docs: document tubco pat auth workflow

This commit is contained in:
Md Bayazid Bostame
2026-03-31 12:36:34 +02:00
parent 5867d85e96
commit 80cb7a409d
2 changed files with 2 additions and 0 deletions

View File

@@ -68,6 +68,7 @@ Safety rules in this repo:
Authentication rule: Authentication rule:
- prefer a personal access token for the `tubco` HTTPS remote - prefer a personal access token for the `tubco` HTTPS remote
- do not rely on a reusable account password long term - do not rely on a reusable account password long term
- store the PAT through macOS keychain using the repo-local `credential.helper=osxkeychain` setting
## Current Delivery Model ## Current Delivery Model
- GitHub Actions is used for CI - GitHub Actions is used for CI

View File

@@ -698,6 +698,7 @@ docker compose restart worker</code></pre>
./scripts/git_remote_target.sh set-tubco-identity</code></pre> ./scripts/git_remote_target.sh set-tubco-identity</code></pre>
<p>Switch between the normal commit identity and the TUBCO customer identity when needed.</p> <p>Switch between the normal commit identity and the TUBCO customer identity when needed.</p>
<p>For the TUBCO HTTPS remote, prefer a personal access token instead of a reusable account password.</p> <p>For the TUBCO HTTPS remote, prefer a personal access token instead of a reusable account password.</p>
<p>This repo now uses <code>credential.helper=osxkeychain</code> locally, so the TUBCO PAT should be stored in the macOS keychain instead of being embedded in remote URLs.</p>
</div> </div>
<div class="box"> <div class="box">
<h3>Direct server deployment</h3> <h3>Direct server deployment</h3>