Rotating credentials for GitHub.com and new GHES patches

GitHub received a bug bounty report of a vulnerability that allowed access to the environment variables of a production container. We have patched GitHub.com and rotated all affected credentials. If you have hardcoded or cached a public key owned by GitHub, read on to ensure your systems continue working with the new keys.

The post Rotating credentials for GitHub.com and new GHES patches appeared first on The GitHub Blog.

access bounty bug bug bounty container continue credentials environment github github.com github enterprise server hardcoded key patches production public public key report security systems vulnerability working