Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Implement rotation of token used to access go internal modules #12324

Open
2 tasks
KacperMalachowski opened this issue Nov 8, 2024 · 0 comments
Open
2 tasks
Labels
area/ci Issues or PRs related to CI related topics image-builder

Comments

@KacperMalachowski
Copy link
Contributor

Description

Rotation of read only access token for our service user, that is used to access go internal modules.
It should be done similar to our current secret rotation mechanism.

Reasons

We use that token to allow teams to acces go internal modules. We need to be sure that it's not long living token in case of leak.

Acceptance Criteria

  • Access token to go internal modules is rotated at least after 7 days
  • Current access token is replaced with short-living one.
@KacperMalachowski KacperMalachowski added area/ci Issues or PRs related to CI related topics image-builder labels Nov 8, 2024
@Sawthis Sawthis changed the title Implement rotation of tokent used to access go internal modules Implement rotation of token used to access go internal modules Nov 25, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/ci Issues or PRs related to CI related topics image-builder
Projects
None yet
Development

No branches or pull requests

1 participant