-
Suggestion
-
Resolution: Unresolved
-
None
-
0
-
2
-
Problem Definition
Currently Bamboo requires the use of a Personal Access Token (PAT) which is not recommended by GitHub. With a PAT customers are subject to lower rate limits and the need to use a shared service account.
Also, once token is generated they need to individually add it to every linked repo that needs that access. If at any point it's entered incorrectly it will possibly lock the account.
Suggested Solution
Establish an OAuth2 connection between GitHub and Bamboo, that would transfer secret and client ID (OAuth2 is a protocol that lets external applications request authorization to private details in a user's GitHub account without accessing their password.
Currently, we do have that option for Jira Cloud -https://support.atlassian.com/jira-cloud-administration/docs/integrate-with-github/
We also have an app in Jira for GitHub - https://marketplace.atlassian.com/apps/1219592/github-for-jira?tab=overview&hosting=cloud
Give an option to customers to clone a GITHUB repository in Bamboo without using a PAT token
- mentioned in
-
Page Loading...
| Form Name | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
A nice way to do this would be to have the private key and ID as inputs on the Repository section and have a script in the backend that generates the token in run time:
https://docs.github.com/en/apps/creating-github-apps/authenticating-with-a-github-app/authenticating-as-a-github-app-installation
To summarise, the doc a script would be needed that does: Generate JWT with private Key and ID -> Do API call for Installation ID token -> Use Installation ID token for checkout