Skip to content

Use encrypted GitHub OAuth access tokens #11697

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 3 commits into
base: main
Choose a base branch
from

Conversation

Turbo87
Copy link
Member

@Turbo87 Turbo87 commented Aug 4, 2025

This PR implements the second phase described in #11585. It makes the gh_encrypted_token column non-nullable and adjusts our code to use the encrypted tokens instead of the plaintext ones.

The PR also removes the now obsolete encrypt-github-tokens admin tool again, since the backfill has been performed on both environments and since it was filtering on gh_encrypted_token IS NULL, it wasn't compatible with the migration anymore.

@Turbo87 Turbo87 added the C-enhancement ✨ Category: Adding new behavior or a change to the way an existing feature works label Aug 4, 2025
@Turbo87 Turbo87 requested a review from a team August 4, 2025 13:05
@Turbo87
Copy link
Member Author

Turbo87 commented Aug 4, 2025

@rust-lang/crates-io unless anyone has objections, I plan on merging and deploying this on Thursday

@Turbo87 Turbo87 force-pushed the use-encrypted-tokens branch from 028489b to 993ab8c Compare August 4, 2025 13:17
@Turbo87 Turbo87 moved this to For next meeting in crates.io team meetings Aug 8, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
A-backend ⚙️ C-enhancement ✨ Category: Adding new behavior or a change to the way an existing feature works
Projects
Status: For next meeting
Development

Successfully merging this pull request may close these issues.

2 participants