gut stores personal access tokens in clear text

[snomos]

Anyone having access to the computer can take over the GitHub account.

Fix: store in keychain, access through system calls.

[bbqsrc]

There is no cross-platform way to do this. This is also the industry standard approach, even github's gh tool does this.

[snomos]

How can it be industry standard to store what amounts to a password in clear text on a local machine?? Unbelievable. Physical access is not necessary to get to the token, just whatever access one can establish. This looks like a nightmare in the making...

[bbqsrc]

Welcome to 2022, where plaintext tokens are still the norm lol.