Skip to content

[BUG] Compromised credentials #15

@effigies

Description

@effigies

What version of the bids app were you using?

No response

Describe your problem in detail.

CircleCI has alerted everyone to cycle credentials stored in their environment variables: https://circleci.com/blog/january-4-2023-security-alert/

A PYPI_PASSWORD environment variable was set in CircleCI (I have deleted it). I believe this belongs to @AmoghJohri and needs to be changed immediately. In the future, we should use tokens, and this can be done by setting TWINE_USER to __token__ and TWINE_PASSWORD to a token that is scoped to this one package only. The twine tool will automatically pick these up.

See https://pypi.org/help/#apitoken for additional guidance.

What command did you run?

No response

Describe what you expected.

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions