Heroku Security Update: GitHub integration mitigation steps | Heroku Status

Heroku Status provides the current status and incident history report for the Heroku platform.

[mizdra]

マジか / "On April 7, 2022, a threat actor obtained access to a Heroku database and downloaded stored customer GitHub integration OAuth tokens."

[nilab]

“Subject: Heroku Security Update: OAuth token revoked”

[mrtc0]

Revoke するんだ “we will revoke over the next several hours all existing tokens from the Heroku GitHub integration”

[ci7lus]

見直したらかなり過剰な権限が付与されてたので一旦Revokeした、リポジトリ単位でGrantさせてほしいなあ

[kw5]

メール来たから対応した