What
We're going to run the CI using our test credentials, those should not be leaked to forks or be accessible in any way, including VCR cassettes, logs, etc.
Why
Even if they're test credentials they're still tied to a real account and not public domain. We're not aware of any alternative way for live testing.
After the initial release we'll probably try to replace things with VCR, stripe-mock, or something else, assuming it will still allow an end to end test for system specs.
What
We're going to run the CI using our test credentials, those should not be leaked to forks or be accessible in any way, including VCR cassettes, logs, etc.
Why
Even if they're test credentials they're still tied to a real account and not public domain. We're not aware of any alternative way for live testing.
After the initial release we'll probably try to replace things with VCR, stripe-mock, or something else, assuming it will still allow an end to end test for system specs.