Request for GH Personal Access Token for plugin project.

[whitingjr]

GitHub repositories

Hi, I am requesting permission to create a Personal Access Token on jenkinsci organization. I am a Contributor on the horreum-plugin project and cannot create the PAT.
I have been tasked with adding a workflow to keep the plugin project and the Horreum project version aligned.
The workflow needs a PAT to control incoming workflow messages.
Is it possible I be granted Maintainer permissions necessary to create a PAT or, can a PAT be created for me to use on Horreum project ?

GitHub users to have permission

whitingjr

Permission level

Maintain

Justification

Permissions necessary for creating a Personal Access Token.

[timja]

(see discussion at jenkinsci/horreum-plugin#23)

I've invited you to the organisation, you already had the maintain permission.

[whitingjr]

@timja thank you for adding me to the organization.

[whitingjr]

@timja Now that I have been added to the Team for horreum-plugin it does not allow me to create a PAT in the jenkinsci organization. For this request to progress I think I need to ping @jenkinsadmin

[dduportal]

@whitingjr you should try running the workflow with the GITHUB_TOKEN : it is generated for 1 hour with your permissions.

more information in their documentation: https://docs.github.com/en/actions/security-for-github-actions/security-guides/automatic-token-authentication

[whitingjr]

@dduportal The PR uses repository-dispatch and in this situation a remote cross organization dispatch from Horreum. Which requires a PAT not a regular GITHUB_TOKEN.

[lemeurherve]

Another solution requiring only a regular GITHUB_TOKEN could be setting up an updatecli manifest to track upstream version: https://www.updatecli.io/

[whitingjr]

@lemeurherve I'll investigate looking at this and other bots such as dependabot.

[whitingjr]

Use of a bot has solved what was needed.