Andreas Olsson

A few more photos of a wintery Nynäshamn.

Yet another #FOSDEM coming up.

Hope to see you there!

Any talks or stands in particular that I don't want to miss out on?

About a month ago I moved my email to @soverin@mstdn.social. Having been generally happy with their service, let me share the reasons that I picked them.

* Both the company and their servers reside within reasonably friendly countries.
* Good old-fashioned IMAP+SMTP client support, with individual app passwords.
* Sufficient TLS and DNSSEC that I can require SMTP STARTTLS using both MTA-STS and DANE.
* Powerfull and flexible mail filtering built on top of Sieve.
* Full IPv6 support.

https://soverin.com/

One of the nice things about living in Nynäshamn is that I have this within walking distance from my apartment.

@cuu508@toot.lv @healthchecks_io@fosstodon.org ...which I now see that you have already covered in the issue ticket. Sorry about that.

@cuu508@toot.lv @healthchecks_io@fosstodon.org All good questions regarding the whole onboarding thing, to which I sadly don't have any good answer. What I can tell you is that you definitely want to go with GitHub Apps rather than OAuth Apps. Those OAuth Apps uses the old scary permission scope where permission to create issues requires the full "repo" scope, allowing most form of repo write access. Also, an OAuth App (kind of) gets access to all the repositories the approving user has access to.

@cuu508@toot.lv @healthchecks_io@fosstodon.org In regards to security in general I would like to advice you to consider importing the GitHub App's long-lived private RSA key into something like an HSM, a Cloud KMS, a Vault instance, etc. While that doesn't prevent misuse it at least guards against the key fully leaking.

@cuu508@toot.lv @healthchecks_io@fosstodon.org So, I've mostly created GitHub Apps for personal usage as well as for work purposes, so I'm a bit fuzzy on the best way to provide onboarding links. Easiest might simply be to use https://github.com/marketplace?type=apps Yet on a conceptual level I really like the GitHub Apps permission model, where you get to add a GitHub App to your account/organization, together with the option of specificity exactly which repos you want to grant the App's access for.