The idea of allowing a someone to have the ability to administer/transfer/delete company repositories so that we can print some neat posters is rather unsettling.
Aside from being more thorough in my inspection of the site, it might help to make that portion of the site more obvious given how many people came to this thread and made the same general comment about security/permissions.
Edit: Never mind, I figured out how to see what access it was. Btw, Holy shit! Why all this access?? "read and write all public and private repository data"
I uploaded an image of a gopher and it automatically detected the shape and drew it on the code.
http://assets.avi.io/screen-shot-2016-11-15-f4w73.png
This is impressive. Would love insights on how you did that.
It's a great idea btw.
Would be interesting to know how much revenue you are making so far.
This mitigates some of the security issues have with granting access to live repositories, as well as opens your service up to people who have code hosted on anything besides Github or Bitbucket hosted services.
- Each time a poster is generated the repo's code is fetched and destroyed.
- Your auth token is cleared after each session.
- For maximum security use Gists!
You can create a private Gist[0] and add all the files you want into it. After that you can just use the Gist's ssh/https url under the "Embed" menu/dropdown.
This will allow you to specify exact files that get cloned.
Should make for a very nice piece of paper that I'll put next to my other piece of paper (my degree). I'm pretty sure I'll be more proud of this then I will of my degree.
I expect they developed some algorithm to color/format lines correctly per some image in this case, so a little more flexible...
That said, did do it for an open-source project I wrote, and it's great!
[0] https://commits.io/posters/a9a5c093686 [1] https://coreinfrastructure.org/ [2] https://bestpractices.coreinfrastructure.org/
