Authenticate with GitHub App

bluebrown / kobold

update container image references, based on webhook events

BSD 3-Clause "New" or "Revised" License

15 stars 6 forks source link

Authenticate with GitHub App #35

Open joebowbeer opened 7 months ago

joebowbeer commented 7 months ago

Is it possible to use GitHub App authentication?

It is preferable to PAT auth

https://docs.github.com/en/enterprise-cloud@latest/apps/creating-github-apps/about-creating-github-apps/deciding-when-to-build-a-github-app#choosing-between-a-github-app-or-a-personal-access-token

bluebrown commented 7 months ago

Hi, we have already looked into that, and may want to add it. There is some caveats though:

auth mechanism needs to be able to interact with the rest api for pull requests i.e. see https://docs.github.com/en/enterprise-cloud@latest/apps/creating-github-apps/authenticating-with-a-github-app/generating-an-installation-access-token-for-a-github-app
github apps are very specific to github, so we cant use a generalized implementation

So, I wouldnt mind to add that feature. If I find the bandwidth I might look into it. Otherwise, pull requests are always welcome.

bluebrown commented 5 months ago

Hi @joebowbeer, I have released a new version of kobold with plugin support. Potentially, you could do github auth using a starlark. You can have a look here https://github.com/bluebrown/kobold?tab=readme-ov-file#extending-kobold.

bluebrown commented 2 months ago

this probably requires to expose some crypto functionality to the post hooks, so they can do stuff like certificates. Currently only this is exposed https://github.com/qri-io/starlib