Home / Companies / GitHub / Blog / Post Details
Content Deep Dive

Read-only deploy keys

Blog post from GitHub

Post Details
Company
Date Published
Author
Ben Toews
Word Count
125
Language
English
Hacker News Points
-
Summary

GitHub now allows users to create deploy keys with read-only access, enhancing security by restricting write access unless specifically permitted. Deploy keys, which are SSH keys stored on a server to grant access to a single GitHub repository, are commonly used for cloning repositories during deployments or continuous integration processes. Previously, deploy keys automatically included both read and write access, which could be undesirable in certain scenarios. With the new update, deploy keys created on GitHub.com will default to read-only, although users can opt to grant write access by selecting the "Allow write access" option during the creation process. The access level can also be specified when creating deploy keys via the API.