github api rate exceeded

Issue:

conda-forge making excessive GitHub API calls (hitting the rate limit of 5,000/hr) using *all* conda-forge user's tokens via "Travis CI for Open Source."

It's unclear if this is an issue with Travis or with conda-forge or both. It's killing all my automation which depends on being able to access the GitHub API.

Details about issue:

> Hello MK,
>
> The original response from Travis CI was that the conda-forge org was only responsible for about 100 API calls.
>
> The conda-forge org has a massive number of github users (I'm sure you know what conda-forge is) so I'm skeptical that this is an issue at their end - it would mean thousands of people should be experiencing the same issue as me.
>
> Personally I only own a couple of conda-forge repos so don't see how the thousands of other repos it owns should affect me or use my tokens for builds.
>
> In any case I've opened an issue here: https://github.com/conda-forge/conda-forge.github.io/issues/908
>
> Regards,
> Casper

-- @casperdcl, Oct 24, 00:40 UTC

> Hello Casper,
>
> Thanks for writing in and sorry for the inconvenience this has caused.
>
> It appears your token may be in use across the conda-forge organization. We also observed that you have builds running for conda-forge on .ORG and .COM. As a result, all requests for "Travis CI for Open Source" are being triggered with this token, can you confirm this? In addition, please can you have Github send you the list of repositories using this token?

-- MK (Travis CI), Oct 23, 12:05 EDT

> Hey Casper,
>
> Thanks for following and for sending these additional details about your issue.
>
> I confirm we are seeing a lot of activity for your account on Sunday in our logs.
>
> I'll raise this to our Engineering Team to see what they think.
>
> Thank you for your patience.

-- Dominic Jodoin (Travis CI), Oct 3, 16:50 EDT

> Dear Mustafa,
>
> Unfortunately GitHub Develper support was very explicit that this issue is caused by the OAuth app "Travis CI for Opens Source" by travis-ci (https://github.com/settings/connections/applications/f244293c729d5066cf27 from travis-ci.org). To be clear, this is NOT an issue with the OAuth app "Travis CI" by travis-pro (https://github.com/settings/connections/applications/88c5b97de2dbfc50f3ac from travis-ci.com), nor the GitHub app "Travis CI" by travis-ci (https://github.com/settings/installations/1269142 from ???).
>
> I do not have control over the API requests that "Travis CI for Open Source" makes. To be clear, it would be helpful if you could:
>
> - let me know if there's any repository/issue tracker for this sort of problem on https://github.com/travis-ci or similar
> - let me know what the differences are between the 3 different Travis apps mentioned above
> - forward this to a developer of"Travis CI for Open Souce" to check for bugs (e.g. infinite loop making API requests)
> - let me know how many GitHub payloads/requests my account sends to Travis per hour which may trigger Travis to request data via the GitHub API (I'm sure this is a small number which should be nowhere near 5,000/hour)
>
> I'm sorry but this is very urgent, core to Travis CI services, and something which may affect every single one of your customers. Please let me know if this is not the case. I maintain some of the world's most popular open source repositories and will be very vocally switching to > alternative providers if this issue cannot be rectified.
>
> Best,
> Casper

-- @casperdcl, Oct 3, 09:00 EDT