Live data from Hacker News

Free Github SSH keys anyone?

github.com

21–25 of 25 posts

Re: Free Github SSH keys anyone?

#22
post #2

It'd be a useful feature for github and bitbucket to have a default pre-commit that scans for probably-sensitive files and reject commits like that (maybe with a repo setting to opt out on the website, if you think you know what you're doing) edit: In fact, they should probably run a full search for such files now and email a heads-up to users with repos that produce hits.

They might think of that as crossing a line - from just hosting and enabling you to do what you want to do to actually telling you what you want to do.

Re: Free Github SSH keys anyone?

#23
post #18
post #4

I almost can't believe someone would commit their .ssh directory to a public GitHub repo. Seriously - why? Your public key, sure, but the entire directory?

In all likelihood, these are NOT the user's private SSH keys, but a key generated for the service that the user is developing - such as a key to run backups and issue remote commands. Thus I can well see that the key could be committed as part of an application stack.

No, some of these repositories are user's dotfiles. See this for example, https://github.com/gomachan/dotfiles

There are many examples like this.

Post reply on HN