1

I'm developing a project at GitHub and using TravisCI. On GitHub, there's an option, which allows one to use one branch gh-pages to publish static web content online on http://<user>.github.io/<repo>.

As my project is a frontend one (WebGL/JavaScript) and doesn't require any backend, I decided to try the following deployment process:

  1. Push to master, which will fire the CI service to build an application and run unit-tests.

  2. If building and testing the app on Travis succeeds, then push the results to the gh-pages branch, where later the static content will be available in the following sub-directory:

    /<commit#>.<build#>/<payload> (e.g. /925dc3e.4/index.html)

The scheme itself is simple, but I'm afraid because of security reasons. I understand, that showing the password in some sort of a config file is a very bad idea. However, I've found the encryption keys in Travis CI service feature, but am not sure, whether it's secure enough, or insecure at all?

Community
  • 1
  • 1

0 Answers0