vscode-github-actions icon indicating copy to clipboard operation
vscode-github-actions copied to clipboard

Secrets are no longer secret.

Open jbkeg opened this issue 1 year ago • 0 comments

Describe the bug I have a private repo in GitHub which I have no authority to access repository settings. But I still can access to repository secrets and create/update/delete the secrets.

To Reproduce Steps to reproduce the behaviour:

  1. Link the repo which has no authority to access repo settings with vscode github actions extension.
  2. At the extension can see/edit/create/delete the secrets.

Expected behavior Supposed to be failed or blocked to read/write the secrets.

Extension Version v0.26.2

jbkeg avatar Apr 24 '24 12:04 jbkeg