From 7be7aa8ed5cbf22660fdd08d5370181c8112673f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?H=C3=A9ctor=20Ramos?= Date: Tue, 28 Feb 2017 12:18:09 -0800 Subject: [PATCH] Clarify access scope for publicly visible access token Summary: This token is restricted to public_repo access rights and it's alright to store in the open: ``` $ curl https://api.github.com/user?access_token={...} X-OAuth-Scopes: public_repo ``` Closes https://github.com/facebook/react-native/pull/12569 Differential Revision: D4629308 Pulled By: hramos fbshipit-source-id: 581a4c581f7b07068eaf1e953f62fc85ceb05ab2 --- circle.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/circle.yml b/circle.yml index 11ab7cad4..00cad8d46 100644 --- a/circle.yml +++ b/circle.yml @@ -49,7 +49,7 @@ test: - source scripts/circle-ci-android-setup.sh && waitForAVD override: - # eslint bot + # eslint bot. This GitHub token grants public_repo access scope. - cat <(echo eslint; npm run lint --silent -- --format=json; echo flow; npm run flow --silent -- check --json) | GITHUB_TOKEN="af6ef0d15709bc91d""06a6217a5a826a226fb57b7" CI_USER=$CIRCLE_PROJECT_USERNAME CI_REPO=$CIRCLE_PROJECT_REPONAME PULL_REQUEST_NUMBER=$CIRCLE_PR_NUMBER node bots/code-analysis-bot.js # JS tests for dependencies installed with npm3 - npm run flow -- check