Azure / Azure/acr-builder

Use GitHub App for context auth instead of PAT

Open
#648 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Go
Stars
41
Forks
45
Avg merge
6h 52m
Merged PRs (30d)
5

Description

**What is the problem you're trying to solve**
When using a private org for GitHub you can block PAT tokens outside the network and allow Apps only, or you could just prefer the better security for GitHub Apps.

Currently it seems the builder only support PAT for private repo auth.

**Describe the solution you'd like**
An alternative to --git-access-token that allows the use of a GitHub App for auth to download source and/or hooks up to events.

**Additional context**
https://docs.github.com/en/apps

Contributor guide

Open the contributing guide

Research direction

Start by tracing how the --git-access-token entry point is handled for private repository access. Review the linked GitHub Apps documentation and define the authentication flow for downloading source and subscribing to hooks; done means a GitHub App alternative works alongside PAT authentication.

Written by the indexing model from the issue text.

Assessment

Tech stack
github, go
Domain
authentication
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.