Git Hub App Build Scoped Token
Build feature that issues a new GitHub App installation token for every build and revokes it after the build is finished.
Example. Configures a build-scoped token feature that issues a new GitHub App installation token for each build using a specified connection. The token will be stored in the specified parameter. It will give access only to the selected repositories with permissions granted to the GitHub App installation from the selected connection. It will be automatically revoked after the build's completion.
gitHubAppBuildScopedTokens {
parameterName = "<MY_PARAMETER_NAME>" // add "env." prefix to make it environmental variable
connectionId = "<connection ID>" // The connection should have the "allowBuildScopedTokens" parameter set to "true"
// The repository name format is "myRepo1" for "https://github.com/myUser/myRepo1"
targetRepositories = """
myRepo1
myRepo2
""".trimIndent()
}See also
Properties
ID of the GitHub App connection which will be used to issue tokens. The connection should have the allowBuildScopedTokens parameter set to true.
Name of the parameter to which the issued token will be stored. You can prefix the parameter name with env. to make it an environmental variable.
List of repositories to which issued token will have access, can't be empty. The list should contain only repositoriy names (e.g. "repo" for https://github.com/owner/repo).
Functions
Copies parameters of this object to the specified target
Creates an instance of this build feature via reflection using a no argument constructor, used during copying. Throws an error if this class doesn't have a default constructor. Subclasses can override it to create an instance without using a default constructor.
Validates this object and reports found errors to the provided consumer