heroku / heroku/roadmap

Migrate from Github OAuth to Github App Model

Open
#1 2 comments 34 reactions 1 assignee Claimed by @asigismoheroku View on GitHub
Flow Security
Dominant language
No language data
Stars
225
Forks
19
PR merge metrics
No merged PRs in 30d

Description

**Motivation**
Migrate Heroku Pipeline feature from GitHub OAuth to GitHub Apps integration model to support more fine-grained authorization scopes as suggested in https://blog.heroku.com/april-2022-incident-review

**Details**
Currently users connect their GitHub repos to Heroku with their personal OAuth token. This provides Heroku access to all of user's organizations and repos. The goal of this project will be to reduce the usage of personal GitHub OAuth tokens by developing and making available a Heroku GitHub App. Users will now be able to provide access to just the repos they Heroku pipeline feature needs to connect to.

**Reference**
https://docs.github.com/en/developers/apps/getting-started-with-apps/differences-between-github-apps-and-oauth-apps

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.