So what stops it from sending a network request to a git repo that pushes what that placeholder resolves to?
How would that work? You don't control github.com servers so your repo would never see the secret.
edit: You may want to look into tokenizing proxies as the general application of this concept.
alt Hacker News
How would that work? You don't control github.com servers so your repo would never see the secret.
edit: You may want to look into tokenizing proxies as the general application of this concept.