Automattic / Automattic/gitaudit
Metrics API Token should be obfuscated after regenerating
Open
- Dominant language
- TypeScript
- Stars
- 15
- Forks
- 3
- PR merge metrics
- No merged PRs in 30d
Description
On the Settings > Metrics page, there is an API token that is always visible in plain text.
It's good practice to make an API token inaccessible after the initial creation for security purposes. This seems to already be the case with the AI Sentiment Analysis API Key on the Settings > General page.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.