microsoft / microsoft/azure-devops-python-api
PAT token security
Open
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 684
- Forks
- 218
- Avg merge
- 8d 10h
- Merged PRs (30d)
- 1
Description
Isn't it generally a bad idea to include your PAT token in the file? Even if I am just putting it in for testing, seems ripe for accidentally checking it in to source control. What is the suggestion for a more secure method?
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by inspecting the repository’s documentation and examples for how PAT tokens are configured. Determine the secure method the project should recommend instead of embedding a token in a file, then document that workflow and ensure examples do not encourage committing secrets.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure, python
- Domain
- documentation, security
- Issue type
- Documentation
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100