> No analysis, no security report, no post mortem, not warning any of their users that their secrets might have been stolen
If it wasn't clear before that everyone should get off travis (and it was), this should be the thing that makes it clear. This is not a trustworthy company anymore. Which is sad when they really used to be.
> As a reminder from the Support Team, cycling your secrets is something that all users should do on a regular basis per your company’s security process. If you are unsure how to do this please contact Support and we would be happy to help you.
8 comments
[ 2.9 ms ] story [ 13.6 ms ] thread[0]: https://twitter.com/peter_szilagyi/status/143764611870017536...
Definitely check out Péter Szilágyi's twitter thread: https://twitter.com/peter_szilagyi/status/143764611870017536...
> No analysis, no security report, no post mortem, not warning any of their users that their secrets might have been stolen
If it wasn't clear before that everyone should get off travis (and it was), this should be the thing that makes it clear. This is not a trustworthy company anymore. Which is sad when they really used to be.
Private equity running it into the ground.
> As a reminder from the Support Team, cycling your secrets is something that all users should do on a regular basis per your company’s security process. If you are unsure how to do this please contact Support and we would be happy to help you.
...and that's it. That's the full "bulletin."
Wow, this is bad.
https://news.ycombinator.com/item?id=28524727
https://docs.github.com/en/actions/learn-github-actions/migr...