Add support for new Forgejo Authorized Integration feature. #44890
Bricklou
started this conversation in
Suggest an Idea
Replies: 1 comment
|
Interesting - to flesh out the use-case would you be wanting Renovate to take an OpenID Connect ID Token (which is a JSON Web Token) from the environment variables and then use that to authenticate to Forgejo/registries? |
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Tell us more.
Forgejo recently introduced a new security feature called "Authorized Integration" using OpenID to authorize CI to authenticate against APIs. (see https://forgejo.org/docs/latest/user/api/authorized-integrations/)
Having renovate bot supporting this feature would be a real benefit to reduce security issues related to static token stored in secrets.
All reactions