OAuth - Integration Github/Travis

[johnoliv]

Is it safe to re-enable the Travis->GitHub integration?

[johnoliv]

@Montana!?

[Montana]

Hey @johnoliv I do have an update for you,

SECURITY BULLETIN: Customer repositories have NOT been accessed

On April 15, 2022, Travis CI personnel were informed that certain private customer repositories may have been accessed by an individual who used a man-in-the-middle 2FA attack, leveraging a third-party integration token. Immediately upon learning this information, Travis CI immediately revoked all authorization keys and tokens preventing any further access to our systems. No customer data was exposed and no further access was possible. Upon further review that same day, Travis CI personnel lear…

[johnoliv]

Thanks @Montana !

[Montana]

No problem @johnoliv! Thank you for reaching out!