logoalt Hacker News

Asookayesterday at 9:07 PM2 repliesview on HN

Wouldn't this break Go and other build systems (npm?) that pull packages from github by default? Not that I endorse the practise, but will Microsoft really kick out such a big class of users?


Replies

blindedyesterday at 9:54 PM

It does break it, from experience authorizing the pulls with a bot user fixes it.

In the case were the build happens from a github action there are standard builtin credential (workflow permissions).

https://docs.github.com/en/rest/using-the-rest-api/rate-limi...

chrisandchrisyesterday at 9:24 PM

[dead]