Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add GH Action to warn devs about sentryAuthToken changes #3683

Open
krystofwoldrich opened this issue Mar 18, 2024 · 1 comment
Open

Add GH Action to warn devs about sentryAuthToken changes #3683

krystofwoldrich opened this issue Mar 18, 2024 · 1 comment
Assignees
@lucas-zimerman
Labels
Platform: React-Native

Comments

@krystofwoldrich
Copy link
Member

Description

To prevent GHSA-68c2-4mpx-qh95 in the future, we can add a GitHub Action which will add a warning to a PR when changes related to handling sentry auth token are included.

Impl can be a simple string search for sentryAuthToken, SENTRY_AUTH_TOKEN, and similar.
@krystofwoldrich
Copy link
Member Author

This warning should not be triggered for changes in GH actions yml files.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@lucas-zimerman lucas-zimerman

Labels
Platform: React-Native
Projects
Mobile & Cross Platform SDK
Status: Backlog
Milestone
No milestone
Development

No branches or pull requests
2 participants
@lucas-zimerman @krystofwoldrich