[JENKINS-75485] GitHub app authentication inferring owner does not work properly with loading library

When utilizing GitHub app authentication that is installed in multiple orgs but does not have an org/owner set on the credential, loading a pipeline library does not work properly and complains about needing to specify an owner.

For this simple pipeline:

```
library identifier: 'my-library@​1.0.0', retriever: modernSCM(
github(repoOwner: 'myorg1', repository:'myrepo', credentialsId:'my-github-app'))

```

Since the credentials "my-github-app" does not have an owner specified and is installed in multiple orgs in github, I get this error:

```

java.lang.IllegalArgumentException: Found multiple installations for GitHub app ID 1234567 but none match credential owner "". Set the right owner in the credential advanced options to one of: myorg1, myorg2, myorg3
at PluginClassLoader for github-branch-source//org.jenkinsci.plugins.github_branch_source.GitHubAppCredentials.generateAppInstallationToken(GitHubAppCredentials.java:244)
at PluginClassLoader for github-branch-source//org.jenkinsci.plugins.github_branch_source.GitHubAppCredentials.getToken(GitHubAppCredentials.java:295)
at PluginClassLoader for github-branch-source//org.jenkinsci.plugins.github_branch_source.GitHubAppCredentials.getPassword(GitHubAppCredentials.java:324)
at PluginClassLoader for git-client//org.jenkinsci.plugins.gitclient.CliGitAPIImpl.createPasswordFile(CliGitAPIImpl.java:2553)
at PluginClassLoader for git-client//org.jenkinsci.plugins.gitclient.CliGitAPIImpl.launchCommandWithCredentials(CliGitAPIImpl.java:2146)
at PluginClassLoader for git-client//org.jenkinsci.plugins.gitclient.CliGitAPIImpl$1.execute(CliGitAPIImpl.java:638)
at PluginClassLoader for git//hudson.plugins.git.GitSCM.fetchFrom(GitSCM.java:997)
at PluginClassLoader for git//hudson.plugins.git.GitSCM.retrieveChanges(GitSCM.java:1240)
at PluginClassLoader for git//hudson.plugins.git.GitSCM._checkout(GitSCM.java:1311)
at PluginClassLoader for git//hudson.plugins.git.GitSCM.checkout(GitSCM.java:1278)
at PluginClassLoader for workflow-scm-step//org.jenkinsci.plugins.workflow.steps.scm.SCMStep.checkout(SCMStep.java:136)
at PluginClassLoader for pipeline-groovy-lib//org.jenkinsci.plugins.workflow.libs.SCMBasedRetriever.lambda$doRetrieve$4(SCMBasedRetriever.java:200)
at PluginClassLoader for pipeline-groovy-lib//org.jenkinsci.plugins.workflow.libs.SCMBasedRetriever.retrySCMOperation(SCMBasedRetriever.java:222)
at PluginClassLoader for pipeline-groovy-lib//org.jenkinsci.plugins.workflow.libs.SCMBasedRetriever.doRetrieve(SCMBasedRetriever.java:199)
at PluginClassLoader for pipeline-groovy-lib//org.jenkinsci.plugins.workflow.libs.SCMSourceRetriever.retrieve(SCMSourceRetriever.java:79)
at PluginClassLoader for pipeline-groovy-lib//org.jenkinsci.plugins.workflow.libs.LibraryAdder.retrieve(LibraryAdder.java:298)
at PluginClassLoader for pipeline-groovy-lib//org.jenkinsci.plugins.workflow.libs.LibraryStep$Execution.run(LibraryStep.java:245)
at PluginClassLoader for pipeline-groovy-lib//org.jenkinsci.plugins.workflow.libs.LibraryStep$Execution.run(LibraryStep.java:164)
at PluginClassLoader for workflow-step-api//org.jenkinsci.plugins.workflow.steps.SynchronousNonBlockingStepExecution.lambda$start$0(SynchronousNonBlockingStepExecution.java:49)
at PluginClassLoader for opentelemetry-api//io.opentelemetry.context.Context.lambda$wrap$1(Context.java:241)
at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:572)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:317)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642)
at java.base/java.lang.Thread.run(Thread.java:1583)

```

We are on version 1810.v913311241fa_9 of the github branch source plugin, which appears to be the latest.

Looking at the plugin source, it appears that it is using repoOwner correctly, but this apparently doesn't get used properly for some reason. It's not clear to me what the right solution is. Perhaps the wrong credentials are getting cached that don't have the repoOwner specified? I'm not sure

---
Originally reported by bksaville, imported from: GitHub app authentication inferring owner does not work properly with loading library

• status: Open
  
• priority: Major
  
• component(s): github-branch-source-plugin
  
• resolution: Unresolved
  
• votes: 0
  
• watchers: 1
  
• imported: 2025-12-02
  

Raw content of original issue

When utilizing GitHub app authentication that is installed in multiple orgs but does not have an org/owner set on the credential, loading a pipeline library does not work properly and complains about needing to specify an owner.


