Best practices

The dos and dont's of IssueOps
  • Alpha

GitHub APIs

Do
Use GitHub Apps for accessing organization-level APIs
Don't
Use personal access tokens

Sensitive information

Do

Use issue forms inputs that accept references to sensitive information in secure locations

Don't
Accept sensitive information directly in issues

Validation

Do

Validate issue and comment text at every step in the IssueOps workflow

Don't

Rely on labels to determine if an issue has been validated or approved