docs: document tubco pat auth workflow
This commit is contained in:
@@ -68,6 +68,7 @@ Safety rules in this repo:
|
|||||||
Authentication rule:
|
Authentication rule:
|
||||||
- prefer a personal access token for the `tubco` HTTPS remote
|
- prefer a personal access token for the `tubco` HTTPS remote
|
||||||
- do not rely on a reusable account password long term
|
- do not rely on a reusable account password long term
|
||||||
|
- store the PAT through macOS keychain using the repo-local `credential.helper=osxkeychain` setting
|
||||||
|
|
||||||
## Current Delivery Model
|
## Current Delivery Model
|
||||||
- GitHub Actions is used for CI
|
- GitHub Actions is used for CI
|
||||||
|
|||||||
@@ -698,6 +698,7 @@ docker compose restart worker</code></pre>
|
|||||||
./scripts/git_remote_target.sh set-tubco-identity</code></pre>
|
./scripts/git_remote_target.sh set-tubco-identity</code></pre>
|
||||||
<p>Switch between the normal commit identity and the TUBCO customer identity when needed.</p>
|
<p>Switch between the normal commit identity and the TUBCO customer identity when needed.</p>
|
||||||
<p>For the TUBCO HTTPS remote, prefer a personal access token instead of a reusable account password.</p>
|
<p>For the TUBCO HTTPS remote, prefer a personal access token instead of a reusable account password.</p>
|
||||||
|
<p>This repo now uses <code>credential.helper=osxkeychain</code> locally, so the TUBCO PAT should be stored in the macOS keychain instead of being embedded in remote URLs.</p>
|
||||||
</div>
|
</div>
|
||||||
<div class="box">
|
<div class="box">
|
||||||
<h3>Direct server deployment</h3>
|
<h3>Direct server deployment</h3>
|
||||||
|
|||||||
Reference in New Issue
Block a user