Secure the Django and GitHub Tokens

[cptanalatriste]

No description provided.

[chrisdburr]

@cptanalatriste, who is this assigned to?

[cptanalatriste]

@chrisdburr The Django and GitHub secrets have already been removed from the codebase (and its history). The Django part is sorted, but in the frontend @RichGriff is still working on an adequate approach.

[chrisdburr]

@RichGriff, has this been fixed? Just trying to tidy everything up in advance of tomorrow's meeting.

[RichGriff]

@chrisdburr GitHub tokens are stored in GitHub secrets so assuming that's secure - can't speak for Django

[cptanalatriste]

@chrisdburr The Django and GitHub secrets have already been removed from the codebase (and its history). The Django part is sorted, but in the frontend @RichGriff is still working on an adequate approach.

Django secrets are handled as environment variables, and are not part of the codebase.