eclipse-tractusx / eclipse-tractusx/api-hub

Replace user-specific merge token with a dedicated service token

Open
#41 1 comment 0 reactions 1 assignee Claimed by @tomaszbarwicki View on GitHub
enhancement
Dominant language
Go
Stars
1
Forks
3
PR merge metrics
No merged PRs in 30d

Description

### Description

As a maintainer of the API Hub,
I want the daily merge process to use a dedicated service token instead of a user-specific token,
so that merges are not dependent on individual user credentials and improve security and maintainability.

### Acceptance Criteria

- [ ] The daily merge process uses a dedicated service token
- [ ] Documentation is updated to reflect the new token usage
- [ ] Legacy user-specific tokens are deprecated and removed from configuration

### Additional Information

Currently, the API Hub's daily merge process uses a token that appears to be tied to a specific user. This should be changed to a dedicated service account or machine token to avoid dependency on a single user's credentials and to follow best practices for automation and security.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.