alt Hacker NewsCouldn't you use fine grained github tokens for some of what you're accomplishing with the github/network filtering?
Replies
asb • today at 5:12 PM
The fine-grained tokens have some surprising permissions for "read only" https://github.com/orgs/community/discussions/180063
You definitely want to do that. I have a Github App that I use for my AI agents, and that has its own associated restricted credential.
There are going to be cases where you want to white list an org or a repo for read access that is not under your control and Github filtering will be a simple way to do that.
Github can be a source of hostile code, prompt injections, and exfiltration- you may want to lock down using repos that aren't yours.
The tool inherited this feature from the prior implementation and its something I am still exploring.