Your agent should not inherit your admin token

https://siddhantkhare.com/writing/your-agent-should-not-inherit-your-admin-token

-2 points · 3 comments · view on lemmy.world

3 Comments

slazer2au@lemmy.world · 2 pts · 54d (1 reply)

True, but why do you even have an admin token on your regular account? Principles of lead access are a thing.

codeinabox@programming.dev · 1 pts · 54d

I agree but those principles aren't always applied to local development. For example when creating a GitHub personal access token, devs might give it all the privileges, instead of just the ones it needs.

Treczoks@lemmy.world · 2 pts · 54d

The necessity to tell people that tells a lot about peoples stupidity.