Cap every non-push-token credential at read on unclaimed scratch repos, site admins and deploy tokens included, so LFS, contents API and web writes follow the git proxy guard

taigrrcommitted parent dd86194459f46f77824d7a36303e86e97b98e3f20083874Browse files
2 files changed+6−1

Rendering diff…