1

I have a question about the security of private repo's on Github. Assume you use HTTPS authenticated against SAML SSO to fetch and push changes to remote. Could an outside adversary scrape the files from the display page if they know the URL?

2
  • 1
    Why not try this yourself instead of asking us? You know your own repo's URL, so try accessing it while logged out and see what happens. Commented Mar 21, 2020 at 4:38
  • If you are able to access its contents, you might get huge bounty from Github :) Commented Mar 21, 2020 at 9:41

2 Answers 2

1

Someone who does not have access to a private repository sees a 404 Page not found error. So no, if an outsider knows the url he can not scrape the contents of your github repository page.

1

Not safe from Github itself, they will scrape it for building models for copilot if soon enough. Doesn't even matter what license you put there.

1
  • 1
    Your answer could be improved with additional supporting information. Please edit to add further details, such as citations or documentation, so that others can confirm that your answer is correct. You can find more information on how to write good answers in the help center.
    – Community Bot
    Commented Feb 17, 2023 at 17:04

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .