0

I have a question about the security of private repo's on Github. Assume you use HTTPS authenticated against SAML SSO to fetch and push changes to remote. Could an outside adversary scrape the files from the display page if they know the URL?

Improve this question
2
  • 1
    Why not try this yourself instead of asking us? You know your own repo's URL, so try accessing it while logged out and see what happens.
    – Joseph Sible-Reinstate Monica
    Mar 21, 2020 at 4:38
  • If you are able to access its contents, you might get huge bounty from Github :)
    – Phenomenal One
    Mar 21, 2020 at 9:41

2 Answers 2

Reset to default
1

Someone who does not have access to a private repository sees a 404 Page not found error. So no, if an outsider knows the url he can not scrape the contents of your github repository page.

Improve this answer
0

Not safe from Github itself, they will scrape it for building models for copilot if soon enough. Doesn't even matter what license you put there.

Improve this answer
1
  • 1
    Your answer could be improved with additional supporting information. Please edit to add further details, such as citations or documentation, so that others can confirm that your answer is correct. You can find more information on how to write good answers in the help center.
    – Community Bot
    Feb 17 at 17:04

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .