Home → Questions →

Terms of Service pertaining to accessing a User's Github?

• Edit

val.v.gorbunov

18 Feb, 2015 06:15 AM

Hey Guys,

I'm trying AppVeyor out for some .Net deployment of a console application to an EC2 machine. Before setting up my first project I wanted to make sure I read all the terms and conditions related to how AppVeyor is allowed to use the GitHub repo and code that I give it access too.

I didn't see the Terms of Service or Privacy Policy cover this topic and it makes me concerned considering how many persmissions AppVeyor asks from the GitHub OAuth service. Could someone link me to a written statement about how AppVeyor is allowed to use our code?

Thanks,
Val

1. Support Staff 1 Posted by Feodor Fitsner on 18 Feb, 2015 06:38 PM

   

   Hi Val,

   We are currently working on improvements into AppVeyor ToC.

   Addressing your concern regarding AppVeyor accessing GitHub account and handling your code:

   1. AppVeyor uses OAuth token to access your GitHub account using GitHub REST API. OAuth token is stored in AppVeyor database in encrypted form. Requested scopes are required to list your repositories, organization repositories, manage repository webhooks and SSH keys.
      
   2. AppVeyor uses SSH key to clone your GitHub repository.
      
   3. Repository is cloned to build worker only.
      
   4. Every build runs on a fresh virtual machine which is not shared with other builds and the state of which is not preserved between consequent builds. After the build is finished its virtual machine is decommissioned.
      
   5. Build worker VMs are firewalled and there is no way to access them from outside (unless you allow certain rules on firewall).
      
   6. AppVeyor staff does not look into your build VMs, sources, build configurations, logs without your permission.

   Please let me know if you have any questions.

   • Edit

2. Ilya Finkelshteyn closed this discussion on 25 Aug, 2018 01:54 AM.