Automattic · Report #218264
An Automattic employee's GitHub personal access token exposed in Travis CI build logs
Validstatus
mediumseverity
10upvotes
6 Jun 2017disclosed
Summary
An employee's GitHub OAuth token was inadvertently exposed in the Travis CI build logs of an Automattic project. This token has since been revoked.
Please see https://blog.travis-ci.com/2017-05-08-security-advisory for more information.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.