For this simple pipeline:



library identifier: 'my-library@1.0.0', retriever: modernSCM(

  github(repoOwner: 'myorg1', repository:'myrepo', credentialsId:'my-github-app'))





Since the credentials "my-github-app" does not have an owner specified and is installed in multiple orgs in github, I get this error:




java.lang.IllegalArgumentException: Found multiple installations for GitHub app ID 1234567 but none match credential owner "". Set the right owner in the credential advanced options to one of: myorg1, myorg2, myorg3

	at PluginClassLoader for github-branch-source//org.jenkinsci.plugins.github_branch_source.GitHubAppCredentials.generateAppInstallationToken(GitHubAppCredentials.java:244)

	at PluginClassLoader for github-branch-source//org.jenkinsci.plugins.github_branch_source.GitHubAppCredentials.getToken(GitHubAppCredentials.java:295)

	at PluginClassLoader for github-branch-source//org.jenkinsci.plugins.github_branch_source.GitHubAppCredentials.getPassword(GitHubAppCredentials.java:324)

	at PluginClassLoader for git-client//org.jenkinsci.plugins.gitclient.CliGitAPIImpl.createPasswordFile(CliGitAPIImpl.java:2553)

	at PluginClassLoader for git-client//org.jenkinsci.plugins.gitclient.CliGitAPIImpl.launchCommandWithCredentials(CliGitAPIImpl.java:2146)

	at PluginClassLoader for git-client//org.jenkinsci.plugins.gitclient.CliGitAPIImpl$1.execute(CliGitAPIImpl.java:638)

	at PluginClassLoader for git//hudson.plugins.git.GitSCM.fetchFrom(GitSCM.java:997)

	at PluginClassLoader for git//hudson.plugins.git.GitSCM.retrieveChanges(GitSCM.java:1240)

	at PluginClassLoader for git//hudson.plugins.git.GitSCM._checkout(GitSCM.java:1311)

	at PluginClassLoader for git//hudson.plugins.git.GitSCM.checkout(GitSCM.java:1278)

	at PluginClassLoader for workflow-scm-step//org.jenkinsci.plugins.workflow.steps.scm.SCMStep.checkout(SCMStep.java:136)

	at PluginClassLoader for pipeline-groovy-lib//org.jenkinsci.plugins.workflow.libs.SCMBasedRetriever.lambda$doRetrieve$4(SCMBasedRetriever.java:200)

	at PluginClassLoader for pipeline-groovy-lib//org.jenkinsci.plugins.workflow.libs.SCMBasedRetriever.retrySCMOperation(SCMBasedRetriever.java:222)

	at PluginClassLoader for pipeline-groovy-lib//org.jenkinsci.plugins.workflow.libs.SCMBasedRetriever.doRetrieve(SCMBasedRetriever.java:199)

	at PluginClassLoader for pipeline-groovy-lib//org.jenkinsci.plugins.workflow.libs.SCMSourceRetriever.retrieve(SCMSourceRetriever.java:79)

	at PluginClassLoader for pipeline-groovy-lib//org.jenkinsci.plugins.workflow.libs.LibraryAdder.retrieve(LibraryAdder.java:298)

	at PluginClassLoader for pipeline-groovy-lib//org.jenkinsci.plugins.workflow.libs.LibraryStep$Execution.run(LibraryStep.java:245)

	at PluginClassLoader for pipeline-groovy-lib//org.jenkinsci.plugins.workflow.libs.LibraryStep$Execution.run(LibraryStep.java:164)

	at PluginClassLoader for workflow-step-api//org.jenkinsci.plugins.workflow.steps.SynchronousNonBlockingStepExecution.lambda$start$0(SynchronousNonBlockingStepExecution.java:49)

	at PluginClassLoader for opentelemetry-api//io.opentelemetry.context.Context.lambda$wrap$1(Context.java:241)

	at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:572)

	at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:317)

	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144)

	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642)

	at java.base/java.lang.Thread.run(Thread.java:1583)





We are on version 1810.v913311241fa_9 of the github branch source plugin, which appears to be the latest.


Looking at the plugin source, it appears that it is using repoOwner correctly, but this apparently doesn't get used properly for some reason. It's not clear to me what the right solution is. Perhaps the wrong credentials are getting cached that don't have the repoOwner specified? I'm not sure