Token is saved in .github-todos, which is not in .gitignore by default

[davidascher]

The CLI says: Those information ARE NOT STORED, only the generated token will be stored in your global git configuration. (by which I assume it means e.g. ~/.gitconfig), but in my experience if you do:

github-todos config github.token <TOKEN>

then it ends up in .github-todos, not in the global config file. This makes it easy to accidentally checkin the token, which I believe one shouldn't do.

I like the idea of doing what the CLI says it'll do, but if it doesn't, it should probably instead say "make sure you add .github-todos to your .gitignore".