• Lovable Sidekick@lemmy.world
    link
    fedilink
    English
    arrow-up
    5
    ·
    edit-2
    2 hours ago

    I’m surprised whatever software the keys were for didn’t detect this and deactivate the keys. Discord did this automatically when I pushed a file to github that had a bot login token in it. Apparently Discord constantly scans github for such things, or maybe github does and sends Discord a msg, I dunno. But it was amazingly fast, like within 2 minutes.

    • Wildmimic@anarchist.nexus
      link
      fedilink
      English
      arrow-up
      3
      ·
      2 hours ago

      that feature was probably deactivated, just like the feature on github which prevents uploading of SSH keys that had been explicitly disabled

      • Lovable Sidekick@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        2 hours ago

        No, I just checked - it’s part of github’s “Secret Scanning”, which checks pushes for secret values and notifies partner services (like Discord) to deactivate them.