Closed itsdalmo closed 5 years ago
Will this access token be restricted to specific repositories?
It could be whatever access token one wanted it to be, but currently the one that is available is restricted to repos where concourse is installed - and I think it makes sense to stick to that one.
Should be fine, when we start having private-private repositories not open to the whole org we might need to rethink this but lets deal with that then.
Picked the
.netrc
trick up from here: https://github.com/concourse/git-resource/blob/master/assets/common.sh#L143Have validated that this works with private repositories - I opted to go with
access_token
because deploy keys can only access a single repository at a time, and I'd rather not introduce a third credential type to "working with concourse". Using an access token also has an added benefit; we don't have to change thesource=github.com
togit::github.com
for modules.