Comment Comment by orf Credentials published on GitHub are not automatically revoked - what happens is at the discretion of the provider, for precisely this reason.For example AWS applies a “quarantine” policy that prevents some specific actions[1].Allowing anyone to report a potentially compromised key is one thing, but allowing anyone to unilaterally revoke a token is another.1. https://docs.aws.amazon.com/aws-managed-policy/latest/refere... parent orf 14 days ago
For example AWS applies a “quarantine” policy that prevents some specific actions[1].
Allowing anyone to report a potentially compromised key is one thing, but allowing anyone to unilaterally revoke a token is another.
1. https://docs.aws.amazon.com/aws-managed-policy/latest/refere...