Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror

Comment Re:Testing Tool (Score 1) 28

Travis CI has always stated that there is no availability of Encrypted environment variables from forks to pull requests due to the security risk involved. If the risk of exposing such information to unknown code is there, then why do developers trust Travis CI? It's due to its efficiency and the no record of such a significant security breach. The timely research of Felix Lange has saved Travis from being unreliable.

Comment Re:Testing Tool (Score 1) 28

I agree with you up to some extent. I am not saying that their system was flawless. If they are using automated tools to clone your source code to test it, the environment should be highly encrypted. Someone is providing you their property and you should maintain its secrecy. But it's a technology world and no one is perfect. They tried their best to provide the best services to clients for testing codes by using popular tools. If there is an issue with security protocol happens, they are also liable to resolve it and that’s what they are doing. Travis CI is efficient and people still trusting it. Period!

Comment Re:Testing Tool (Score 1) 28

Yes, you are right. Thanks to the researcher Felix Lange who found a security vulnerability. Travis CI was considered an efficient testing tool and still people relying on it. and now when they have included secure environment variables of all public open-source repositories, the tool has gained more trust of people in my honest opinion.

Slashdot Top Deals

If I set here and stare at nothing long enough, people might think I'm an engineer working on something. -- S.R. McElroy

Working...