Is API token required when fetching artifacts?

Hi @mondaychen - during a brief period last week there was a regression to artifacts fetching on certain OSS projects. The only projects affected were ones that have enabled a specific setting that allows unauthenticated access to artifacts. I suspect that was what your coworkers noticed. I’m sorry for the disruption that caused you, and your colleagues.

Thanks a lot @rit1010 you were absolutely right to spot that this type of security related inconsistency is something to be concerned about. In this case the unintended change briefly disabled the permissive access, forcing authentication where it was not previously required.

1 Like