argoproj / argoproj/argo-workflows

Github App Authentication Support

Open
#6,491 8 comments 17 reactions 0 assignees View on GitHub
area/sso-rbac solution/workaround
Dominant language
Go
Stars
17k
Forks
3.7k
Avg merge
1d 15h
Merged PRs (30d)
138

Description

# Summary

for github artifacts would be nice to support github app authentication , as it simple to manage access to repositories than using personal access token.

What change needs making?

Implement github jwt authentication for application in workflow/artifacts/git/git.go , "github.com/bradleyfalzon/ghinstallation" is suppose to provide the helpers to do it simply, also new parameters to the 'git' artifact will be needed as 'Private Pem Key', 'Application Id' and 'Installation Id'

# Use Cases
When manage a huge number of repos from different teams is simpler to use github app to allow access from the workflow or CI/CD platform to the repos than using Personal Access Tokens, this way , is less human interaction needed

When would you use this?

to checkout code from private github repos
---

**Message from the maintainers**:

Impacted by this bug? Give it a 👍. We prioritise the issues with the most 👍.

Contributor guide

Open the contributing guide

Research direction

Start in workflow/artifacts/git/git.go and review how the git artifact currently authenticates to GitHub repositories. Check the ghinstallation helper and determine how Private Pem Key, Application Id, and Installation Id fit the artifact parameters; done means a workflow can use GitHub App JWT authentication to check out private GitHub repositories.

Written by the indexing model from the issue text.

Assessment

Tech stack
github, go
Domain
authentication, devops, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
52/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.