming.dev

46 comments fedilink hide all child comments

One does not commit or compile credentials

Context:

This meme was brought to you by the PyPI Director of Infrastructure who accidentally hardcoded credentials - which could have resulted in compromissing the entire core Python ecosystem.

you are viewing a single comment's thread
view the rest of the comments

[-] cypherpunks@lemmy.ml 9 points 4 months ago

At my workplace, we use the string @nocommit to designate code that shouldn’t be checked in

That approach seems useful but it wouldn't have prevented the PyPI incident OP links to: the access token was temporarily entered in a .py python source file, but it was not committed to git. The leak was via .pyc compiled python files which made it into a published docker build.